Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
File: Zhao67AREZsvaVMn-xblH4hwRHk.mft (raw, json)
Hash identifier: 4230qRICt0uRUrH6CVFCwzJePrGxv0zqfJV0lmRQhfY=
Subject key identifier: 9D:03:F0:4F:63:33:60:6F:78:62:91:C5:E1:4A:37:E4:10:2B:DF:C0
Authority key identifier: 66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
Certificate issuer: /CN=6616a8ebb011119b2f695327fb16e51f88704479
Certificate serial: 0198801D8E7C24330BD4E57A15A0A4DEC17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
Manifest number: D9
Signing time: Wed 06 Aug 2025 16:01:17 +0000
Manifest this update: Wed 06 Aug 2025 16:01:17 +0000
Manifest next update: Thu 07 Aug 2025 16:01:17 +0000
Files and hashes: 1: Zhao67AREZsvaVMn-xblH4hwRHk.crl (hash: m91O4saKQPKnEFq5Bezd6h2Eh/gcgVweOWYuL7IMizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:8e:7c:24:33:0b:d4:e5:7a:15:a0:a4:de:c1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6616a8ebb011119b2f695327fb16e51f88704479
Validity
Not Before: Aug 6 16:01:17 2025 GMT
Not After : Aug 7 16:01:17 2025 GMT
Subject: CN=9d03f04f6333606f786291c5e14a37e4102bdfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:0b:ba:32:75:a9:99:2b:c6:0b:6b:5a:e3:
da:17:75:34:00:c3:65:75:c8:46:b4:f3:5d:0d:77:
4d:46:88:fb:89:15:e8:d5:5c:48:f8:27:69:d1:ef:
9c:33:a4:61:d1:e1:51:f4:78:f7:75:b0:80:4c:31:
eb:85:2f:4a:20:fa:5c:58:aa:70:f5:69:b1:80:7a:
25:d8:49:23:22:3e:4b:f0:b9:45:e4:21:ed:0f:c2:
81:6e:fd:7b:21:2f:8a:2c:77:4a:de:85:d5:c9:64:
2a:e0:60:31:f0:95:a8:b7:16:99:0a:ac:f2:78:c1:
40:e2:a1:80:81:c8:22:09:53:79:36:c9:cb:84:c7:
99:5e:7b:04:9b:87:c5:d5:1c:e8:5e:eb:2c:cf:52:
62:25:b4:49:03:65:ad:c6:45:57:60:70:db:24:74:
d3:a6:14:43:23:85:65:9b:b5:0f:c6:ba:19:9e:f9:
2a:fb:66:e6:dc:61:6d:dd:bb:0c:64:45:20:38:69:
3a:ee:d9:f5:92:e8:ac:30:94:29:82:46:3f:58:4d:
b0:fe:37:81:30:e4:07:61:e8:c4:40:dc:eb:cd:aa:
2a:33:66:9e:9c:e5:2e:4e:a3:c3:d9:96:30:ca:3a:
0d:bc:60:fa:6e:e2:c7:6c:1b:7b:56:44:f9:b5:95:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:03:F0:4F:63:33:60:6F:78:62:91:C5:E1:4A:37:E4:10:2B:DF:C0
X509v3 Authority Key Identifier:
keyid:66:16:A8:EB:B0:11:11:9B:2F:69:53:27:FB:16:E5:1F:88:70:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhao67AREZsvaVMn-xblH4hwRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/dcf4a2-c374-4573-940a-ed3d27055020/1/Zhao67AREZsvaVMn-xblH4hwRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:57:35:98:27:76:d7:e3:f5:63:a0:15:75:bb:b0:be:43:
