Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: Yo/5ajhmCG0uoip6Taz5f/Hp98How8iohW+SQDd2jPs=
Subject key identifier: 61:BB:8B:F9:73:36:B4:50:E3:EC:C3:4C:AA:C7:BE:4F:F3:0C:62:F1
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 01988CFDC65E735EDDA7B77C39E9A707C21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 0E03
Signing time: Sat 09 Aug 2025 04:01:38 +0000
Manifest this update: Sat 09 Aug 2025 04:01:38 +0000
Manifest next update: Sun 10 Aug 2025 04:01:38 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: 8WgaX5Iw7SJ50T7ybloR8Xh7QisQANy3xqOElMf9JK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:c6:5e:73:5e:dd:a7:b7:7c:39:e9:a7:07:c2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Aug 9 04:01:38 2025 GMT
Not After : Aug 10 04:01:38 2025 GMT
Subject: CN=61bb8bf97336b450e3ecc34caac7be4ff30c62f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:9e:40:2a:12:5e:53:77:24:c6:5e:67:f8:
fc:01:78:06:d7:3d:04:34:ea:6c:ce:ba:0d:59:c0:
a4:a4:ed:4e:91:40:f4:29:a4:e1:d3:17:cb:44:6a:
e5:99:00:01:67:54:a7:83:4d:e3:0e:dc:a9:33:9d:
42:fc:1f:3b:9a:20:33:2c:4b:54:9d:72:38:ab:d7:
cc:04:2b:b3:a9:87:05:70:e0:37:e8:0f:f3:37:98:
d0:01:5c:5e:29:ed:43:d6:dc:5a:61:88:85:e9:79:
5b:ee:d0:7f:a1:ff:1e:bb:1e:8d:48:6f:d1:11:32:
7e:38:72:b1:33:e1:69:fb:f7:4c:7c:fa:67:91:de:
22:b0:2d:ad:2a:83:e6:09:b1:29:fa:3f:86:6b:01:
8a:9d:da:47:49:c7:bd:ca:31:75:a8:f7:74:05:20:
18:bd:03:03:6a:62:b9:28:7f:0c:59:e5:d3:28:84:
15:86:8b:51:8e:0a:f5:16:ab:be:7b:47:82:b4:11:
2d:bb:35:bd:b2:15:9f:f1:95:2b:55:58:8e:08:84:
e5:09:29:f4:f4:5f:dc:ef:a7:31:c0:a8:54:c9:7a:
80:43:68:c7:0f:e8:a8:29:f1:95:26:d7:07:19:14:
48:16:69:1c:38:e1:fe:05:77:68:87:4e:e1:e3:d6:
06:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:8B:F9:73:36:B4:50:E3:EC:C3:4C:AA:C7:BE:4F:F3:0C:62:F1
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6d:68:8d:a3:9a:b8:69:f3:95:3e:99:37:7c:2b:25:92:e2:
4b:a0:fc:d4:65:04:57:af:64:e4:1f:00:2e:2a:df:b3:c8:12:
77:c3:29:99:2b:89:18:de:86:e3:99:74:4c:a2:e6:08:41:56:
ae:52:4c:ca:45:e0:21:a5:cd:02:ee:35:47:5d:96:a0:28:5a:
5a:1c:55:df:d2:01:fb:2f:21:00:25:33:e6:12:d9:64:19:26:
a0:d0:6b:e2:89:7e:df:c7:00:1c:d7:79:f5:0e:91:5d:54:23:
23:4e:aa:a2:15:9c:87:3c:ce:4d:d7:ef:53:4b:84:4d:f8:a0:
76:07:5d:3f:5e:e2:e1:e3:3a:82:7e:4a:12:68:29:07:0f:b1:
16:59:7f:52:f6:92:b6:8e:3a:a1:c5:79:cf:ff:5d:33:cf:ae:
24:cc:3e:a1:1c:e7:b7:83:b1:fc:c1:95:eb:c5:4b:d2:c6:40:
ee:3b:e1:b0:fd:1b:2a:f3:52:20:4b:4e:1b:1f:4a:a6:c4:71:
f3:01:50:28:31:c9:57:db:ac:23:b6:68:4e:aa:16:81:c6:6d:
aa:2f:50:74:cc:38:09:10:b1:a2:f5:4d:5e:5b:b9:c7:1d:df:
ed:62:3a:2d:bd:da:c3:8b:db:73:02:40:ad:70:ef:aa:60:e4:
e8:48:65:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/cZec17dp7d8OemnB8IcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODNhOTZjZjUxMWE2NzkxOWQ5MDBmM2ZjOTM0MDk5MzQx
Zjg3ZDgwHhcNMjUwODA5MDQwMTM4WhcNMjUwODEwMDQwMTM4WjAzMTEwLwYDVQQD
Eyg2MWJiOGJmOTczMzZiNDUwZTNlY2MzNGNhYWM3YmU0ZmYzMGM2MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgueQCoSXlN3JMZeZ/j8AXgG1z0E
NOpszroNWcCkpO1OkUD0KaTh0xfLRGrlmQABZ1Sng03jDtypM51C/B87miAzLEtU
nXI4q9fMBCuzqYcFcOA36A/zN5jQAVxeKe1D1txaYYiF6Xlb7tB/of8eux6NSG/R
ETJ+OHKxM+Fp+/dMfPpnkd4isC2tKoPmCbEp+j+GawGKndpHSce9yjF1qPd0BSAY
vQMDamK5KH8MWeXTKIQVhotRjgr1Fqu+e0eCtBEtuzW9shWf8ZUrVViOCITlCSn0
9F/c76cxwKhUyXqAQ2jHD+ioKfGVJtcHGRRIFmkcOOH+BXdoh07h49YGgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG7i/lzNrRQ4+zDTKrHvk/zDGLxMB8GA1UdIwQY
MBaAFGaDqWz1EaZ5GdkA8/yTQJk0H4fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgt
YWUzMDY4NmM4NTg5LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgtYWUzMDY4NmM4NTg5
LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd21ojaOa
uGnzlT6ZN3wrJZLiS6D81GUEV69k5B8ALirfs8gSd8MpmSuJGN6G45l0TKLmCEFW
rlJMykXgIaXNAu41R12WoChaWhxV39IB+y8hACUz5hLZZBkmoNBr4ol+38cAHNd5
9Q6RXVQjI06qohWchzzOTdfvU0uETfigdgddP17i4eM6gn5KEmgpBw+xFll/UvaS
to46ocV5z/9dM8+uJMw+oRznt4Ox/MGV68VL0sZA7jvhsP0bKvNSIEtOGx9KpsRx
8wFQKDHJV9usI7ZoTqoWgcZtqi9QdMw4CRCxovVNXlu5xx3f7WI6Lb3aw4vbcwJA
rXDvqmDk6EhlDg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:35 2025 by rpki-client