
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier: 6m/WcbXYXEf1wbaiSYTOLDWh+yb7a0RsmniSPmQ2yJw=
Subject key identifier: 0B:B8:6A:B9:04:34:93:DC:E0:A4:D2:46:48:18:91:27:C3:24:52:9F
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial: 01988B7CA5FC651FD21D54A57B95458983BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number: 0717
Signing time: Fri 08 Aug 2025 21:00:58 +0000
Manifest this update: Fri 08 Aug 2025 21:00:58 +0000
Manifest next update: Sat 09 Aug 2025 21:00:58 +0000
Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: UQF4y99YICGSxUnuzQZjw1n/LpWJssSpaLtGbtnA17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:a5:fc:65:1f:d2:1d:54:a5:7b:95:45:89:83:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Validity
Not Before: Aug 8 21:00:58 2025 GMT
Not After : Aug 9 21:00:58 2025 GMT
Subject: CN=0bb86ab9043493dce0a4d24648189127c324529f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:a2:3c:1e:06:48:7c:1c:93:95:07:84:e0:
70:15:d5:61:bd:2e:69:1a:28:66:55:6a:bc:5c:c6:
9e:0b:e9:32:4b:5e:b4:59:2f:1c:74:4b:4b:fa:21:
ac:c5:ce:39:a3:60:14:93:e7:10:be:5e:e7:d5:b7:
b7:17:dc:45:88:cb:9e:4d:d9:96:6d:68:c5:42:82:
9c:c3:53:40:28:4a:eb:b0:86:eb:ea:88:69:52:bf:
a7:d1:73:a5:e2:68:e7:e4:36:03:7d:f7:8f:0d:d8:
39:ca:83:d8:3a:57:98:49:2b:70:65:dd:ef:f5:9f:
aa:27:f5:af:74:0d:fe:f1:20:af:5b:67:3a:be:38:
86:9f:95:64:9c:ef:d2:36:7c:e3:c2:24:5d:d3:b8:
5f:fc:86:14:9a:57:e6:28:40:19:2a:5a:d2:c5:16:
e2:95:70:75:f8:06:69:49:4b:4f:06:57:3f:3d:89:
36:1f:ef:71:15:61:dc:70:6d:82:7c:23:14:7e:eb:
0b:34:c8:c6:36:3d:7f:cd:10:9b:c2:ec:07:ef:cb:
9d:de:a0:af:64:18:43:09:70:5b:bc:dc:be:d5:7e:
aa:1f:3d:00:fa:bb:ee:b2:8a:b9:67:a7:b3:20:df:
f5:d5:42:45:5e:fb:2d:78:97:d7:57:d3:94:a5:98:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B8:6A:B9:04:34:93:DC:E0:A4:D2:46:48:18:91:27:C3:24:52:9F
X509v3 Authority Key Identifier:
keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1a:c6:82:af:f0:74:9a:b7:bb:5b:1a:b5:5d:09:01:9c:66:
26:4e:55:6b:bf:a3:6d:95:14:94:df:2b:4e:d4:08:18:a0:a9:
cd:28:54:d2:4f:0d:e2:56:67:02:41:0f:be:fc:95:93:ba:d3:
3f:1b:88:40:43:d9:32:44:b0:7f:6f:09:a7:10:53:92:eb:0b:
11:8e:4a:b3:4c:17:d7:84:e4:6a:dc:20:2e:0c:5b:c9:6d:b0:
98:4c:6a:06:b4:11:89:53:60:3a:3d:6b:14:8d:85:f5:bf:6c:
1a:6d:6b:54:f0:31:68:f5:35:86:e5:4a:2e:58:12:76:2e:50:
f6:67:eb:19:de:b6:10:12:e3:e2:f3:41:5c:b7:a0:48:40:22:
46:bc:c5:df:41:53:ad:b4:95:19:49:4a:9b:c7:6a:6e:ed:80:
84:fe:6e:69:23:d8:23:48:62:a4:ee:1b:45:3d:77:84:e4:ef:
3e:5f:8a:ce:24:e2:9e:a3:c0:7a:6e:c7:8c:f2:80:fe:32:ec:
88:5d:e2:c8:8f:61:6f:03:1e:4c:42:6d:de:80:54:51:95:6a:
38:7d:8c:35:b0:ae:79:6b:39:8f:49:28:1d:dc:a3:f4:d2:3d:
e2:99:d8:b6:8f:44:40:ae:99:ab:70:90:4f:fb:37:28:51:21:
fb:a8:a8:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfKX8ZR/SHVSle5VFiYO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjEyYmQwNWZmOWM5MWFlMjIzOGYzMjkwMWNiYWFlMWMz
MzcwZmUwHhcNMjUwODA4MjEwMDU4WhcNMjUwODA5MjEwMDU4WjAzMTEwLwYDVQQD
EygwYmI4NmFiOTA0MzQ5M2RjZTBhNGQyNDY0ODE4OTEyN2MzMjQ1MjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qeiPB4GSHwck5UHhOBwFdVhvS5p
GihmVWq8XMaeC+kyS160WS8cdEtL+iGsxc45o2AUk+cQvl7n1be3F9xFiMueTdmW
bWjFQoKcw1NAKErrsIbr6ohpUr+n0XOl4mjn5DYDffePDdg5yoPYOleYSStwZd3v
9Z+qJ/WvdA3+8SCvW2c6vjiGn5VknO/SNnzjwiRd07hf/IYUmlfmKEAZKlrSxRbi
lXB1+AZpSUtPBlc/PYk2H+9xFWHccG2CfCMUfusLNMjGNj1/zRCbwuwH78ud3qCv
ZBhDCXBbvNy+1X6qHz0A+rvusoq5Z6ezIN/11UJFXvsteJfXV9OUpZjljwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu4arkENJPc4KTSRkgYkSfDJFKfMB8GA1UdIwQY
MBaAFGbxK9Bf+cka4iOPMpAcuq4cM3D+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82MDUyOGMtYTNmYy00YzgwLTk1ZTEt
ZjMzMmViMjljNjYwLzEvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82MDUyOGMtYTNmYy00YzgwLTk1ZTEtZjMzMmViMjljNjYw
LzEvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRrGgq/w
dJq3u1satV0JAZxmJk5Va7+jbZUUlN8rTtQIGKCpzShU0k8N4lZnAkEPvvyVk7rT
PxuIQEPZMkSwf28JpxBTkusLEY5Ks0wX14TkatwgLgxbyW2wmExqBrQRiVNgOj1r
FI2F9b9sGm1rVPAxaPU1huVKLlgSdi5Q9mfrGd62EBLj4vNBXLegSEAiRrzF30FT
rbSVGUlKm8dqbu2AhP5uaSPYI0hipO4bRT13hOTvPl+KziTinqPAem7HjPKA/jLs
iF3iyI9hbwMeTEJt3oBUUZVqOH2MNbCueWs5j0koHdyj9NI94pnYto9EQK6Zq3CQ
T/s3KFEh+6ioBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:21 2025 by rpki-client