Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: W2pjf8O35TMg5hic+kANck1gpX1zyjilWc5d6vViC5o=
Subject key identifier: 73:9F:25:67:8B:F8:2A:BD:CF:50:88:39:BB:AE:BA:E4:02:95:C8:D3
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 01975234D87009D7AB0157EF4A02F007FE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 01:01:24 +0000
Manifest this update: Mon 09 Jun 2025 01:01:24 +0000
Manifest next update: Tue 10 Jun 2025 01:01:24 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: eDCzJ/jVv5yQlgHro0GxjKpXSbJpT154Sg/kp8Wicwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:d8:70:09:d7:ab:01:57:ef:4a:02:f0:07:fe:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Jun 9 01:01:24 2025 GMT
Not After : Jun 10 01:01:24 2025 GMT
Subject: CN=739f25678bf82abdcf508839bbaebae40295c8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:ce:9d:70:5f:4f:ee:b3:88:60:a3:ed:af:
43:c1:89:8e:b7:0c:43:be:a8:7d:24:66:8f:88:96:
e9:99:2d:aa:d6:1d:78:88:87:e3:62:31:da:e2:69:
ff:fa:0e:53:8e:13:10:cc:c1:04:14:5a:9c:c5:6f:
4a:b5:1a:c8:1e:a9:a2:de:f5:d3:1f:dd:18:6f:55:
8d:2b:2e:d0:b2:07:1c:f0:57:79:db:d6:19:3e:13:
68:79:9f:4f:83:e5:80:05:b3:c3:93:77:f0:2e:ce:
05:1b:22:7c:f8:a4:7e:af:e9:07:d9:eb:fb:5e:1a:
97:af:36:bf:70:c5:8c:42:1d:1c:88:19:db:0d:ed:
be:ce:34:b3:d7:2c:38:9a:b4:7c:cd:08:a4:3e:e0:
74:89:15:6a:0d:4d:0c:ae:5f:bc:4b:09:04:67:b0:
3a:d3:6d:71:49:c9:46:dc:fd:98:28:56:9d:4b:02:
84:70:c9:99:7d:33:8c:d2:f3:5f:0e:4e:f6:da:77:
7e:64:e0:b8:5b:b5:f2:99:9b:0c:40:17:a9:47:83:
09:98:c0:ac:81:da:57:44:64:74:b7:f8:2f:2d:9b:
cf:e9:12:76:88:0b:d7:88:27:8e:63:f3:8a:87:72:
40:e9:39:db:7a:64:10:24:60:24:58:28:c2:65:bf:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:25:67:8B:F8:2A:BD:CF:50:88:39:BB:AE:BA:E4:02:95:C8:D3
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7f:44:10:ec:1c:ff:f9:9b:6d:ee:de:04:e6:97:4b:38:12:
d7:cc:24:b8:5d:83:17:1f:1e:ee:a7:eb:65:27:a6:79:4d:10:
ee:11:2c:cb:12:1e:c1:14:17:96:97:e9:b4:f8:5f:f7:e8:41:
74:ff:8a:f2:bc:d2:40:52:8c:2d:9d:ab:06:3d:d6:b2:54:ff:
c5:9f:63:b5:29:24:1c:ee:98:34:16:3d:8f:05:99:c9:0c:d9:
5f:10:65:d8:6f:06:a1:8c:61:18:3f:28:77:c9:ec:09:39:49:
b7:6c:fd:49:f1:35:4f:78:87:ff:f3:8d:2d:91:92:25:1e:e1:
9a:e6:fa:d4:46:1a:8e:67:1a:26:14:c4:25:4f:e7:63:ba:ff:
38:ea:a0:0f:53:04:cb:1c:c5:0a:ae:0f:e9:ac:4e:75:a3:b8:
1c:d4:4c:64:e6:c3:86:4d:4a:32:3a:0b:5f:a3:e7:35:b9:da:
9b:4b:e2:3d:1c:fc:91:0f:86:c2:54:49:b9:40:4d:12:10:44:
f7:0c:81:51:0e:5b:a1:e5:6e:68:cd:8a:db:97:61:4c:d0:c4:
70:88:03:ad:2d:d8:ca:d6:2b:13:6b:46:27:86:dd:94:1d:89:
3f:bb:47:d0:e4:c3:f6:d2:e8:f2:2e:ee:f5:de:d8:3b:9a:90:
bc:45:b0:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSNNhwCderAVfvSgLwB/6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZmM4ZDZjZDQ5ZjlhZmUyNjRkNTQyZTlhOTYxNGYzZDRh
YzFjOWQwHhcNMjUwNjA5MDEwMTI0WhcNMjUwNjEwMDEwMTI0WjAzMTEwLwYDVQQD
Eyg3MzlmMjU2NzhiZjgyYWJkY2Y1MDg4MzliYmFlYmFlNDAyOTVjOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcDOnXBfT+6ziGCj7a9DwYmOtwxD
vqh9JGaPiJbpmS2q1h14iIfjYjHa4mn/+g5TjhMQzMEEFFqcxW9KtRrIHqmi3vXT
H90Yb1WNKy7Qsgcc8Fd529YZPhNoeZ9Pg+WABbPDk3fwLs4FGyJ8+KR+r+kH2ev7
XhqXrza/cMWMQh0ciBnbDe2+zjSz1yw4mrR8zQikPuB0iRVqDU0Mrl+8SwkEZ7A6
021xSclG3P2YKFadSwKEcMmZfTOM0vNfDk722nd+ZOC4W7XymZsMQBepR4MJmMCs
gdpXRGR0t/gvLZvP6RJ2iAvXiCeOY/OKh3JA6TnbemQQJGAkWCjCZb8fOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOfJWeL+Cq9z1CIObuuuuQClcjTMB8GA1UdIwQY
MBaAFM38jWzUn5r+Jk1ULpqWFPPUrBydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hYWI5MTUtZDVmZC00NTAzLWIzYjUt
ZjI2MDk5ZTExNDgzLzEvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hYWI5MTUtZDVmZC00NTAzLWIzYjUtZjI2MDk5ZTExNDgz
LzEvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn9EEOwc
//mbbe7eBOaXSzgS18wkuF2DFx8e7qfrZSemeU0Q7hEsyxIewRQXlpfptPhf9+hB
dP+K8rzSQFKMLZ2rBj3WslT/xZ9jtSkkHO6YNBY9jwWZyQzZXxBl2G8GoYxhGD8o
d8nsCTlJt2z9SfE1T3iH//ONLZGSJR7hmub61EYajmcaJhTEJU/nY7r/OOqgD1ME
yxzFCq4P6axOdaO4HNRMZObDhk1KMjoLX6PnNbnam0viPRz8kQ+GwlRJuUBNEhBE
9wyBUQ5boeVuaM2K25dhTNDEcIgDrS3YytYrE2tGJ4bdlB2JP7tH0OTD9tLo8i7u
9d7YO5qQvEWwoQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:20:22 2025 by rpki-client