Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: xhVYr9E+S++zDjBcWtyPjkVdGaP/udB28u05zDQtKXQ=
Subject key identifier: 02:E4:3A:D6:85:95:D4:74:DA:F7:1E:9C:CA:11:7C:A0:60:04:05:91
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 0197488D2A6C636964C90EA4BE90DEEFC4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 112D
Signing time: Sat 07 Jun 2025 04:01:40 +0000
Manifest this update: Sat 07 Jun 2025 04:01:40 +0000
Manifest next update: Sun 08 Jun 2025 04:01:40 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: DZqGgTIGhgZn5BycJW9oUk0fGp8j2ZEOik7eNE2QQR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:2a:6c:63:69:64:c9:0e:a4:be:90:de:ef:c4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Jun 7 04:01:40 2025 GMT
Not After : Jun 8 04:01:40 2025 GMT
Subject: CN=02e43ad68595d474daf71e9cca117ca060040591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:d7:14:87:86:3b:64:bf:ca:fd:97:53:7f:
92:43:a7:19:a6:76:a7:10:76:6e:2f:e1:7b:55:7f:
75:0c:da:41:3a:97:be:40:eb:e3:e9:3a:99:4a:41:
35:34:85:66:3a:fd:ff:15:62:d9:05:96:f4:72:99:
71:1b:9c:59:55:54:10:2b:59:68:7d:e8:78:81:a6:
6d:95:89:cc:ac:2e:71:d7:55:2b:f7:9b:00:97:64:
71:89:37:e2:e6:59:a7:30:d2:b0:69:ab:19:5b:56:
e6:4c:a7:9d:50:0e:5f:43:89:e6:97:eb:d2:1c:3f:
37:5d:77:22:7e:d3:f8:89:32:58:f1:19:97:13:82:
6e:b4:8c:2e:2c:00:97:9c:f8:f0:fd:aa:6c:7d:de:
99:f4:1a:ce:2e:66:be:89:63:87:84:79:00:9d:61:
f1:f6:f4:47:0b:08:b4:90:f9:8b:a7:65:73:4b:3f:
90:cf:66:f0:f1:16:67:a0:19:5d:01:d7:99:a5:ec:
0b:56:5c:c7:fb:7e:1c:60:63:b4:44:de:c7:d5:ac:
30:2c:b9:b3:88:51:fb:f3:d8:d9:f1:b8:a3:ee:ed:
e7:bf:7d:52:f8:c3:7f:3c:df:c9:a1:04:61:fb:b3:
35:d4:c7:6a:eb:63:90:85:54:2b:fb:e2:09:85:e9:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E4:3A:D6:85:95:D4:74:DA:F7:1E:9C:CA:11:7C:A0:60:04:05:91
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:74:a7:7a:6b:01:dc:32:18:7a:87:64:68:aa:08:83:a5:94:
b1:a1:33:8d:0a:f0:a0:03:b5:6a:7f:df:18:69:92:86:27:b7:
c9:a3:93:6e:f5:ff:4c:0b:42:0a:ac:80:80:9d:5e:1f:d8:14:
35:f5:15:90:39:a1:2c:51:43:5d:87:c6:02:86:db:f2:f5:aa:
f4:22:43:d4:d1:2f:9c:0e:a5:f7:d2:47:24:bb:c1:1a:f1:e1:
51:fa:75:39:b8:2d:f4:01:81:4a:70:c8:ac:a1:ad:8f:e3:22:
a3:3e:c2:8f:f4:f1:06:31:ae:60:e6:2b:4f:81:39:23:f4:20:
ef:11:46:3c:0c:c0:ef:4e:a0:08:e6:be:ff:17:8c:c7:25:c4:
51:fb:e0:05:86:e4:b4:43:46:9e:91:16:c5:ab:0e:e7:20:90:
6b:1e:ea:1f:c5:99:cc:33:15:5c:34:cc:2f:39:f4:aa:ca:66:
49:e0:89:f6:84:11:ce:81:b9:2e:8d:1e:9f:97:6b:57:4c:db:
69:70:14:80:2f:d9:f8:7a:af:09:ec:72:ee:ad:ba:9c:a6:02:
1f:a8:42:fc:c8:4b:35:69:a2:44:d3:69:cd:d1:3a:53:1d:f8:
70:e5:32:28:cb:f9:0b:63:3b:2c:85:05:31:6f:ed:18:58:61:
65:4e:4b:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjSpsY2lkyQ6kvpDe78TVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZTAzNjczYjg4ZjA4YWY2MmZlNjUyYTE4ZjZmYTljODM0
YjU4ZWQwHhcNMjUwNjA3MDQwMTQwWhcNMjUwNjA4MDQwMTQwWjAzMTEwLwYDVQQD
EygwMmU0M2FkNjg1OTVkNDc0ZGFmNzFlOWNjYTExN2NhMDYwMDQwNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhHXFIeGO2S/yv2XU3+SQ6cZpnan
EHZuL+F7VX91DNpBOpe+QOvj6TqZSkE1NIVmOv3/FWLZBZb0cplxG5xZVVQQK1lo
feh4gaZtlYnMrC5x11Ur95sAl2RxiTfi5lmnMNKwaasZW1bmTKedUA5fQ4nml+vS
HD83XXciftP4iTJY8RmXE4JutIwuLACXnPjw/apsfd6Z9BrOLma+iWOHhHkAnWHx
9vRHCwi0kPmLp2VzSz+Qz2bw8RZnoBldAdeZpewLVlzH+34cYGO0RN7H1awwLLmz
iFH789jZ8bij7u3nv31S+MN/PN/JoQRh+7M11Mdq62OQhVQr++IJhemucQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALkOtaFldR02vcenMoRfKBgBAWRMB8GA1UdIwQY
MBaAFM/gNnO4jwivYv5lKhj2+pyDS1jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mYmVlNjUtOGE4OC00ZDEzLTllYjct
N2ExMmVlZGY4ZTVjLzEvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mYmVlNjUtOGE4OC00ZDEzLTllYjctN2ExMmVlZGY4ZTVj
LzEvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnSnemsB
3DIYeodkaKoIg6WUsaEzjQrwoAO1an/fGGmShie3yaOTbvX/TAtCCqyAgJ1eH9gU
NfUVkDmhLFFDXYfGAobb8vWq9CJD1NEvnA6l99JHJLvBGvHhUfp1Obgt9AGBSnDI
rKGtj+Mioz7Cj/TxBjGuYOYrT4E5I/Qg7xFGPAzA706gCOa+/xeMxyXEUfvgBYbk
tENGnpEWxasO5yCQax7qH8WZzDMVXDTMLzn0qspmSeCJ9oQRzoG5Lo0en5drV0zb
aXAUgC/Z+HqvCexy7q26nKYCH6hC/MhLNWmiRNNpzdE6Ux34cOUyKMv5C2M7LIUF
MW/tGFhhZU5LZg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:05 2025 by rpki-client