
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
File: E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json)
Hash identifier: JyQW1b4b4aNos/sR91eZI/sLDAqWcAXtrgKOEoinVOY=
Subject key identifier: 34:61:BE:F4:1E:39:48:7C:19:F5:74:E8:D7:FA:04:E4:62:B0:55:2F
Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Certificate issuer: /CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Certificate serial: 019921B0A113C0AD0A2117B9EDD43340FA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
Manifest number: 08E7
Signing time: Sun 07 Sep 2025 01:00:47 +0000
Manifest this update: Sun 07 Sep 2025 01:00:47 +0000
Manifest next update: Mon 08 Sep 2025 01:00:47 +0000
Files and hashes: 1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: jIoTK97hCBksBdn5rKjEWlN61KQd0M41Us0iqx+be0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:a1:13:c0:ad:0a:21:17:b9:ed:d4:33:40:fa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Validity
Not Before: Sep 7 01:00:47 2025 GMT
Not After : Sep 8 01:00:47 2025 GMT
Subject: CN=3461bef41e39487c19f574e8d7fa04e462b0552f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:4a:de:08:2c:74:c2:6b:0a:78:7e:3f:63:
ff:e4:1b:7d:a9:b7:cf:2b:92:7d:95:a1:57:cc:e4:
ee:fc:95:3e:3f:b0:78:d5:68:ce:03:59:06:85:69:
c3:13:36:48:46:79:05:e9:82:13:70:75:f0:63:6e:
3b:e4:ac:93:d5:2e:89:63:91:34:7e:8c:a3:ce:79:
5e:26:02:55:d1:a9:31:f5:73:4e:09:09:5e:8f:cd:
1d:19:ff:45:43:a6:cf:16:60:80:c9:6d:77:1d:04:
8f:b1:c3:fe:94:63:a0:55:d5:e1:96:2d:f2:36:8e:
03:36:57:d7:36:2a:a8:8e:a7:24:aa:7f:9b:ac:70:
cf:e4:03:b2:8f:b2:ef:c1:a0:f7:7e:44:5e:11:ec:
d6:31:6f:bd:41:67:1c:ba:1a:28:f0:15:96:f7:64:
4c:07:3f:1f:6c:32:ce:17:34:16:c6:bb:ff:a5:de:
6f:e8:71:7b:00:68:47:78:49:3a:0c:ec:ea:ee:ff:
87:47:da:f1:3e:f7:0b:67:aa:37:1b:7e:6c:23:6f:
33:54:bd:c4:aa:de:51:5d:eb:2d:31:4d:07:32:1b:
3b:94:ac:a6:d6:50:1b:2e:de:2c:3b:79:d7:6b:bd:
b0:e3:95:52:b9:46:9e:84:04:82:e8:3c:b5:10:19:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:61:BE:F4:1E:39:48:7C:19:F5:74:E8:D7:FA:04:E4:62:B0:55:2F
X509v3 Authority Key Identifier:
keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a0:51:42:de:77:32:7e:65:05:67:2e:59:42:13:ae:c4:6d:
96:bc:5e:1a:06:be:73:de:51:a1:8f:56:a0:44:04:2c:72:d7:
de:6e:c4:bb:68:5f:1c:86:4b:4e:e4:17:69:f2:40:1a:6e:32:
1b:64:71:8d:34:bb:44:2f:95:1b:37:b4:6f:16:28:cb:10:17:
5b:3a:3e:95:5f:5d:36:88:e1:61:e8:1a:04:cf:b6:f3:93:8e:
f3:b3:1b:a6:5c:e2:d7:d9:cc:e0:02:ab:3b:ec:70:09:29:49:
c1:08:86:fb:71:40:67:30:fd:4d:69:a3:60:37:ac:1e:1e:8f:
fd:ff:c6:eb:b6:16:07:0a:e7:ba:49:41:13:62:bf:a1:42:a9:
78:2b:62:8b:9e:50:e7:65:4f:02:ed:a9:b9:3a:c1:b5:40:14:
01:c5:45:e8:98:3f:8a:02:dd:54:2d:ab:42:d6:33:f7:b9:af:
62:75:fe:9c:94:86:29:df:fe:34:98:95:55:4a:76:17:d7:a0:
d0:89:b5:5c:69:19:cb:9c:5a:87:34:fa:4f:dc:4f:87:db:d2:
20:89:12:3b:53:d4:e0:74:bd:e9:d9:be:65:78:3e:de:fb:7d:
72:6d:fc:f7:2e:ad:02:cb:5a:07:7c:4b:6b:d3:b0:8f:f5:72:
39:94:c8:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsKETwK0KIRe57dQzQPqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjY1MTc5YTg1NWJiMGE2ZGRlNTY2MjE2MmIyYjViYTk3
NDg3MTAwHhcNMjUwOTA3MDEwMDQ3WhcNMjUwOTA4MDEwMDQ3WjAzMTEwLwYDVQQD
EygzNDYxYmVmNDFlMzk0ODdjMTlmNTc0ZThkN2ZhMDRlNDYyYjA1NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQxK3ggsdMJrCnh+P2P/5Bt9qbfP
K5J9laFXzOTu/JU+P7B41WjOA1kGhWnDEzZIRnkF6YITcHXwY2475KyT1S6JY5E0
foyjznleJgJV0akx9XNOCQlej80dGf9FQ6bPFmCAyW13HQSPscP+lGOgVdXhli3y
No4DNlfXNiqojqckqn+brHDP5AOyj7LvwaD3fkReEezWMW+9QWccuhoo8BWW92RM
Bz8fbDLOFzQWxrv/pd5v6HF7AGhHeEk6DOzq7v+HR9rxPvcLZ6o3G35sI28zVL3E
qt5RXestMU0HMhs7lKym1lAbLt4sO3nXa72w45VSuUaehASC6Dy1EBnKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRhvvQeOUh8GfV06Nf6BORisFUvMB8GA1UdIwQY
MBaAFBP2UXmoVbsKbd5WYhYrK1updIcQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9aUmVhaFZ1d3B0M2xaaUZpc3JXNmwwaHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTM4OTItZWE4OC00MDU4LWI5OWYt
MjFmZGZhMzYwN2M5LzEvRV9aUmVhaFZ1d3B0M2xaaUZpc3JXNmwwaHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81ZTM4OTItZWE4OC00MDU4LWI5OWYtMjFmZGZhMzYwN2M5
LzEvRV9aUmVhaFZ1d3B0M2xaaUZpc3JXNmwwaHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6BRQt53
Mn5lBWcuWUITrsRtlrxeGga+c95RoY9WoEQELHLX3m7Eu2hfHIZLTuQXafJAGm4y
G2RxjTS7RC+VGze0bxYoyxAXWzo+lV9dNojhYegaBM+285OO87Mbplzi19nM4AKr
O+xwCSlJwQiG+3FAZzD9TWmjYDesHh6P/f/G67YWBwrnuklBE2K/oUKpeCtii55Q
52VPAu2puTrBtUAUAcVF6Jg/igLdVC2rQtYz97mvYnX+nJSGKd/+NJiVVUp2F9eg
0Im1XGkZy5xahzT6T9xPh9vSIIkSO1PU4HS96dm+ZXg+3vt9cm389y6tAstaB3xL
a9Owj/VyOZTIqA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:03 2025 by rpki-client