
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
File: RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json)
Hash identifier: NLgmt8iitJUvM50r9mc5zcDpu50MV8/d34sJjiv5puY=
Subject key identifier: D5:7F:FB:F3:66:F3:F2:F4:90:62:3C:3A:CE:0E:23:AC:77:A4:A2:2A
Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
Certificate issuer: /CN=459ccc1bb01160686806db35a93351b21b3e60dc
Certificate serial: 019922FAA3527005D9108D58EB2A3545D359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
Manifest number: 13E7
Signing time: Sun 07 Sep 2025 07:01:15 +0000
Manifest this update: Sun 07 Sep 2025 07:01:15 +0000
Manifest next update: Mon 08 Sep 2025 07:01:15 +0000
Files and hashes: 1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: /xZgoILpFyMptOsqtHpzYaZpDAAhX7bs8cT0QeaIMCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a3:52:70:05:d9:10:8d:58:eb:2a:35:45:d3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc
Validity
Not Before: Sep 7 07:01:15 2025 GMT
Not After : Sep 8 07:01:15 2025 GMT
Subject: CN=d57ffbf366f3f2f490623c3ace0e23ac77a4a22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:f6:02:25:62:8e:ce:49:59:cb:cc:1e:72:
b9:b7:93:9d:f2:90:f8:62:61:c1:96:8b:c4:74:9f:
a9:60:0b:31:e1:f6:b2:49:9f:10:7b:b4:7d:ff:e5:
39:a2:9f:ed:91:c3:e3:44:68:e8:3c:07:11:18:69:
64:68:45:b6:76:9f:05:26:6d:f4:94:70:03:be:14:
6b:22:cb:1d:62:5e:64:fe:51:89:1a:64:0e:d5:2e:
ae:ad:59:dc:45:97:b1:e7:15:14:12:f6:a5:dd:23:
a1:28:3a:35:81:99:8f:af:2e:04:9b:d5:9b:aa:1b:
0c:4a:8e:8b:ba:f7:70:41:3f:17:4e:31:13:1d:45:
29:9b:c9:6d:d7:95:6e:9d:83:24:2a:29:ca:ce:10:
b0:5b:61:b6:96:15:fa:c8:96:03:46:c9:9e:72:96:
7a:7a:4a:70:91:37:41:f1:0a:51:93:1b:54:7d:7e:
a0:8c:eb:96:93:fc:d6:36:d0:48:d7:d4:2b:7b:cf:
e9:70:a1:97:37:4e:cd:51:32:62:86:b1:7c:7d:ff:
20:69:27:3f:d6:1f:87:d3:07:55:e8:0b:8c:08:0e:
8d:70:0f:64:d8:fe:d1:a8:70:1d:a5:67:30:23:dc:
96:4c:8e:24:53:1b:8d:09:fd:26:15:da:85:ec:06:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:FB:F3:66:F3:F2:F4:90:62:3C:3A:CE:0E:23:AC:77:A4:A2:2A
X509v3 Authority Key Identifier:
keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:57:df:c1:96:6e:63:74:e2:6d:b8:b9:c0:92:7c:31:93:42:
82:03:0d:11:b9:98:be:88:73:88:ef:dc:bf:ef:d9:41:9b:42:
8b:62:13:63:66:dd:8b:85:9d:ae:92:1d:f1:58:28:f4:3a:a6:
d5:fe:e1:60:c6:07:7a:a5:59:86:85:4f:a0:b2:94:1e:4a:c8:
fa:1d:39:76:2e:96:4d:b8:11:3c:7b:ec:f8:44:50:cc:55:3b:
8f:79:11:70:fa:4b:91:97:7e:5b:2f:3a:ff:e0:c2:93:b8:cf:
f7:c2:a5:26:cf:4d:1b:93:77:71:e3:65:68:82:29:23:f3:f5:
9b:76:21:a9:e6:ae:a4:51:b4:3f:26:c5:2c:52:bf:02:52:70:
69:d1:0d:82:af:26:38:ba:ae:a7:a9:ec:ab:ad:fb:5f:ee:8a:
c6:82:0c:eb:1a:04:c5:20:35:30:fa:9e:9f:bc:bb:b5:49:86:
c8:85:e4:bb:cd:8a:a7:d5:2e:d8:e5:5c:3c:38:43:60:c5:7b:
5e:ac:8b:e1:fa:a1:ca:12:6b:04:e2:fa:4d:88:e2:a3:b5:03:
d3:8b:84:2c:4c:e5:70:37:d4:bf:e5:3b:9a:a9:68:72:7f:b7:
74:c2:82:1e:1c:b0:41:0c:5a:dd:be:2a:77:37:c2:bd:8d:71:
8c:6a:ee:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+qNScAXZEI1Y6yo1RdNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWNjYzFiYjAxMTYwNjg2ODA2ZGIzNWE5MzM1MWIyMWIz
ZTYwZGMwHhcNMjUwOTA3MDcwMTE1WhcNMjUwOTA4MDcwMTE1WjAzMTEwLwYDVQQD
EyhkNTdmZmJmMzY2ZjNmMmY0OTA2MjNjM2FjZTBlMjNhYzc3YTRhMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEb2AiVijs5JWcvMHnK5t5Od8pD4
YmHBlovEdJ+pYAsx4faySZ8Qe7R9/+U5op/tkcPjRGjoPAcRGGlkaEW2dp8FJm30
lHADvhRrIssdYl5k/lGJGmQO1S6urVncRZex5xUUEval3SOhKDo1gZmPry4Em9Wb
qhsMSo6LuvdwQT8XTjETHUUpm8lt15VunYMkKinKzhCwW2G2lhX6yJYDRsmecpZ6
ekpwkTdB8QpRkxtUfX6gjOuWk/zWNtBI19Qre8/pcKGXN07NUTJihrF8ff8gaSc/
1h+H0wdV6AuMCA6NcA9k2P7RqHAdpWcwI9yWTI4kUxuNCf0mFdqF7AbIoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV/+/Nm8/L0kGI8Os4OI6x3pKIqMB8GA1UdIwQY
MBaAFEWczBuwEWBoaAbbNakzUbIbPmDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MGQzMzgtNGIzNi00MDU0LWI0YmMt
NjQ3M2IwOTJhYWRkLzEvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MGQzMzgtNGIzNi00MDU0LWI0YmMtNjQ3M2IwOTJhYWRk
LzEvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElffwZZu
Y3Tibbi5wJJ8MZNCggMNEbmYvohziO/cv+/ZQZtCi2ITY2bdi4WdrpId8Vgo9Dqm
1f7hYMYHeqVZhoVPoLKUHkrI+h05di6WTbgRPHvs+ERQzFU7j3kRcPpLkZd+Wy86
/+DCk7jP98KlJs9NG5N3ceNlaIIpI/P1m3YhqeaupFG0PybFLFK/AlJwadENgq8m
OLqup6nsq637X+6KxoIM6xoExSA1MPqen7y7tUmGyIXku82Kp9Uu2OVcPDhDYMV7
XqyL4fqhyhJrBOL6TYjio7UD04uELEzlcDfUv+U7mqlocn+3dMKCHhywQQxa3b4q
dzfCvY1xjGruUA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:56 2025 by rpki-client