Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: F6+ZFEApPQZ07CsvjotCLH0ljUDwlPwcnS45Bf4GLds=
Subject key identifier: 9C:AB:5B:97:04:73:74:BF:68:70:E9:F8:95:69:86:64:D1:25:21:C5
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 0198820C39D179F0DCA2C06CF9CCDA679800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: D1
Signing time: Thu 07 Aug 2025 01:01:35 +0000
Manifest this update: Thu 07 Aug 2025 01:01:35 +0000
Manifest next update: Fri 08 Aug 2025 01:01:35 +0000
Files and hashes: 1: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: pp3SaAYfkiwzXD+awkERZh0OGfpnDtBarmzQNTiZ7mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:39:d1:79:f0:dc:a2:c0:6c:f9:cc:da:67:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Aug 7 01:01:35 2025 GMT
Not After : Aug 8 01:01:35 2025 GMT
Subject: CN=9cab5b97047374bf6870e9f895698664d12521c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:1a:5c:f8:b3:ee:f5:07:ac:d8:f3:0d:0a:
e6:4e:c8:33:07:5e:9d:8c:cc:d5:aa:67:df:7e:2f:
75:d3:f6:c2:2d:80:6f:23:9c:1d:01:c4:ba:59:37:
6c:3b:b8:22:fb:0c:b3:ff:3b:0b:76:a8:fb:e9:a9:
b2:ba:dc:80:90:b8:f4:d9:e1:f7:15:1b:a4:8c:e8:
4d:f0:c4:1d:80:99:f0:a6:67:ac:da:a1:3f:99:e7:
7d:d0:ef:ed:7f:ac:42:22:70:bc:5f:f9:fd:f0:43:
ab:c1:d2:8b:0f:0e:1a:c4:f0:96:e1:e0:7c:0e:24:
91:ce:a3:b5:3d:db:2e:32:95:9d:e9:9a:96:3c:8b:
89:f2:79:91:84:86:8c:71:e8:7e:4a:66:25:75:7e:
a7:77:b4:49:79:ce:86:46:ed:8b:d1:01:96:47:f5:
2b:19:bc:f6:e5:0b:cd:d5:bb:67:4d:25:08:a4:a1:
3a:96:1f:41:3e:cd:f8:75:c5:71:f4:84:e1:0b:6e:
2c:16:b7:d0:f0:8c:44:df:06:98:87:b1:ce:23:30:
53:3d:35:41:26:d1:f6:c2:31:53:8b:d2:fa:25:9a:
c1:39:74:dc:bd:06:84:26:21:ee:be:ee:0f:e3:7d:
dc:39:13:ce:b4:39:22:b8:77:5d:e3:ff:43:f4:b7:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:5B:97:04:73:74:BF:68:70:E9:F8:95:69:86:64:D1:25:21:C5
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4a:48:d1:41:7a:2f:2f:95:f0:aa:fe:b9:3b:29:d6:31:bf:
98:20:27:ce:b8:11:72:6b:d6:16:ea:e9:05:22:00:06:16:5b:
2c:f9:5e:c8:d5:70:63:5f:c9:5d:49:cb:32:ee:76:78:60:b2:
a7:62:d2:8c:ae:01:17:73:fc:ae:f2:d8:8a:f9:d0:c0:44:58:
31:91:28:e0:45:96:6d:84:55:e7:39:8b:89:cd:eb:5f:91:4c:
ba:97:ae:6e:7d:a6:22:07:30:32:3f:69:8c:d0:52:0d:85:74:
f2:1e:38:a1:d3:8c:c2:c1:63:4a:c6:f1:e2:15:90:2d:fd:de:
b2:f0:23:02:b4:f8:69:2e:ce:12:0a:6c:98:ab:9c:6c:49:e7:
79:c5:a5:8b:e6:48:13:db:86:45:1b:2b:bc:07:38:d0:54:49:
0d:c8:30:34:5f:d0:aa:ad:ec:dd:4f:cb:55:10:be:53:69:de:
88:31:5b:65:99:77:e7:2b:67:af:eb:0b:53:40:10:dd:21:1a:
b5:82:53:fb:ab:4f:9f:ca:2c:5b:6f:20:a6:95:98:e9:a8:d2:
21:33:76:c1:c2:9b:0b:77:2f:12:91:83:fc:2c:78:42:2f:71:
ae:3a:32:9a:d8:b8:04:97:71:3a:b4:cb:38:5b:c5:94:61:b4:
2c:73:3c:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCDDnRefDcosBs+czaZ5gAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDA5MzIxNzJhYTJkMWM3N2M0YmI5ODM3MGFhYjNkZTZh
YzM0NTcwHhcNMjUwODA3MDEwMTM1WhcNMjUwODA4MDEwMTM1WjAzMTEwLwYDVQQD
Eyg5Y2FiNWI5NzA0NzM3NGJmNjg3MGU5Zjg5NTY5ODY2NGQxMjUyMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv4aXPiz7vUHrNjzDQrmTsgzB16d
jMzVqmfffi910/bCLYBvI5wdAcS6WTdsO7gi+wyz/zsLdqj76amyutyAkLj02eH3
FRukjOhN8MQdgJnwpmes2qE/med90O/tf6xCInC8X/n98EOrwdKLDw4axPCW4eB8
DiSRzqO1PdsuMpWd6ZqWPIuJ8nmRhIaMceh+SmYldX6nd7RJec6GRu2L0QGWR/Ur
Gbz25QvN1btnTSUIpKE6lh9BPs34dcVx9IThC24sFrfQ8IxE3waYh7HOIzBTPTVB
JtH2wjFTi9L6JZrBOXTcvQaEJiHuvu4P433cORPOtDkiuHdd4/9D9Lc/twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyrW5cEc3S/aHDp+JVphmTRJSHFMB8GA1UdIwQY
MBaAFGXQkyFyqi0cd8S7mDcKqz3mrDRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9mYTc3MTEtMzdmZi00YWVjLTk4NTMt
MWVkZGU2YzlkOTZhLzEvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9mYTc3MTEtMzdmZi00YWVjLTk4NTMtMWVkZGU2YzlkOTZh
LzEvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEpI0UF6
Ly+V8Kr+uTsp1jG/mCAnzrgRcmvWFurpBSIABhZbLPleyNVwY1/JXUnLMu52eGCy
p2LSjK4BF3P8rvLYivnQwERYMZEo4EWWbYRV5zmLic3rX5FMupeubn2mIgcwMj9p
jNBSDYV08h44odOMwsFjSsbx4hWQLf3esvAjArT4aS7OEgpsmKucbEnnecWli+ZI
E9uGRRsrvAc40FRJDcgwNF/Qqq3s3U/LVRC+U2neiDFbZZl35ytnr+sLU0AQ3SEa
tYJT+6tPn8osW28gppWY6ajSITN2wcKbC3cvEpGD/Cx4Qi9xrjoymti4BJdxOrTL
OFvFlGG0LHM8CQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:04:56 2025 by rpki-client