Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File: gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier: SidrcNaOBkHLLuMRFT/45OxMOuP0eLOJ+fpqCWxQWZ0=
Subject key identifier: 9C:02:FD:79:FA:B6:9C:0F:A6:EC:2B:21:6C:0C:F7:07:82:B1:FE:03
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer: /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial: 019921B218DA55EE8119D7C9B932F28BB660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number: 0F36
Signing time: Sun 07 Sep 2025 01:02:23 +0000
Manifest this update: Sun 07 Sep 2025 01:02:23 +0000
Manifest next update: Mon 08 Sep 2025 01:02:23 +0000
Files and hashes: 1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: cBm4IBC+Wry7S2t6dxZx4c3GgUjVhwlL6wtybI8Kpkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:18:da:55:ee:81:19:d7:c9:b9:32:f2:8b:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Validity
Not Before: Sep 7 01:02:23 2025 GMT
Not After : Sep 8 01:02:23 2025 GMT
Subject: CN=9c02fd79fab69c0fa6ec2b216c0cf70782b1fe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:77:f8:f9:14:b7:38:7a:64:48:25:60:00:
6c:56:e5:a3:0a:05:a7:56:1a:89:5d:4f:78:d3:a6:
b9:cd:a8:ef:1d:35:fa:7b:46:c4:af:36:4a:0c:a0:
9d:e0:0a:cf:93:26:eb:39:86:e2:0b:1e:46:a0:8d:
40:e5:7c:8f:ae:37:fa:0d:97:bb:d7:f2:32:3a:f1:
4b:58:42:fb:e1:47:75:93:c6:8d:a2:65:15:b7:e7:
3e:c0:33:50:84:88:69:02:61:1f:8a:92:fb:89:f0:
ac:1c:33:16:5d:6a:22:53:6f:62:fd:7d:e0:6f:38:
4e:04:02:95:e7:0d:33:c6:85:78:e8:b3:8c:fc:52:
97:71:a0:89:5b:2d:17:ce:e3:99:40:a7:b2:a2:ff:
a8:a1:3d:18:3f:05:a9:c7:c1:fa:39:40:aa:cb:35:
ea:5f:e9:71:9e:f9:5a:a7:91:0e:fa:00:09:1f:f9:
71:f6:56:b6:7e:92:cc:5c:f3:92:d6:0b:92:23:34:
fa:1f:83:84:2b:f8:6e:00:57:0a:8e:b0:4b:92:b9:
4a:39:5b:c0:73:d9:9e:b3:6e:32:7b:c4:3e:c9:e2:
69:d6:e5:31:e6:5d:4c:68:95:cd:1c:dc:6d:f9:fa:
5c:30:67:1a:01:33:d0:e9:63:fb:f2:69:2b:00:6c:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:FD:79:FA:B6:9C:0F:A6:EC:2B:21:6C:0C:F7:07:82:B1:FE:03
X509v3 Authority Key Identifier:
keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:65:f5:84:0f:03:ca:11:be:1f:7c:27:cb:99:9e:44:19:a8:
9a:30:ea:28:18:45:5a:2c:a3:e2:65:d5:d2:26:6e:20:4f:7a:
25:28:51:9f:91:eb:c9:5b:42:34:34:43:e1:7e:eb:38:aa:c5:
ba:0f:f5:6a:76:bb:ca:7c:da:3f:23:f5:79:82:0f:ef:57:13:
df:79:20:dd:06:88:81:ef:de:20:c5:92:59:61:6c:57:f0:85:
0e:ce:6c:e6:32:fc:6b:7f:e3:5b:e6:46:2b:cc:6a:9a:03:5b:
e2:c8:c3:c7:4c:b3:b6:a6:89:eb:fc:78:db:8d:58:c6:b3:86:
d8:17:2d:4d:d0:19:6f:52:df:03:72:1b:1d:a8:c7:59:82:ee:
31:5d:41:8d:b8:a6:63:6e:d6:d6:52:35:1c:88:20:b1:d3:9a:
4d:8b:50:15:59:4f:34:8e:f9:c8:f9:b7:6d:47:c2:3b:5e:38:
9e:f1:3c:84:d7:66:06:f9:f7:e3:88:5b:a2:1c:c4:4d:55:ea:
2d:bb:b8:39:d7:22:8f:ce:11:0c:87:dc:49:8b:90:a1:41:c8:
b3:04:83:31:b6:0a:7b:ef:62:1c:19:1c:6a:9c:f3:c4:a5:70:
9f:ec:2f:92:d6:57:f4:fe:fe:e9:3c:7e:8f:70:ec:8e:7d:96:
bc:10:0e:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhshjaVe6BGdfJuTLyi7ZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzc5OWU3YzhkOTJhODVjZTk1MDhjMWJlMWEzZjM4MDk1
MDk1OTEwHhcNMjUwOTA3MDEwMjIzWhcNMjUwOTA4MDEwMjIzWjAzMTEwLwYDVQQD
Eyg5YzAyZmQ3OWZhYjY5YzBmYTZlYzJiMjE2YzBjZjcwNzgyYjFmZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVV3+PkUtzh6ZEglYABsVuWjCgWn
VhqJXU9406a5zajvHTX6e0bErzZKDKCd4ArPkybrOYbiCx5GoI1A5XyPrjf6DZe7
1/IyOvFLWEL74Ud1k8aNomUVt+c+wDNQhIhpAmEfipL7ifCsHDMWXWoiU29i/X3g
bzhOBAKV5w0zxoV46LOM/FKXcaCJWy0XzuOZQKeyov+ooT0YPwWpx8H6OUCqyzXq
X+lxnvlap5EO+gAJH/lx9la2fpLMXPOS1guSIzT6H4OEK/huAFcKjrBLkrlKOVvA
c9mes24ye8Q+yeJp1uUx5l1MaJXNHNxt+fpcMGcaATPQ6WP78mkrAGy/7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwC/Xn6tpwPpuwrIWwM9weCsf4DMB8GA1UdIwQY
MBaAFIM3mefI2SqFzpUIwb4aPzgJUJWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTIt
M2ZhNDY3NmEwZGNlLzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MTIxZjEtNmM2Mi00NzgwLWIxZTItM2ZhNDY3NmEwZGNl
LzEvZ3plWjU4alpLb1hPbFFqQnZob19PQWxRbFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGX1hA8D
yhG+H3wny5meRBmomjDqKBhFWiyj4mXV0iZuIE96JShRn5HryVtCNDRD4X7rOKrF
ug/1ana7ynzaPyP1eYIP71cT33kg3QaIge/eIMWSWWFsV/CFDs5s5jL8a3/jW+ZG
K8xqmgNb4sjDx0yztqaJ6/x4241YxrOG2BctTdAZb1LfA3IbHajHWYLuMV1Bjbim
Y27W1lI1HIggsdOaTYtQFVlPNI75yPm3bUfCO144nvE8hNdmBvn344hbohzETVXq
Lbu4Odcij84RDIfcSYuQoUHIswSDMbYKe+9iHBkcapzzxKVwn+wvktZX9P7+6Tx+
j3Dsjn2WvBAO1w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:56 2025 by rpki-client