Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File: zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier: aws+Ob9Q++GFUKgL9LNxf77wCxJ36v6w9ZbYQE8GGMs=
Subject key identifier: 39:BA:B5:B5:ED:8C:E3:8F:58:82:2A:65:0D:CB:56:C3:37:7E:88:DD
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer: /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial: 019873E2E9754F6262B562FA15BE33705098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number: 0FB8
Signing time: Mon 04 Aug 2025 07:01:47 +0000
Manifest this update: Mon 04 Aug 2025 07:01:47 +0000
Manifest next update: Tue 05 Aug 2025 07:01:47 +0000
Files and hashes: 1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: pfnIqi88T76Joz0Nb/EPQdzrixNMZX+SGZiCDkzcDlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e9:75:4f:62:62:b5:62:fa:15:be:33:70:50:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Validity
Not Before: Aug 4 07:01:47 2025 GMT
Not After : Aug 5 07:01:47 2025 GMT
Subject: CN=39bab5b5ed8ce38f58822a650dcb56c3377e88dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:4c:a2:ed:32:9c:de:7c:bc:9b:79:5e:6d:
fb:1f:6f:b5:bc:ee:7d:04:63:ae:4f:93:e7:2b:65:
5f:84:5b:a9:89:39:10:66:19:88:c6:93:aa:3d:b3:
43:73:c8:e2:18:39:59:52:50:79:41:5b:ed:28:7d:
49:a4:ec:f6:47:80:a5:e8:59:45:44:6e:f5:fe:15:
c3:ea:81:ee:0a:bb:8a:b0:f6:63:d4:06:f1:8d:1f:
f7:09:2d:20:9c:74:18:d1:81:25:f0:06:2b:a4:dd:
80:b5:7a:9f:15:04:4b:2a:55:81:00:e7:e1:8f:ea:
76:d4:b5:46:06:80:af:bb:7d:ff:24:55:07:bf:36:
f8:43:ec:ca:cc:03:c6:09:da:e2:2f:d9:e8:1d:8e:
f3:4c:ac:db:7a:04:59:6a:89:a1:06:4d:6a:ee:5a:
4f:45:77:ac:15:f0:58:c4:02:49:ac:8f:1f:94:73:
5d:c0:b2:37:47:1c:7f:4e:5a:28:f8:2f:71:00:0b:
4b:0f:3c:1f:21:a3:5d:e5:7c:fe:31:d2:c0:b7:cd:
6e:70:09:3e:62:7b:57:0d:6c:6c:ad:5d:35:72:29:
eb:8a:de:5d:b2:2e:33:1d:2b:33:c6:7b:c2:97:93:
c1:b5:59:79:67:ca:36:96:aa:1c:32:4d:87:ab:10:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:B5:B5:ED:8C:E3:8F:58:82:2A:65:0D:CB:56:C3:37:7E:88:DD
X509v3 Authority Key Identifier:
keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:90:1a:a2:d0:34:b4:89:d1:44:21:4c:cc:5b:7f:79:81:5d:
38:3a:40:fe:ad:82:d6:fd:01:c8:70:0b:45:5a:ac:63:b3:6c:
a8:12:26:3e:39:1b:1b:1b:90:ba:2f:cb:39:8d:e6:65:23:4b:
6d:ac:af:16:f0:0f:1c:ca:e9:0e:78:e0:b8:91:28:08:72:fa:
83:05:00:ea:b2:36:eb:da:f6:ab:0e:37:49:9b:49:fa:92:c8:
ca:c2:31:fc:47:4d:a0:ae:22:41:b5:ab:43:fb:14:69:4e:ef:
ad:d8:68:c2:15:74:ec:7f:32:4e:e6:fe:5e:ab:69:b1:00:41:
7f:6a:36:4f:ab:58:59:2a:bb:47:b7:b8:8a:3b:41:0c:42:6c:
44:f7:a5:32:3c:fa:3b:4c:4f:c1:17:ea:49:c2:28:f8:04:2e:
e4:c8:9d:4d:59:dd:d6:00:2d:dc:30:d3:79:35:c8:55:72:de:
66:f3:04:b8:1a:58:01:dd:d8:8b:2a:d6:b2:04:1e:3e:fd:da:
67:d0:c9:96:2f:4f:32:68:8d:84:b2:da:3e:cf:de:67:7d:cf:
74:01:ba:53:87:2d:a8:0d:9f:c8:aa:dd:91:db:e5:2b:c5:0f:
b4:67:0b:c9:21:55:02:c0:cf:cd:90:1f:7a:57:f9:5c:46:44:
e4:16:fa:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4ul1T2JitWL6Fb4zcFCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjBlODI0YzYyYTU5MjhhNjUwMjE0ZWYzM2U4Yzc3ZTdj
MWZmOGQwHhcNMjUwODA0MDcwMTQ3WhcNMjUwODA1MDcwMTQ3WjAzMTEwLwYDVQQD
EygzOWJhYjViNWVkOGNlMzhmNTg4MjJhNjUwZGNiNTZjMzM3N2U4OGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkBMou0ynN58vJt5Xm37H2+1vO59
BGOuT5PnK2VfhFupiTkQZhmIxpOqPbNDc8jiGDlZUlB5QVvtKH1JpOz2R4Cl6FlF
RG71/hXD6oHuCruKsPZj1AbxjR/3CS0gnHQY0YEl8AYrpN2AtXqfFQRLKlWBAOfh
j+p21LVGBoCvu33/JFUHvzb4Q+zKzAPGCdriL9noHY7zTKzbegRZaomhBk1q7lpP
RXesFfBYxAJJrI8flHNdwLI3Rxx/Tloo+C9xAAtLDzwfIaNd5Xz+MdLAt81ucAk+
YntXDWxsrV01cinrit5dsi4zHSszxnvCl5PBtVl5Z8o2lqocMk2HqxAT/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm6tbXtjOOPWIIqZQ3LVsM3fojdMB8GA1UdIwQY
MBaAFM3w6CTGKlkoplAhTvM+jHfnwf+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8yMjQ5NjctY2QxYi00NmY5LWE0NmUt
MjU4M2FmMjM3ZTJjLzEvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8yMjQ5NjctY2QxYi00NmY5LWE0NmUtMjU4M2FmMjM3ZTJj
LzEvemZEb0pNWXFXU2ltVUNGTzh6Nk1kLWZCXzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5AaotA0
tInRRCFMzFt/eYFdODpA/q2C1v0ByHALRVqsY7NsqBImPjkbGxuQui/LOY3mZSNL
bayvFvAPHMrpDnjguJEoCHL6gwUA6rI269r2qw43SZtJ+pLIysIx/EdNoK4iQbWr
Q/sUaU7vrdhowhV07H8yTub+XqtpsQBBf2o2T6tYWSq7R7e4ijtBDEJsRPelMjz6
O0xPwRfqScIo+AQu5MidTVnd1gAt3DDTeTXIVXLeZvMEuBpYAd3YiyrWsgQePv3a
Z9DJli9PMmiNhLLaPs/eZ33PdAG6U4ctqA2fyKrdkdvlK8UPtGcLySFVAsDPzZAf
elf5XEZE5Bb6zA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:19 2025 by rpki-client