Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: h45p09AUd1gIA77+mBwBqhVMbNkPpSsvjAz5+yLqkcA=
Subject key identifier: A2:57:D8:E4:FD:FF:1B:8D:A9:BC:B7:22:61:BF:73:27:74:BB:82:AB
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 0199239EFE59EB3F9A6DF2EC3A909842B2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 15FF
Signing time: Sun 07 Sep 2025 10:00:46 +0000
Manifest this update: Sun 07 Sep 2025 10:00:46 +0000
Manifest next update: Mon 08 Sep 2025 10:00:46 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: fyMmUIi9fpxcFFqyv13fC3CZM2jhFRVv4jnSmk+iR3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:fe:59:eb:3f:9a:6d:f2:ec:3a:90:98:42:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Sep 7 10:00:46 2025 GMT
Not After : Sep 8 10:00:46 2025 GMT
Subject: CN=a257d8e4fdff1b8da9bcb72261bf732774bb82ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:a6:08:3e:20:47:9a:b6:1c:c1:5b:82:70:
17:5d:ba:0e:02:27:83:15:e8:d8:6d:29:21:33:0e:
c3:a8:9d:c3:98:88:63:c8:d8:5a:60:1a:61:37:6f:
dd:5d:3d:68:40:b4:44:58:3f:00:20:86:4d:1a:12:
61:c1:ca:3b:ea:a4:d2:63:7d:18:54:5f:c6:c4:90:
a0:5c:57:f9:ba:aa:6d:2b:a4:42:3e:87:ca:98:fd:
07:e7:88:29:d5:c0:92:4b:b9:0b:0d:b1:b7:a6:84:
01:2b:78:a2:d9:e0:2c:97:de:15:ee:3e:b1:ef:6b:
f3:5f:4e:91:d7:86:32:08:dc:67:02:d3:6a:61:7b:
ef:92:e5:83:ff:a5:0f:58:f4:ec:e4:23:9a:a9:1c:
ac:70:6a:87:1a:3a:bd:cc:03:5d:de:8b:2b:88:50:
cf:7d:95:0d:59:f0:51:ae:1c:d4:c9:cd:dc:4c:92:
bc:97:de:4d:de:50:1c:9b:bd:84:bd:10:cb:79:b7:
b0:6c:74:2e:c8:81:d5:f8:84:77:93:f1:89:d4:96:
33:d4:a1:30:7d:2e:11:9a:fa:cb:5d:76:4a:ea:83:
74:58:57:42:97:34:14:58:be:91:7e:dc:d1:00:56:
b0:af:75:3b:59:70:6f:3b:80:58:02:c1:1d:1e:d5:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:57:D8:E4:FD:FF:1B:8D:A9:BC:B7:22:61:BF:73:27:74:BB:82:AB
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:e7:8c:d4:d5:af:5f:f2:66:8c:e2:ed:a6:91:50:d6:a7:
c7:8c:77:df:1c:ff:b6:90:fd:92:8c:29:6a:bb:aa:16:2a:b8:
63:a8:91:50:d7:1b:00:f0:ef:cb:5b:8d:86:c0:9f:05:4d:2d:
e6:4b:a5:ce:13:01:f6:62:16:e8:06:60:93:65:cd:32:c4:9e:
f1:2b:10:53:08:12:c5:5e:3e:3c:bf:4e:b4:65:e0:39:bb:14:
d2:b5:b0:c0:cd:3d:99:af:70:91:bb:ca:50:7c:1d:fc:64:a4:
84:ea:db:e4:f0:da:4a:4d:60:08:88:c8:fb:86:5f:49:09:27:
24:6e:7a:da:13:ad:71:70:fe:0f:2c:3d:2c:38:bf:0c:16:9e:
22:dd:79:53:a9:ab:77:00:b9:f5:b1:b6:c6:72:11:b2:1d:3b:
26:b3:01:93:59:3d:99:ad:ca:40:71:9c:97:72:82:96:31:57:
16:92:35:29:77:2e:fd:60:74:aa:00:f1:34:37:d2:87:4d:05:
05:c7:8f:6d:a5:10:1a:6e:67:5b:3a:e9:d9:7b:47:06:fe:93:
51:75:b3:ab:df:1f:58:5a:82:c5:c6:68:38:49:a8:c5:d1:88:
0d:35:39:80:f4:13:a5:c6:b6:cd:a2:36:51:8b:dd:80:53:c1:
49:a8:4e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnv5Z6z+abfLsOpCYQrLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOTc1MTEwYzczOWI3NGY4NGQ0MTcwM2M0ODgyODMyNzI3
YmRkY2MwHhcNMjUwOTA3MTAwMDQ2WhcNMjUwOTA4MTAwMDQ2WjAzMTEwLwYDVQQD
EyhhMjU3ZDhlNGZkZmYxYjhkYTliY2I3MjI2MWJmNzMyNzc0YmI4MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl42mCD4gR5q2HMFbgnAXXboOAieD
FejYbSkhMw7DqJ3DmIhjyNhaYBphN2/dXT1oQLREWD8AIIZNGhJhwco76qTSY30Y
VF/GxJCgXFf5uqptK6RCPofKmP0H54gp1cCSS7kLDbG3poQBK3ii2eAsl94V7j6x
72vzX06R14YyCNxnAtNqYXvvkuWD/6UPWPTs5COaqRyscGqHGjq9zANd3osriFDP
fZUNWfBRrhzUyc3cTJK8l95N3lAcm72EvRDLebewbHQuyIHV+IR3k/GJ1JYz1KEw
fS4RmvrLXXZK6oN0WFdClzQUWL6RftzRAFawr3U7WXBvO4BYAsEdHtWc9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJX2OT9/xuNqby3ImG/cyd0u4KrMB8GA1UdIwQY
MBaAFM+XURDHObdPhNQXA8SIKDJye93MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQt
ZGFiNjhmZDg3ODZiLzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQtZGFiNjhmZDg3ODZi
LzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVLnjNTV
r1/yZozi7aaRUNanx4x33xz/tpD9kowparuqFiq4Y6iRUNcbAPDvy1uNhsCfBU0t
5kulzhMB9mIW6AZgk2XNMsSe8SsQUwgSxV4+PL9OtGXgObsU0rWwwM09ma9wkbvK
UHwd/GSkhOrb5PDaSk1gCIjI+4ZfSQknJG562hOtcXD+Dyw9LDi/DBaeIt15U6mr
dwC59bG2xnIRsh07JrMBk1k9ma3KQHGcl3KCljFXFpI1KXcu/WB0qgDxNDfSh00F
BcePbaUQGm5nWzrp2XtHBv6TUXWzq98fWFqCxcZoOEmoxdGIDTU5gPQTpca2zaI2
UYvdgFPBSahO7A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:26 2025 by rpki-client