Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: evtIkCo0k474RRZPcLTRRZcmQBO8YZg66HW8NlkjFlA=
Subject key identifier: C8:E5:A6:48:AC:18:71:22:4F:21:F9:25:67:C4:09:88:71:C9:33:B0
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 01974779C797F783610592E0993C82BDDBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0CBE
Signing time: Fri 06 Jun 2025 23:00:52 +0000
Manifest this update: Fri 06 Jun 2025 23:00:52 +0000
Manifest next update: Sat 07 Jun 2025 23:00:52 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: KT8m/1u0CBgKSKCl3r+sgO627IxXPha7FZY9hnQn3rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:c7:97:f7:83:61:05:92:e0:99:3c:82:bd:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Jun 6 23:00:52 2025 GMT
Not After : Jun 7 23:00:52 2025 GMT
Subject: CN=c8e5a648ac1871224f21f92567c4098871c933b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:b9:a2:b6:ab:69:16:23:8e:93:0e:56:f8:
f9:99:67:28:5f:1e:af:d2:3a:76:2b:d1:2b:1f:c9:
a6:84:19:b6:74:0e:34:83:df:28:15:d2:2d:ae:c7:
f1:ed:c7:4d:00:70:9c:2b:63:df:30:34:86:74:72:
74:79:b5:2b:34:1c:ba:6e:29:ba:e6:88:7f:77:fd:
9c:ca:85:eb:ce:d9:eb:71:36:34:7a:df:4e:db:f9:
d1:c0:ab:b4:75:c1:ec:a2:67:d1:ac:d8:5e:47:cd:
5f:e7:3a:e8:a1:6a:1c:bf:70:7e:6f:e9:9c:59:3d:
8c:aa:c6:c2:4d:eb:2d:2c:15:f8:a3:5f:3d:0d:7a:
13:9f:fc:d3:2e:ad:71:a9:a4:e2:b1:90:4c:1f:c2:
1b:f7:01:59:c8:e9:d8:d4:6a:ce:8b:c3:f3:0a:71:
7c:5c:8f:4e:7f:06:97:c2:49:96:da:2a:5b:09:c2:
4e:5c:92:6c:b0:61:f9:f6:b7:87:45:4f:0a:16:99:
f3:55:34:25:2d:a4:9e:9d:22:88:d9:d0:53:fe:7e:
74:dd:49:df:e2:45:07:83:cd:51:2d:47:2e:42:b6:
df:0b:10:0a:06:e0:48:2b:b8:11:10:b0:e5:e7:60:
0f:53:82:ef:87:bc:4c:ed:3c:f3:ca:89:1f:d8:e2:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:A6:48:AC:18:71:22:4F:21:F9:25:67:C4:09:88:71:C9:33:B0
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cc:db:10:18:3d:bc:6d:2c:5f:2e:8e:47:79:9a:b2:90:ed:
36:85:93:06:b9:d7:48:9b:52:9c:ce:9c:c2:e8:26:14:12:7a:
ad:48:49:d9:ae:b5:71:b5:42:38:79:f5:e9:55:04:97:38:69:
4e:da:ec:02:97:e8:e3:ce:06:a6:63:ea:96:eb:43:f1:a7:40:
d4:0f:52:6f:ea:08:ce:44:a3:66:6e:93:80:f2:a6:a2:43:0f:
92:86:6a:1e:26:c5:b6:c6:cf:57:b4:f1:55:a3:09:82:49:54:
81:ba:e4:20:07:68:85:03:4e:61:11:e0:53:5c:02:2b:e8:1f:
9c:46:60:4f:d1:7f:2a:95:00:87:a7:61:51:ba:31:d0:1e:6c:
40:b7:a3:06:d5:31:da:22:8b:28:23:5c:6a:a7:06:88:39:2f:
51:aa:07:29:05:5a:5c:f9:4f:63:e7:66:38:8e:93:03:5e:79:
90:b5:48:99:77:e9:4a:f3:b5:a9:54:d9:6e:dd:42:c1:6b:11:
71:d0:7d:ac:a0:8b:2b:1a:07:0e:39:d3:f4:d6:d6:5f:4c:2e:
f3:d9:86:c2:61:45:2b:8b:83:c0:10:59:56:b8:1d:50:8d:b0:
d3:8a:ae:d5:08:ba:0a:6e:a4:40:3e:f7:f1:56:38:7a:58:43:
44:85:db:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeceX94NhBZLgmTyCvdvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkZGM0OWI3NWVhODRkZjQ1YWUxMTRjNDMyMWQ0NmQ1
YWNkNGEwHhcNMjUwNjA2MjMwMDUyWhcNMjUwNjA3MjMwMDUyWjAzMTEwLwYDVQQD
EyhjOGU1YTY0OGFjMTg3MTIyNGYyMWY5MjU2N2M0MDk4ODcxYzkzM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqby5oraraRYjjpMOVvj5mWcoXx6v
0jp2K9ErH8mmhBm2dA40g98oFdItrsfx7cdNAHCcK2PfMDSGdHJ0ebUrNBy6bim6
5oh/d/2cyoXrztnrcTY0et9O2/nRwKu0dcHsomfRrNheR81f5zrooWocv3B+b+mc
WT2MqsbCTestLBX4o189DXoTn/zTLq1xqaTisZBMH8Ib9wFZyOnY1GrOi8PzCnF8
XI9OfwaXwkmW2ipbCcJOXJJssGH59reHRU8KFpnzVTQlLaSenSKI2dBT/n503Unf
4kUHg81RLUcuQrbfCxAKBuBIK7gRELDl52APU4Lvh7xM7Tzzyokf2OIfLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjlpkisGHEiTyH5JWfECYhxyTOwMB8GA1UdIwQY
MBaAFM/13cSbdeqE30WuEUxDIdRtWs1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYt
MTc3OThiMmRhYWM0LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYtMTc3OThiMmRhYWM0
LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8zbEBg9
vG0sXy6OR3maspDtNoWTBrnXSJtSnM6cwugmFBJ6rUhJ2a61cbVCOHn16VUElzhp
TtrsApfo484GpmPqlutD8adA1A9Sb+oIzkSjZm6TgPKmokMPkoZqHibFtsbPV7Tx
VaMJgklUgbrkIAdohQNOYRHgU1wCK+gfnEZgT9F/KpUAh6dhUbox0B5sQLejBtUx
2iKLKCNcaqcGiDkvUaoHKQVaXPlPY+dmOI6TA155kLVImXfpSvO1qVTZbt1CwWsR
cdB9rKCLKxoHDjnT9NbWX0wu89mGwmFFK4uDwBBZVrgdUI2w04qu1Qi6Cm6kQD73
8VY4elhDRIXbUw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:11 2025 by rpki-client