Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json)
Hash identifier: wG24NQyADKBZEFXGkE0KKYKQvwPmVd6TDva24mBeGr0=
Subject key identifier: B2:D9:05:14:F1:3C:6C:39:7C:CA:5B:EC:8A:54:0E:52:CB:24:F7:B3
Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16
Certificate serial: 01992330E0D1032FC73C2C0FD841BE581AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
Manifest number: 64
Signing time: Sun 07 Sep 2025 08:00:29 +0000
Manifest this update: Sun 07 Sep 2025 08:00:29 +0000
Manifest next update: Mon 08 Sep 2025 08:00:29 +0000
Files and hashes: 1: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: ElJMg3N9fYQmLD2JqMqflTL/BoFSi0EUZXug4LMDEM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e0:d1:03:2f:c7:3c:2c:0f:d8:41:be:58:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16
Validity
Not Before: Sep 7 08:00:29 2025 GMT
Not After : Sep 8 08:00:29 2025 GMT
Subject: CN=b2d90514f13c6c397cca5bec8a540e52cb24f7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:f5:93:9c:d4:4c:ab:09:b1:78:0e:41:f6:
da:dc:c0:fb:2b:7a:01:89:ab:e4:b4:71:83:d0:32:
ec:b5:c5:ea:14:d7:96:a1:09:af:c3:a0:9c:53:5f:
20:14:f6:4a:d1:7b:58:74:90:ce:a9:66:64:4a:61:
02:e8:db:c8:23:4d:da:0c:44:93:6f:4c:f4:93:b9:
e4:70:8b:e0:a8:85:68:dc:dc:06:ad:f7:a3:41:f2:
8d:e9:9e:b6:a2:ea:de:eb:d6:f0:71:95:81:96:f6:
95:bd:c8:98:ea:64:1c:2b:0d:16:79:f5:e8:b9:6b:
47:b9:9b:84:b5:19:32:57:21:6a:be:4d:a9:22:6d:
97:cb:23:d6:b9:97:c0:47:a7:03:cb:bd:21:99:df:
5d:cb:b1:d6:8b:33:5a:7c:3b:76:41:d8:5c:09:6d:
75:79:5c:ec:ab:86:ab:48:23:d1:fc:ea:fa:77:6d:
41:19:41:83:d2:55:11:ab:57:ee:fd:e1:11:8f:19:
5c:a6:1d:b9:25:e7:95:c0:53:f7:fc:41:8e:f8:48:
81:47:75:55:2b:76:a7:51:8b:7b:b7:5a:b7:c0:34:
c7:79:11:ca:0d:f7:46:23:44:ad:22:2a:ab:d3:6d:
39:8c:58:42:d8:42:12:f4:13:1d:73:42:98:f5:00:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:05:14:F1:3C:6C:39:7C:CA:5B:EC:8A:54:0E:52:CB:24:F7:B3
X509v3 Authority Key Identifier:
keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:75:a5:0c:20:32:95:00:55:df:43:ae:db:03:5b:04:de:f3:
6a:01:e9:01:20:db:33:3e:2d:5b:0c:a4:59:f9:f5:c8:59:4a:
cf:e6:07:c7:12:e2:1b:97:e3:1f:4a:5a:e7:1d:08:14:2b:2f:
53:cd:40:75:3a:b7:d6:4a:79:ae:79:e5:1e:e5:d0:74:59:3f:
05:93:73:ac:aa:a4:25:b7:45:f8:a0:26:c8:d1:69:01:c9:31:
64:c5:37:c4:ef:d2:d8:30:f2:7a:82:d3:ec:70:22:c8:f9:17:
5b:5a:4e:a5:d2:00:6e:f0:84:76:2f:35:28:66:b4:eb:d9:4c:
34:14:c7:65:f3:4d:ca:f8:d1:6d:61:26:19:ba:c8:81:97:a3:
22:04:5b:21:23:9c:a5:a2:87:3b:0e:3b:54:39:51:49:9b:ec:
f9:18:ab:48:81:42:d2:3d:da:18:da:23:24:b9:f3:ce:b7:f6:
6a:d9:20:ff:dc:aa:e7:c1:97:17:ab:d3:f0:11:a3:1e:6c:a2:
26:56:44:49:7b:8a:3f:54:f3:43:29:be:e5:42:97:19:f8:b4:
ea:90:ba:0f:fb:1e:7c:40:88:22:bb:51:45:c2:da:2f:5b:50:
82:c9:e8:3a:b7:7d:a8:7f:8f:a8:02:82:c6:7d:50:1e:45:7f:
65:bb:f6:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMODRAy/HPCwP2EG+WBqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjQ0NmZlNDQ3MmJhNjk0ZmMyMjk4Mjk4YTRmOGQxNTU5
OTVlMTYwHhcNMjUwOTA3MDgwMDI5WhcNMjUwOTA4MDgwMDI5WjAzMTEwLwYDVQQD
EyhiMmQ5MDUxNGYxM2M2YzM5N2NjYTViZWM4YTU0MGU1MmNiMjRmN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y71k5zUTKsJsXgOQfba3MD7K3oB
iavktHGD0DLstcXqFNeWoQmvw6CcU18gFPZK0XtYdJDOqWZkSmEC6NvII03aDEST
b0z0k7nkcIvgqIVo3NwGrfejQfKN6Z62oure69bwcZWBlvaVvciY6mQcKw0WefXo
uWtHuZuEtRkyVyFqvk2pIm2XyyPWuZfAR6cDy70hmd9dy7HWizNafDt2QdhcCW11
eVzsq4arSCPR/Or6d21BGUGD0lURq1fu/eERjxlcph25JeeVwFP3/EGO+EiBR3VV
K3anUYt7t1q3wDTHeRHKDfdGI0StIiqr0205jFhC2EIS9BMdc0KY9QDCMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLZBRTxPGw5fMpb7IpUDlLLJPezMB8GA1UdIwQY
MBaAFM70Rv5EcrppT8Ipgpik+NFVmV4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODkt
OTAxMDA2YmMxZmQ4LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODktOTAxMDA2YmMxZmQ4
LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnWlDCAy
lQBV30Ou2wNbBN7zagHpASDbMz4tWwykWfn1yFlKz+YHxxLiG5fjH0pa5x0IFCsv
U81AdTq31kp5rnnlHuXQdFk/BZNzrKqkJbdF+KAmyNFpAckxZMU3xO/S2DDyeoLT
7HAiyPkXW1pOpdIAbvCEdi81KGa069lMNBTHZfNNyvjRbWEmGbrIgZejIgRbISOc
paKHOw47VDlRSZvs+RirSIFC0j3aGNojJLnzzrf2atkg/9yq58GXF6vT8BGjHmyi
JlZESXuKP1TzQym+5UKXGfi06pC6D/sefECIIrtRRcLaL1tQgsnoOrd9qH+PqAKC
xn1QHkV/Zbv29g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:28 2025 by rpki-client