71:98:6c:23:7a:48:67:9a:f3:b3:47:68:1e:f5:f8:8c:be:37:
c1:65:01:c2:70:ed:22:9d:48:8f:ad:dd:31:10:a5:0c:06:d7:
fe:a4:de:91:c4:82:cd:40:aa:f2:e2:74:2f:27:43:b1:ec:59:
38:f1:f3:05:91:c4:64:9a:f8:f2:2d:f4:00:bc:8c:af:a9:7a:
8e:90:3f:a0:0e:7e:fb:9c:66:a4:e7:d0:a2:be:da:25:9c:7f:
9b:9b:08:9c:2a:bb:f1:f4:1b:33:29:3f:e1:fa:e8:e5:52:d2:
0d:f3:e6:1d:15:65:1a:9a:f7:32:61:0a:dd:81:85:a5:fb:85:
37:b4:ca:49:fa:f3:c9:8d:53:23:1b:5c:97:ff:99:cb:1d:df:
91:54:c9:ec:43:45:4f:5c:ad:60:81:fa:e0:28:7a:61:35:eb:
92:c4:41:fc:1b:1b:43:13:a8:81:8b:ca:1c:eb:78:5c:c5:45:
d1:a9:9c:56:ab:f4:8a:58:ae:a5:b0:cf:04:c3:28:15:68:14:
94:af:c7:f8:a7:4a:b4:9e:94:59:78:01:ec:6f:3a:18:7d:d1:
5d:3f:ae:8e:bc:01:b9:ef:88:0d:99:34:83:ab:82:9c:fb:cd:
3c:a5:c1:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAHY58JDML1OV6FaCk3sF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTZhOGViYjAxMTExOWIyZjY5NTMyN2ZiMTZlNTFmODg3
MDQ0NzkwHhcNMjUwODA2MTYwMTE3WhcNMjUwODA3MTYwMTE3WjAzMTEwLwYDVQQD
Eyg5ZDAzZjA0ZjYzMzM2MDZmNzg2MjkxYzVlMTRhMzdlNDEwMmJkZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGwLujJ1qZkrxgtrWuPaF3U0AMNl
dchGtPNdDXdNRoj7iRXo1VxI+Cdp0e+cM6Rh0eFR9Hj3dbCATDHrhS9KIPpcWKpw
9WmxgHol2EkjIj5L8LlF5CHtD8KBbv17IS+KLHdK3oXVyWQq4GAx8JWotxaZCqzy
eMFA4qGAgcgiCVN5NsnLhMeZXnsEm4fF1RzoXussz1JiJbRJA2WtxkVXYHDbJHTT
phRDI4Vlm7UPxroZnvkq+2bm3GFt3bsMZEUgOGk67tn1kuisMJQpgkY/WE2w/jeB
MOQHYejEQNzrzaoqM2aenOUuTqPD2ZYwyjoNvGD6buLHbBt7VkT5tZWSywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0D8E9jM2BveGKRxeFKN+QQK9/AMB8GA1UdIwQY
MBaAFGYWqOuwERGbL2lTJ/sW5R+IcER5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEt
ZWQzZDI3MDU1MDIwLzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9kY2Y0YTItYzM3NC00NTczLTk0MGEtZWQzZDI3MDU1MDIw
LzEvWmhhbzY3QVJFWnN2YVZNbi14YmxINGh3UkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbFXNZgn
dtfj9WOgFXW7sL5DcZhsI3pIZ5rzs0doHvX4jL43wWUBwnDtIp1Ij63dMRClDAbX
/qTekcSCzUCq8uJ0LydDsexZOPHzBZHEZJr48i30ALyMr6l6jpA/oA5++5xmpOfQ
or7aJZx/m5sInCq78fQbMyk/4fro5VLSDfPmHRVlGpr3MmEK3YGFpfuFN7TKSfrz
yY1TIxtcl/+Zyx3fkVTJ7ENFT1ytYIH64Ch6YTXrksRB/BsbQxOogYvKHOt4XMVF
0amcVqv0iliupbDPBMMoFWgUlK/H+KdKtJ6UWXgB7G86GH3RXT+ujrwBue+IDZk0
g6uCnPvNPKXBGw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:05 2025 by rpki-client