Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: Th9Vr5epUFpk+dtnoaKXuXJLJSXS+rDLA/aPoHVZ3hI=
Subject key identifier: 28:97:EC:21:3D:0E:D8:D0:BC:0A:D8:27:95:A0:45:97:C1:B5:17:FE
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 01974A7AA84B3BF0FF1D94B169A5BA00CFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 0EDD
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: 2JHJY1/tia7TOn7qUxn/cCYl0bxTblBZ8rJkCwdXqA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a8:4b:3b:f0:ff:1d:94:b1:69:a5:ba:00:cf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=2897ec213d0ed8d0bc0ad82795a04597c1b517fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:57:82:f1:bd:77:f0:29:73:c3:9f:e7:3e:
96:08:52:ae:5e:c7:1d:df:6c:f1:86:74:8a:a4:ef:
81:90:40:7e:e7:c4:4c:5e:4a:65:1a:f6:ff:6d:0c:
9b:9c:26:6a:70:d0:7c:3b:03:42:40:2a:f0:f3:66:
d6:56:17:8a:d1:16:3d:f0:e1:66:0f:5d:3f:1b:a3:
7b:4a:0c:4d:bb:9c:24:67:ef:15:c3:6f:35:ed:2e:
4b:3b:87:b5:72:1a:f1:74:fb:2c:2e:41:4e:c4:92:
28:ab:7d:88:68:c4:cf:f5:90:19:0a:53:52:34:71:
39:21:c1:f2:11:93:41:57:8b:74:63:d9:31:3b:ee:
d3:c0:6d:f3:d7:e9:3e:3d:d5:f1:6b:45:93:c4:39:
6f:71:c7:9e:a0:7e:9c:e7:58:b4:87:b9:d5:a8:1e:
5c:bb:95:f6:cd:69:19:4e:1f:88:58:38:07:31:7d:
7a:2c:64:03:c6:69:ef:2f:64:36:91:d9:66:55:a1:
1a:fc:69:67:e1:f4:db:98:0e:0f:15:c7:aa:b1:3b:
eb:c5:9c:b6:86:58:72:82:93:0f:81:d8:d2:2d:17:
9b:12:24:dc:d7:cd:ec:57:52:c7:e3:39:ea:64:97:
57:43:50:b0:ec:17:ec:54:e4:1f:78:75:ef:0e:1b:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:EC:21:3D:0E:D8:D0:BC:0A:D8:27:95:A0:45:97:C1:B5:17:FE
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:3e:c4:21:8a:41:0a:2b:ce:56:ba:85:44:c6:e3:ad:a9:
5a:9f:fc:5b:f4:27:4e:49:ca:ed:a5:0d:a2:7f:40:c3:2f:d6:
cb:c7:19:79:2f:50:73:87:6b:c3:9d:ab:5e:aa:5a:a1:62:95:
e2:74:75:03:3e:69:b0:44:63:eb:db:9c:9a:92:5b:83:17:7b:
ab:91:e0:79:e0:27:d3:8c:0e:2e:1c:20:6e:05:13:86:41:8c:
bd:76:47:d7:8a:a0:c6:a5:ce:ad:76:a4:3b:45:70:f2:6e:88:
7d:df:a4:ea:c4:71:dd:46:53:82:97:7e:fc:0a:45:4d:c9:25:
37:2a:35:0f:7c:fa:63:28:fa:24:79:1d:4d:6f:eb:66:1f:9d:
85:98:4f:79:f4:bb:0d:79:1e:5a:e1:4d:46:f5:4c:0b:d2:91:
88:ed:0e:5e:99:e7:78:fd:2c:ff:b3:8c:b1:d4:0a:27:6e:da:
2a:c0:39:22:06:fb:02:ce:c7:8f:9a:24:c3:2d:41:4b:93:9c:
aa:cf:30:92:d8:94:e7:42:ce:ff:a0:f2:23:85:0f:fa:ef:b6:
bf:7d:d4:5f:02:a7:cd:3c:6d:f8:f6:15:b0:d8:6c:50:2e:4d:
61:4d:bb:2f:ce:83:c3:85:b1:c7:6c:b5:1b:1b:ae:cb:41:fe:
fc:d4:bc:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeqhLO/D/HZSxaaW6AM/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzcwMDhjNmY5MTcyMmRjM2IxMjc1Mjc1NThlYmRhYmM2
ODBjZTYwHhcNMjUwNjA3MTMwMDQxWhcNMjUwNjA4MTMwMDQxWjAzMTEwLwYDVQQD
EygyODk3ZWMyMTNkMGVkOGQwYmMwYWQ4Mjc5NWEwNDU5N2MxYjUxN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29lXgvG9d/Apc8Of5z6WCFKuXscd
32zxhnSKpO+BkEB+58RMXkplGvb/bQybnCZqcNB8OwNCQCrw82bWVheK0RY98OFm
D10/G6N7SgxNu5wkZ+8Vw2817S5LO4e1chrxdPssLkFOxJIoq32IaMTP9ZAZClNS
NHE5IcHyEZNBV4t0Y9kxO+7TwG3z1+k+PdXxa0WTxDlvcceeoH6c51i0h7nVqB5c
u5X2zWkZTh+IWDgHMX16LGQDxmnvL2Q2kdlmVaEa/Gln4fTbmA4PFceqsTvrxZy2
hlhygpMPgdjSLRebEiTc183sV1LH4znqZJdXQ1Cw7BfsVOQfeHXvDhvpGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiX7CE9DtjQvArYJ5WgRZfBtRf+MB8GA1UdIwQY
MBaAFM/HAIxvkXItw7EnUnVY69q8aAzmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80MTY4ZGEtZTY1Yy00N2I2LWJiNjEt
MzZmMjRhZDRhMDRmLzEvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80MTY4ZGEtZTY1Yy00N2I2LWJiNjEtMzZmMjRhZDRhMDRm
LzEvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSw+xCGK
QQorzla6hUTG462pWp/8W/QnTknK7aUNon9Awy/Wy8cZeS9Qc4drw52rXqpaoWKV
4nR1Az5psERj69ucmpJbgxd7q5HgeeAn04wOLhwgbgUThkGMvXZH14qgxqXOrXak
O0Vw8m6Ifd+k6sRx3UZTgpd+/ApFTcklNyo1D3z6Yyj6JHkdTW/rZh+dhZhPefS7
DXkeWuFNRvVMC9KRiO0OXpnneP0s/7OMsdQKJ27aKsA5Igb7As7Hj5okwy1BS5Oc
qs8wktiU50LO/6DyI4UP+u+2v33UXwKnzTxt+PYVsNhsUC5NYU27L86Dw4Wxx2y1
Gxuuy0H+/NS8Mg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:06:18 2025 by rpki-client