Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: Ogjn6kk1I+em40zB48K4AdALfMYdjfvWJS3znatLPTQ=
Subject key identifier: 50:43:A7:C6:CB:EE:CC:C8:B8:94:56:22:57:62:0C:B0:19:3D:F0:65
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 01974E5739E7C91F50A94961454A81178612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 098B
Signing time: Sun 08 Jun 2025 07:00:28 +0000
Manifest this update: Sun 08 Jun 2025 07:00:28 +0000
Manifest next update: Mon 09 Jun 2025 07:00:28 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: tMeR8gzINQT5hGa1BjuulfqIM4fNT9gGSx0Can1jIcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:39:e7:c9:1f:50:a9:49:61:45:4a:81:17:86:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Jun 8 07:00:28 2025 GMT
Not After : Jun 9 07:00:28 2025 GMT
Subject: CN=5043a7c6cbeeccc8b894562257620cb0193df065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:ac:28:47:fb:be:c0:ab:a0:04:bd:59:26:
25:6a:91:d7:91:7b:38:51:2d:05:27:ac:a4:b4:91:
a8:f7:66:77:c7:57:75:c9:22:c8:9c:19:6c:08:d7:
80:02:0d:1d:5a:fb:d7:37:bc:80:0f:67:6f:6c:9b:
a8:fc:04:7d:56:9c:fe:89:00:6f:e3:74:13:8e:ed:
36:ee:42:40:4f:98:8a:f8:fc:d2:81:fc:10:07:dd:
20:70:41:68:da:d4:d7:5b:b7:6c:2e:77:67:8d:90:
0e:32:85:d6:0d:a3:62:8f:5d:95:69:b8:a7:18:66:
a3:1f:3f:90:84:0a:c6:37:95:90:1f:57:f0:39:c4:
e1:23:40:6a:11:f0:ee:81:c0:f6:8d:fb:93:ab:a1:
f3:f2:59:db:cd:c5:61:ba:2b:cb:18:78:fe:fd:fe:
44:fe:95:66:42:a3:0f:d9:77:73:1f:52:21:d4:e3:
b2:b1:53:2d:52:09:26:a6:b9:1c:11:91:65:fa:55:
b0:f4:40:6a:94:42:d1:2d:92:6c:a6:4c:46:12:29:
53:83:92:76:cf:eb:2e:7b:d7:ab:02:22:b4:a9:48:
cd:31:b2:e7:b7:9e:0a:eb:84:58:89:93:bb:cb:8b:
d0:f7:2b:7c:1b:8e:26:e8:28:96:4a:75:30:6b:ad:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:A7:C6:CB:EE:CC:C8:B8:94:56:22:57:62:0C:B0:19:3D:F0:65
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4a:4a:75:9d:73:fd:c2:cc:45:1f:bc:44:8b:39:7e:51:47:
81:80:73:5f:16:95:db:50:77:1f:22:06:36:fb:4e:fd:74:69:
cf:24:46:b0:9a:ba:b1:93:6a:de:07:85:92:21:cd:78:3b:fe:
6d:d7:0e:3b:f9:bb:74:6f:df:21:62:96:ba:7d:3e:07:02:08:
9c:72:cd:df:d6:5d:4f:75:6b:0c:17:0f:76:7e:74:d8:45:5e:
4a:ed:9f:66:58:fe:b2:68:d0:5d:75:cd:80:36:e5:b7:dd:73:
f5:32:ef:73:5a:7f:c1:f7:b6:9c:83:2f:19:77:13:dc:0d:2e:
87:e1:37:82:e5:91:13:e4:41:6f:62:61:ec:84:97:14:c7:4c:
7e:46:f5:2b:33:df:49:89:6c:30:b9:60:4e:4b:62:d5:b3:4c:
73:ae:46:50:37:9f:a4:e6:82:61:21:bb:fa:05:a5:ad:5b:0b:
c7:a9:15:80:f5:1f:44:85:27:96:c4:47:b0:a8:fe:3c:82:c3:
29:1c:57:7d:f6:e7:e6:cf:b8:c2:f1:46:ee:1b:f4:16:57:1d:
ff:19:da:54:07:f8:2c:41:d1:d2:6d:96:a9:bd:89:00:0d:c8:
99:36:ec:89:d8:11:0e:12:b3:aa:93:31:8f:e7:dd:8f:76:a5:
ff:7d:d5:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOVznnyR9QqUlhRUqBF4YSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MWYyZGE2YzJkZjk0YTdkMDVhN2VlNDAxZmNmZTMxNjg2
NDBhYzMwHhcNMjUwNjA4MDcwMDI4WhcNMjUwNjA5MDcwMDI4WjAzMTEwLwYDVQQD
Eyg1MDQzYTdjNmNiZWVjY2M4Yjg5NDU2MjI1NzYyMGNiMDE5M2RmMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm+sKEf7vsCroAS9WSYlapHXkXs4
US0FJ6yktJGo92Z3x1d1ySLInBlsCNeAAg0dWvvXN7yAD2dvbJuo/AR9Vpz+iQBv
43QTju027kJAT5iK+PzSgfwQB90gcEFo2tTXW7dsLndnjZAOMoXWDaNij12Vabin
GGajHz+QhArGN5WQH1fwOcThI0BqEfDugcD2jfuTq6Hz8lnbzcVhuivLGHj+/f5E
/pVmQqMP2XdzH1Ih1OOysVMtUgkmprkcEZFl+lWw9EBqlELRLZJspkxGEilTg5J2
z+sue9erAiK0qUjNMbLnt54K64RYiZO7y4vQ9yt8G44m6CiWSnUwa62ikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBDp8bL7szIuJRWIldiDLAZPfBlMB8GA1UdIwQY
MBaAFGYfLabC35Sn0Fp+5AH8/jFoZArDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWIt
MGE3MWZiOTJkNDJhLzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWItMGE3MWZiOTJkNDJh
LzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkpKdZ1z
/cLMRR+8RIs5flFHgYBzXxaV21B3HyIGNvtO/XRpzyRGsJq6sZNq3geFkiHNeDv+
bdcOO/m7dG/fIWKWun0+BwIInHLN39ZdT3VrDBcPdn502EVeSu2fZlj+smjQXXXN
gDblt91z9TLvc1p/wfe2nIMvGXcT3A0uh+E3guWRE+RBb2Jh7ISXFMdMfkb1KzPf
SYlsMLlgTkti1bNMc65GUDefpOaCYSG7+gWlrVsLx6kVgPUfRIUnlsRHsKj+PILD
KRxXffbn5s+4wvFG7hv0Flcd/xnaVAf4LEHR0m2Wqb2JAA3ImTbsidgRDhKzqpMx
j+fdj3al/33VqQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:08:30 2025 by rpki-client