Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: rxBIgSvWejzTgBzi9Hzb03IohB5ndvY3IDr8VL54KrU=
Subject key identifier: 86:CF:CF:1C:4C:B2:27:2F:BC:8B:C2:AE:E8:C5:A6:DD:F4:22:11:E5
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 01991809C39762E84474033E2B432F2982EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 0FCC
Signing time: Fri 05 Sep 2025 04:01:56 +0000
Manifest this update: Fri 05 Sep 2025 04:01:56 +0000
Manifest next update: Sat 06 Sep 2025 04:01:56 +0000
Files and hashes: 1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: pgy3fKujHEP9ZH+FcKKqY+57lqMAJJaxUz+xDE5Fwwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:c3:97:62:e8:44:74:03:3e:2b:43:2f:29:82:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Sep 5 04:01:56 2025 GMT
Not After : Sep 6 04:01:56 2025 GMT
Subject: CN=86cfcf1c4cb2272fbc8bc2aee8c5a6ddf42211e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:a0:75:68:7e:06:51:68:61:97:b8:4f:1d:
f0:88:25:6f:a5:49:e5:51:db:1c:4d:56:75:cf:e5:
20:d3:7c:d3:c6:50:23:b6:74:80:63:75:70:00:c0:
4b:71:b4:e8:71:1f:a9:3d:ac:22:30:ad:96:1f:46:
a5:dc:94:ec:74:cf:90:08:3c:00:fd:53:c7:4f:ff:
95:0e:51:6b:77:41:5b:96:86:ee:46:0d:81:79:9d:
98:2c:d2:a1:87:4c:f6:f0:37:70:9a:40:2c:86:cb:
25:e0:a4:49:34:f7:70:25:57:88:82:7d:3a:c5:c4:
89:94:4c:11:3b:4b:81:df:55:96:aa:c9:32:0a:d7:
04:ea:34:47:89:e6:f1:f8:b4:c7:63:a1:ed:e1:de:
73:2a:2d:38:bf:b6:7a:97:16:f6:29:68:fc:bb:a2:
a5:33:db:78:01:c8:2c:f5:77:06:84:7d:c3:11:22:
94:8c:0f:34:fd:2f:30:a5:88:fc:7d:b3:7a:92:32:
85:95:3c:49:f5:f2:3b:f2:2c:a7:79:78:a4:d2:00:
f4:81:44:52:34:b1:92:d9:a2:36:12:9c:23:bd:67:
d2:16:5f:14:de:88:33:46:2d:6b:53:bb:44:7a:c6:
06:8e:61:6e:4d:1f:41:76:09:80:16:cd:57:c4:3c:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CF:CF:1C:4C:B2:27:2F:BC:8B:C2:AE:E8:C5:A6:DD:F4:22:11:E5
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:12:23:17:87:e7:91:25:a9:5a:f8:15:77:1d:c1:c7:15:7e:
f5:a5:64:6e:8e:6e:bf:bb:15:dc:fd:88:12:a1:ac:30:f8:7e:
b1:3c:aa:fc:cb:45:ef:9d:03:b2:7f:7e:f6:60:a7:0a:93:eb:
ba:7b:f8:45:8b:d5:42:27:0e:37:c8:43:09:c1:f0:08:53:77:
4f:b6:a9:b7:42:9f:34:ef:d8:bf:47:3a:81:08:41:17:f0:46:
f6:f4:59:c3:a1:a5:3c:cb:9c:95:4c:9a:22:29:67:4a:b4:0a:
36:cc:77:3a:a5:b5:54:d2:53:38:fb:f0:7c:17:de:45:0f:3e:
4e:26:96:cb:b6:33:83:3f:0e:27:21:d8:38:b8:b4:3f:91:2d:
f2:df:ef:26:58:9e:b8:63:8f:00:42:1d:b2:6d:11:d5:1a:7f:
29:82:54:fa:d8:10:82:5e:39:e2:52:63:0c:ec:2c:19:95:38:
ee:76:50:6b:bc:5f:b8:c4:18:5d:c1:f5:89:75:61:4c:6a:1e:
87:72:ec:39:a5:d0:e2:30:26:b2:3d:24:92:ac:1b:25:a4:bd:
9c:72:e3:c1:30:26:3e:18:db:16:82:a5:17:66:0b:0e:72:46:
03:a7:f4:6c:b3:ea:da:39:12:7d:14:55:78:d6:d2:62:ea:d6:
0d:e6:24:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCcOXYuhEdAM+K0MvKYLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzcwMDhjNmY5MTcyMmRjM2IxMjc1Mjc1NThlYmRhYmM2
ODBjZTYwHhcNMjUwOTA1MDQwMTU2WhcNMjUwOTA2MDQwMTU2WjAzMTEwLwYDVQQD
Eyg4NmNmY2YxYzRjYjIyNzJmYmM4YmMyYWVlOGM1YTZkZGY0MjIxMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5SgdWh+BlFoYZe4Tx3wiCVvpUnl
UdscTVZ1z+Ug03zTxlAjtnSAY3VwAMBLcbTocR+pPawiMK2WH0al3JTsdM+QCDwA
/VPHT/+VDlFrd0FblobuRg2BeZ2YLNKhh0z28DdwmkAshssl4KRJNPdwJVeIgn06
xcSJlEwRO0uB31WWqskyCtcE6jRHiebx+LTHY6Ht4d5zKi04v7Z6lxb2KWj8u6Kl
M9t4Acgs9XcGhH3DESKUjA80/S8wpYj8fbN6kjKFlTxJ9fI78iyneXik0gD0gURS
NLGS2aI2EpwjvWfSFl8U3ogzRi1rU7tEesYGjmFuTR9BdgmAFs1XxDwyrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbPzxxMsicvvIvCrujFpt30IhHlMB8GA1UdIwQY
MBaAFM/HAIxvkXItw7EnUnVY69q8aAzmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80MTY4ZGEtZTY1Yy00N2I2LWJiNjEt
MzZmMjRhZDRhMDRmLzEvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80MTY4ZGEtZTY1Yy00N2I2LWJiNjEtMzZmMjRhZDRhMDRm
LzEvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxIjF4fn
kSWpWvgVdx3BxxV+9aVkbo5uv7sV3P2IEqGsMPh+sTyq/MtF750Dsn9+9mCnCpPr
unv4RYvVQicON8hDCcHwCFN3T7apt0KfNO/Yv0c6gQhBF/BG9vRZw6GlPMuclUya
IilnSrQKNsx3OqW1VNJTOPvwfBfeRQ8+TiaWy7Yzgz8OJyHYOLi0P5Et8t/vJlie
uGOPAEIdsm0R1Rp/KYJU+tgQgl454lJjDOwsGZU47nZQa7xfuMQYXcH1iXVhTGoe
h3LsOaXQ4jAmsj0kkqwbJaS9nHLjwTAmPhjbFoKlF2YLDnJGA6f0bLPq2jkSfRRV
eNbSYurWDeYkWQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:05 2025 by rpki-client