Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: 0SMjtOuf98Il0cXmfncGPjcZhmlO0OdxsyPAnr+9mLA=
Subject key identifier: F9:60:95:62:E6:AC:C5:DD:3B:26:CC:F5:FF:06:83:EE:26:E3:A2:C0
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 01989D8326B551AB3229D18E25AD4D12C53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0973
Signing time: Tue 12 Aug 2025 09:01:14 +0000
Manifest this update: Tue 12 Aug 2025 09:01:14 +0000
Manifest next update: Wed 13 Aug 2025 09:01:14 +0000
Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: l22gUHXnHlVHWf3NetlYE7MdsAjzwcwJ8+pYRDlhpck=)
2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:83:26:b5:51:ab:32:29:d1:8e:25:ad:4d:12:c5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Aug 12 09:01:14 2025 GMT
Not After : Aug 13 09:01:14 2025 GMT
Subject: CN=f9609562e6acc5dd3b26ccf5ff0683ee26e3a2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:b1:fa:b4:10:7a:11:40:3a:e6:db:0e:04:
92:1e:af:5e:82:1b:92:cd:dd:01:f6:89:bb:1e:e3:
29:2c:73:7f:d2:9b:02:9b:83:fe:0e:2d:a1:9d:ee:
93:63:8b:45:42:13:cd:17:6f:2c:67:94:3d:b2:9d:
ed:bf:70:06:05:80:4d:9f:69:5c:be:01:45:1e:9d:
20:5b:d1:13:4e:d4:b0:f2:d0:77:7f:ec:05:f0:92:
c1:74:9a:27:c1:26:4e:2d:69:5d:f7:32:31:8d:36:
c8:98:db:3a:e1:5e:33:50:8b:27:ee:eb:cc:12:07:
0a:11:01:8c:a7:07:c1:e9:68:73:5d:4d:ff:bb:4a:
f6:ac:18:9e:e9:44:bc:44:2d:71:ff:8a:1d:3a:be:
06:5f:3a:c5:3b:2d:08:be:bf:0f:73:e8:10:cc:ca:
02:1f:50:72:a3:3c:3b:a2:94:43:1a:7a:8a:d4:02:
2d:b3:aa:73:7d:ef:7f:2c:b1:2d:9d:e7:6f:8e:f0:
50:a7:3c:22:31:57:6c:8d:fa:58:f9:3b:91:01:ac:
54:36:7a:c9:51:47:d8:cd:d9:eb:3c:c8:9d:d7:55:
c3:cd:bf:49:38:93:e2:64:ea:60:d8:c4:b6:29:3b:
62:91:0c:46:e0:3e:0a:47:81:0c:8c:2c:67:76:19:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:95:62:E6:AC:C5:DD:3B:26:CC:F5:FF:06:83:EE:26:E3:A2:C0
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1b:c7:b5:71:5f:42:a9:a6:c0:c5:ca:58:58:64:fc:5f:9a:
c1:c7:1c:b3:cb:02:02:47:f2:ea:9e:b7:f2:39:35:45:ea:6a:
9f:e6:96:f3:0e:f4:35:d3:cb:69:8e:ff:41:ba:18:68:b6:09:
4f:cb:f2:8c:7a:6f:75:5a:71:b9:74:d0:38:ea:01:aa:ce:a4:
be:ef:e4:25:47:29:da:4e:cb:bc:5d:d7:b2:2e:12:3b:b3:f3:
2f:46:2c:ce:9e:b0:81:e1:e2:c1:ff:42:0d:bb:cf:ab:d5:33:
7d:42:a7:84:c3:a6:8c:7b:78:e7:07:12:7e:72:01:29:42:e9:
52:1f:f8:13:41:ee:c0:9f:4e:c4:41:11:95:3a:02:f9:13:dd:
b5:64:b1:bb:b0:fd:54:a9:cf:64:7a:26:f6:30:49:bc:63:63:
f2:52:3e:d0:c1:52:11:a0:ef:71:bb:a7:e2:11:94:09:e4:73:
4e:3a:24:92:ad:7b:a3:f8:79:88:ab:63:7b:dc:0b:71:eb:0b:
bf:12:ec:11:19:83:eb:a9:9c:15:c8:d0:3b:6f:14:7e:d1:ec:
bb:7b:98:9d:7d:a7:91:ad:25:b5:f7:fd:26:e3:b4:45:ab:ff:
dc:c7:62:fc:e7:64:b2:8b:f4:d7:3d:b1:73:0d:7c:8b:1e:e2:
b4:87:5a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZidgya1UasyKdGOJa1NEsU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YjA3OGRlZDM3NTkyMzBjYTJlMWEzYmU5MDY2MzhkMTMw
NmI5MDgwHhcNMjUwODEyMDkwMTE0WhcNMjUwODEzMDkwMTE0WjAzMTEwLwYDVQQD
EyhmOTYwOTU2MmU2YWNjNWRkM2IyNmNjZjVmZjA2ODNlZTI2ZTNhMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Kx+rQQehFAOubbDgSSHq9eghuS
zd0B9om7HuMpLHN/0psCm4P+Di2hne6TY4tFQhPNF28sZ5Q9sp3tv3AGBYBNn2lc
vgFFHp0gW9ETTtSw8tB3f+wF8JLBdJonwSZOLWld9zIxjTbImNs64V4zUIsn7uvM
EgcKEQGMpwfB6WhzXU3/u0r2rBie6US8RC1x/4odOr4GXzrFOy0Ivr8Pc+gQzMoC
H1Byozw7opRDGnqK1AIts6pzfe9/LLEtnedvjvBQpzwiMVdsjfpY+TuRAaxUNnrJ
UUfYzdnrPMid11XDzb9JOJPiZOpg2MS2KTtikQxG4D4KR4EMjCxndhmYtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlglWLmrMXdOybM9f8Gg+4m46LAMB8GA1UdIwQY
MBaAFGaweN7TdZIwyi4aO+kGY40TBrkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEt
NDAyZTYyYzU0ZDMyLzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEtNDAyZTYyYzU0ZDMy
LzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThvHtXFf
QqmmwMXKWFhk/F+awcccs8sCAkfy6p638jk1Repqn+aW8w70NdPLaY7/QboYaLYJ
T8vyjHpvdVpxuXTQOOoBqs6kvu/kJUcp2k7LvF3Xsi4SO7PzL0Yszp6wgeHiwf9C
DbvPq9UzfUKnhMOmjHt45wcSfnIBKULpUh/4E0HuwJ9OxEERlToC+RPdtWSxu7D9
VKnPZHom9jBJvGNj8lI+0MFSEaDvcbun4hGUCeRzTjokkq17o/h5iKtje9wLcesL
vxLsERmD66mcFcjQO28UftHsu3uYnX2nka0ltff9JuO0Rav/3Mdi/Odksov01z2x
cw18ix7itIdaCA==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:56 2025 by rpki-client