Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: sY5hrcjpNtacPRbTZT0InZMTpJa7MHFpWEFXxrYy2Z8=
Subject key identifier: F5:25:74:65:3F:28:BB:57:6B:81:C8:BC:E2:4D:1A:F8:19:C6:B3:C6
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 01976026BC03E711F5557B44F02C316BBFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 0532
Signing time: Wed 11 Jun 2025 18:00:40 +0000
Manifest this update: Wed 11 Jun 2025 18:00:40 +0000
Manifest next update: Thu 12 Jun 2025 18:00:40 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: /w2lGygaAxFt0XyJpXwSaB5skCnJIAFBQynsf32WFEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:bc:03:e7:11:f5:55:7b:44:f0:2c:31:6b:bf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Jun 11 18:00:40 2025 GMT
Not After : Jun 12 18:00:40 2025 GMT
Subject: CN=f52574653f28bb576b81c8bce24d1af819c6b3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:4f:55:9f:60:ad:cd:01:24:02:10:c7:6b:
8c:4c:be:fd:45:9e:70:ce:14:db:9e:1e:95:3e:71:
af:c2:1f:04:fb:a1:e0:fc:b6:f8:0e:c6:fd:83:c2:
41:11:95:3e:70:15:4e:22:e3:4e:dd:63:0c:fd:ba:
ac:bf:bc:f3:25:bf:0e:ef:46:57:97:59:17:f2:13:
14:3f:d1:9e:02:cd:d5:fb:f5:03:15:b9:f9:b4:69:
dc:fc:a1:c7:56:e7:b5:df:e6:45:9a:fe:85:a3:69:
4a:ea:ef:67:39:f5:b7:63:0f:8c:d3:d7:ee:9c:8a:
d3:1d:ba:00:0e:56:1f:96:9a:3d:90:6a:ee:0b:dd:
6f:e8:d1:90:59:08:45:ea:f7:cf:3b:d5:40:07:70:
db:d0:2c:94:47:6f:65:50:17:02:23:e7:f9:9d:9e:
4c:b1:db:d1:05:77:01:ed:40:9a:4b:ef:8e:f7:1b:
5a:e3:18:52:f1:76:e4:5d:09:e5:66:11:7c:1c:a4:
83:d6:cb:c9:26:11:c4:ca:f6:17:d2:84:49:db:5e:
d2:32:22:03:fc:ec:52:4a:0c:73:9f:18:0c:3b:f4:
d3:b4:50:78:9c:46:f8:8b:c6:ac:3b:d9:ca:10:17:
1f:37:ad:e5:cd:bc:59:1a:c4:5b:a3:55:2c:18:e8:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:25:74:65:3F:28:BB:57:6B:81:C8:BC:E2:4D:1A:F8:19:C6:B3:C6
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4f:2c:21:dc:f3:1e:25:59:39:ab:b4:5e:53:c2:3f:81:72:
77:2f:c6:19:be:58:b4:86:9a:13:9e:e3:f0:a3:bf:23:49:0b:
64:bc:4e:10:a9:32:32:76:16:4b:5e:ca:3b:7a:61:d1:e3:29:
df:53:d3:e5:2a:f7:72:bb:b6:7a:e1:bb:b7:b6:fb:c3:c4:95:
06:4a:63:93:7d:33:06:48:5d:69:c7:75:6e:11:b1:e4:f9:c8:
c8:27:d4:a6:31:8b:8c:4b:93:b9:40:40:3b:80:5e:8a:e4:ed:
2c:5b:03:0a:29:2d:46:2b:52:c6:fb:62:d6:43:ae:ac:85:0a:
5c:42:6b:ce:93:71:f5:57:5b:57:a6:29:da:ea:a2:07:a7:91:
e2:76:ed:d1:3b:92:aa:82:da:ae:96:4b:a7:cf:df:26:ac:c2:
32:4a:0a:9d:cf:b1:6d:51:1f:96:6a:b0:f2:ad:c1:fe:c2:17:
3b:f3:50:8d:93:96:c2:9b:8b:ee:6f:38:e0:12:ab:36:2a:1c:
0c:8c:1a:0f:8e:b0:3a:87:5c:3c:28:26:f5:68:d1:47:69:8a:
14:f3:98:11:81:b1:6a:b8:2c:43:87:1c:62:a2:51:3a:d4:65:
8a:0c:ee:1e:c6:ac:46:45:34:7c:ee:c5:39:10:24:33:69:e6:
96:c4:78:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgJrwD5xH1VXtE8Cwxa7+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODQyMjZhY2U3ZDFhYWIyYTQxODMyNmY3ODQyOGFjYWRm
Y2M3ODEwHhcNMjUwNjExMTgwMDQwWhcNMjUwNjEyMTgwMDQwWjAzMTEwLwYDVQQD
EyhmNTI1NzQ2NTNmMjhiYjU3NmI4MWM4YmNlMjRkMWFmODE5YzZiM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo1PVZ9grc0BJAIQx2uMTL79RZ5w
zhTbnh6VPnGvwh8E+6Hg/Lb4Dsb9g8JBEZU+cBVOIuNO3WMM/bqsv7zzJb8O70ZX
l1kX8hMUP9GeAs3V+/UDFbn5tGnc/KHHVue13+ZFmv6Fo2lK6u9nOfW3Yw+M09fu
nIrTHboADlYflpo9kGruC91v6NGQWQhF6vfPO9VAB3Db0CyUR29lUBcCI+f5nZ5M
sdvRBXcB7UCaS++O9xta4xhS8XbkXQnlZhF8HKSD1svJJhHEyvYX0oRJ217SMiID
/OxSSgxznxgMO/TTtFB4nEb4i8asO9nKEBcfN63lzbxZGsRbo1UsGOjHPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUldGU/KLtXa4HIvOJNGvgZxrPGMB8GA1UdIwQY
MBaAFM+EImrOfRqrKkGDJveEKKyt/MeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYt
ZjMwZGM3NjVmNWZmLzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYtZjMwZGM3NjVmNWZm
LzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVE8sIdzz
HiVZOau0XlPCP4Fydy/GGb5YtIaaE57j8KO/I0kLZLxOEKkyMnYWS17KO3ph0eMp
31PT5Sr3cru2euG7t7b7w8SVBkpjk30zBkhdacd1bhGx5PnIyCfUpjGLjEuTuUBA
O4BeiuTtLFsDCiktRitSxvti1kOurIUKXEJrzpNx9VdbV6Yp2uqiB6eR4nbt0TuS
qoLarpZLp8/fJqzCMkoKnc+xbVEflmqw8q3B/sIXO/NQjZOWwpuL7m844BKrNioc
DIwaD46wOodcPCgm9WjRR2mKFPOYEYGxargsQ4ccYqJROtRligzuHsasRkU0fO7F
ORAkM2nmlsR4OA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 00:47:10 2025 by rpki-client