Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: w5MxRJBaSQwvjc31dwuzPJ9PVRs0j8dv6o3qUo03ivQ=
Subject key identifier: 73:8C:D7:AF:8D:B8:A2:E1:39:C7:4D:06:70:DE:8D:EC:CB:9C:4E:CA
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 01976BF483563D440E0AB167B73DE709771F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 1137
Signing time: Sat 14 Jun 2025 01:01:15 +0000
Manifest this update: Sat 14 Jun 2025 01:01:15 +0000
Manifest next update: Sun 15 Jun 2025 01:01:15 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: 1GTXN7G+3MmQqv93cqiZ3otedV5oh4qCbcLAHhaTIpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:83:56:3d:44:0e:0a:b1:67:b7:3d:e7:09:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Jun 14 01:01:15 2025 GMT
Not After : Jun 15 01:01:15 2025 GMT
Subject: CN=738cd7af8db8a2e139c74d0670de8deccb9c4eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:48:c2:64:3d:cd:77:fa:ed:2d:f9:fe:f1:
05:3c:9d:7a:dd:04:a4:23:27:a5:bc:34:b6:fd:dc:
69:3e:29:a2:43:9e:d8:57:84:af:97:33:de:03:14:
0f:28:ae:d3:e3:ad:0d:4a:dd:ae:1d:1f:b4:82:1f:
3b:e8:65:3d:20:c3:32:be:b4:e6:56:3e:ce:11:7a:
88:c8:81:30:1e:ad:d4:dd:fd:6e:f7:73:ca:31:30:
6f:92:37:2d:f0:eb:e8:ad:5f:46:59:fe:0a:6c:66:
87:ac:41:86:ef:b1:f6:a5:a7:fc:d3:69:37:7d:aa:
16:af:51:fc:00:d9:02:b8:84:8d:ab:9d:f0:f5:3b:
47:be:8b:e0:1a:4c:2e:c0:92:5b:f4:2e:88:d9:61:
f4:2e:a7:48:66:ad:2e:06:fb:0d:1b:fa:28:6b:8c:
6e:4e:f2:41:d8:f0:67:5e:bf:ad:c5:f5:d3:9b:3a:
7d:f3:cb:d8:58:5d:af:62:de:b4:88:64:fb:18:a5:
ef:f7:94:c0:a3:f4:cd:c5:10:53:3a:66:60:57:6b:
8d:76:60:0e:42:88:f0:6e:52:24:0f:c6:3c:44:fa:
62:bf:b9:e5:1e:65:ba:82:a8:23:a9:aa:da:ee:2f:
da:77:29:8b:2c:4b:47:28:bb:54:c0:28:ef:be:d0:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:D7:AF:8D:B8:A2:E1:39:C7:4D:06:70:DE:8D:EC:CB:9C:4E:CA
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:46:6d:28:71:35:89:7a:18:eb:0b:55:00:29:a9:40:bd:bc:
23:38:a4:6f:b2:02:db:37:99:2f:92:74:20:48:30:5d:c7:1c:
d9:2c:e2:70:46:9f:8d:9e:3c:bf:93:fb:67:5e:45:9f:c0:29:
bd:2c:9c:02:e4:aa:43:64:41:1f:b7:ab:22:9d:b4:45:39:49:
ea:4a:ac:38:bc:f0:ce:bf:67:32:d4:c5:db:81:5f:4e:3b:4c:
0b:33:8d:b5:dd:b8:a3:c8:a0:59:94:cc:7d:fc:27:be:2f:60:
d4:d7:01:76:0e:11:f8:da:eb:1a:4d:18:3c:0d:3d:69:3a:87:
8e:41:9f:f3:9e:1e:57:69:b6:55:b0:58:5a:47:5d:d6:e7:d6:
c1:ec:66:2b:cb:ba:12:5e:ed:da:66:55:8d:41:ed:ff:f0:d7:
57:f6:fb:75:df:f7:ba:95:2d:32:d3:c1:97:b1:fe:af:bb:90:
28:45:ae:bd:8f:90:86:a8:c3:b0:16:32:60:ae:fe:95:bf:13:
7f:43:46:2b:63:9d:00:69:e0:68:78:9a:a8:9b:40:1a:d8:8a:
8e:8f:d6:90:6d:2c:04:5a:c0:e0:9b:10:32:7b:b7:3d:03:bd:
01:0c:f9:62:ea:7c:80:a5:10:29:5e:26:43:f6:7b:ae:74:1a:
86:85:d6:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9INWPUQOCrFntz3nCXcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDJiMmY1NGNhMTcxOGNmZDM4MjkzMTExNDE1NjY2Y2Mz
NGUyNjIwHhcNMjUwNjE0MDEwMTE1WhcNMjUwNjE1MDEwMTE1WjAzMTEwLwYDVQQD
Eyg3MzhjZDdhZjhkYjhhMmUxMzljNzRkMDY3MGRlOGRlY2NiOWM0ZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDBIwmQ9zXf67S35/vEFPJ163QSk
IyelvDS2/dxpPimiQ57YV4SvlzPeAxQPKK7T460NSt2uHR+0gh876GU9IMMyvrTm
Vj7OEXqIyIEwHq3U3f1u93PKMTBvkjct8OvorV9GWf4KbGaHrEGG77H2paf802k3
faoWr1H8ANkCuISNq53w9TtHvovgGkwuwJJb9C6I2WH0LqdIZq0uBvsNG/ooa4xu
TvJB2PBnXr+txfXTmzp988vYWF2vYt60iGT7GKXv95TAo/TNxRBTOmZgV2uNdmAO
QojwblIkD8Y8RPpiv7nlHmW6gqgjqara7i/adymLLEtHKLtUwCjvvtCe9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOM16+NuKLhOcdNBnDejezLnE7KMB8GA1UdIwQY
MBaAFGXSsvVMoXGM/TgpMRFBVmbMNOJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmIt
ZWY2NWRjYmM3YzA5LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmItZWY2NWRjYmM3YzA5
LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0ZtKHE1
iXoY6wtVACmpQL28Izikb7IC2zeZL5J0IEgwXccc2SzicEafjZ48v5P7Z15Fn8Ap
vSycAuSqQ2RBH7erIp20RTlJ6kqsOLzwzr9nMtTF24FfTjtMCzONtd24o8igWZTM
ffwnvi9g1NcBdg4R+NrrGk0YPA09aTqHjkGf854eV2m2VbBYWkdd1ufWwexmK8u6
El7t2mZVjUHt//DXV/b7dd/3upUtMtPBl7H+r7uQKEWuvY+QhqjDsBYyYK7+lb8T
f0NGK2OdAGngaHiaqJtAGtiKjo/WkG0sBFrA4JsQMnu3PQO9AQz5Yup8gKUQKV4m
Q/Z7rnQahoXWWA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:27:42 2025 by rpki-client