
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
File: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json)
Hash identifier: hApGzrwBTluWEosQrnW4IIP1Z9NrGszv1EVPVLLSDwk=
Subject key identifier: BA:1C:F8:60:8D:4A:DB:94:12:26:32:43:E7:31:C4:86:A4:62:69:00
Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Certificate serial: 0198906C04F5DAC8321ACCA802D964CB9C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
Manifest number: 11B2
Signing time: Sat 09 Aug 2025 20:00:54 +0000
Manifest this update: Sat 09 Aug 2025 20:00:54 +0000
Manifest next update: Sun 10 Aug 2025 20:00:54 +0000
Files and hashes: 1: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: 3csDJgSkxtghePfe3jIoVq3gALxw/K0vRkY+DzyL/fg=)
2: uoOTDO3I8Ju9HNeb_RrUnxiXqMM.roa (hash: uWLf97UT0+0lxJvC3noTnvF0IVTFV5k9XbA2AIDmE6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:04:f5:da:c8:32:1a:cc:a8:02:d9:64:cb:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Validity
Not Before: Aug 9 20:00:54 2025 GMT
Not After : Aug 10 20:00:54 2025 GMT
Subject: CN=ba1cf8608d4adb9412263243e731c486a4626900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:92:ae:32:df:d3:9f:55:65:bc:76:54:39:d2:
11:7d:65:27:c8:a9:2e:17:70:28:67:82:a0:3f:85:
6f:04:5a:57:f8:be:e3:be:00:55:7a:03:a3:18:86:
30:21:0a:9e:ac:45:d6:e2:94:85:fc:0f:63:77:48:
d3:16:8c:d6:06:65:e3:ae:b8:99:1f:89:76:2c:44:
ad:71:2f:a1:d2:25:45:12:b3:e6:17:30:da:5f:d4:
e8:98:53:03:ac:1b:85:d2:d6:e5:ed:42:88:8a:2d:
7b:7a:81:eb:8a:2d:48:96:11:bf:e8:17:21:f4:e4:
3b:e9:07:f0:21:8d:a5:c9:20:b3:24:a7:73:0f:1e:
9a:a1:1c:02:87:58:48:4c:6e:3f:a6:cf:61:f4:15:
61:6a:de:6b:14:eb:0c:ea:32:ae:1e:58:fe:ad:66:
98:f2:02:7d:14:94:24:d5:87:51:89:6b:2c:5e:bd:
61:bf:42:d5:12:94:a2:73:a8:2f:62:9c:97:a8:fd:
11:64:77:d0:67:36:7f:8a:99:58:e2:80:38:f4:04:
84:bd:bd:25:01:c1:4b:82:fe:98:ad:a2:f5:cb:09:
4c:59:9b:42:49:60:b5:32:e9:0e:61:78:1d:d1:a4:
10:7b:93:df:ac:25:0d:a2:23:ac:e6:68:e1:0a:c6:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1C:F8:60:8D:4A:DB:94:12:26:32:43:E7:31:C4:86:A4:62:69:00
X509v3 Authority Key Identifier:
keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ad:3f:2c:62:33:66:15:95:00:8f:1c:c5:62:f0:f0:59:35:
e4:16:4d:ee:12:2b:3d:e4:b4:2a:15:91:ec:66:72:40:0e:18:
d8:a8:21:9d:1e:68:40:7a:cc:12:b6:f6:f4:c4:58:97:4e:74:
ea:e4:01:65:7f:d7:55:14:5a:fb:4f:a3:e3:ca:f2:10:6d:0d:
8c:24:9e:ad:cf:32:24:98:2b:67:68:2e:cf:0a:10:61:79:f3:
1f:a3:69:ad:93:cf:b1:80:02:7c:ef:2d:51:bf:9c:5a:65:7d:
12:39:84:46:10:47:ba:4f:d0:0b:37:f2:86:1f:d6:52:a4:1f:
ce:e7:09:73:7b:4b:80:38:d5:42:cc:18:e8:51:ec:da:ce:ae:
9e:25:15:0c:5d:73:1f:cc:61:8e:1a:b2:0d:3f:e7:31:d4:22:
31:c3:2f:14:b4:18:ce:5d:f5:5b:ad:a4:54:6c:4d:eb:f5:1d:
09:69:15:19:59:5e:fe:2d:41:63:02:d1:a7:7a:89:53:5f:03:
c3:1a:b6:10:ea:69:24:cc:45:43:96:68:98:9b:d5:d2:3d:ad:
1c:5c:c0:f9:42:a0:af:8e:ee:cb:c6:50:a5:a2:b8:f8:4e:6e:
8b:23:2e:47:30:ea:b3:e4:78:3e:c8:24:43:60:34:7c:0a:13:
90:88:0a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQbAT12sgyGsyoAtlky5yeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDVlNWNkN2QwMzc1ZGUyNTI3NDA1NDY0MTJiODhiYTVi
Y2ZhN2EwHhcNMjUwODA5MjAwMDU0WhcNMjUwODEwMjAwMDU0WjAzMTEwLwYDVQQD
EyhiYTFjZjg2MDhkNGFkYjk0MTIyNjMyNDNlNzMxYzQ4NmE0NjI2OTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JKuMt/Tn1VlvHZUOdIRfWUnyKku
F3AoZ4KgP4VvBFpX+L7jvgBVegOjGIYwIQqerEXW4pSF/A9jd0jTFozWBmXjrriZ
H4l2LEStcS+h0iVFErPmFzDaX9TomFMDrBuF0tbl7UKIii17eoHrii1IlhG/6Bch
9OQ76QfwIY2lySCzJKdzDx6aoRwCh1hITG4/ps9h9BVhat5rFOsM6jKuHlj+rWaY
8gJ9FJQk1YdRiWssXr1hv0LVEpSic6gvYpyXqP0RZHfQZzZ/iplY4oA49ASEvb0l
AcFLgv6YraL1ywlMWZtCSWC1MukOYXgd0aQQe5PfrCUNoiOs5mjhCsaCqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoc+GCNStuUEiYyQ+cxxIakYmkAMB8GA1UdIwQY
MBaAFGbV5c19A3XeJSdAVGQSuIulvPp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDkt
ODZiOTBmMTk3ZWRlLzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDktODZiOTBmMTk3ZWRl
LzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZa0/LGIz
ZhWVAI8cxWLw8Fk15BZN7hIrPeS0KhWR7GZyQA4Y2KghnR5oQHrMErb29MRYl050
6uQBZX/XVRRa+0+j48ryEG0NjCSerc8yJJgrZ2guzwoQYXnzH6NprZPPsYACfO8t
Ub+cWmV9EjmERhBHuk/QCzfyhh/WUqQfzucJc3tLgDjVQswY6FHs2s6uniUVDF1z
H8xhjhqyDT/nMdQiMcMvFLQYzl31W62kVGxN6/UdCWkVGVle/i1BYwLRp3qJU18D
wxq2EOppJMxFQ5ZomJvV0j2tHFzA+UKgr47uy8ZQpaK4+E5uiyMuRzDqs+R4Psgk
Q2A0fAoTkIgKiA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:45:13 2025 by rpki-client