Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: 6cgHTdTsxnZZWt8rlwf4ynkWzg0j7x8MRVYO82dfjuM=
Subject key identifier: 62:03:99:2D:DE:F2:1B:8B:4D:40:72:E6:8F:A7:9D:9B:FA:01:3A:99
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 0198733D8FC935D75BCFE8BEEE15C18EADBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 04:01:11 +0000
Manifest this update: Mon 04 Aug 2025 04:01:11 +0000
Manifest next update: Tue 05 Aug 2025 04:01:11 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: z4K+C6AJB2bu01Ia29r1SLDdiZhJPYeXrKwHt/xj2yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:8f:c9:35:d7:5b:cf:e8:be:ee:15:c1:8e:ad:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Aug 4 04:01:11 2025 GMT
Not After : Aug 5 04:01:11 2025 GMT
Subject: CN=6203992ddef21b8b4d4072e68fa79d9bfa013a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:f1:bd:69:e4:ab:27:a0:5b:93:fd:6d:c3:
6c:ee:f5:a3:3e:10:cf:d9:b1:e7:8b:c8:3d:3b:8c:
16:1a:9d:d2:c8:55:96:ba:0b:f1:39:e7:5a:f4:0b:
b2:31:e1:69:32:e3:09:7d:7d:6b:3b:ae:79:9f:ed:
3e:95:57:17:3f:67:0d:db:d8:fd:06:48:54:ef:5b:
50:4a:f3:22:26:54:f0:0e:1b:ab:34:38:94:6e:a5:
b3:c0:96:ba:e9:d4:4e:b9:d1:bf:e4:b7:7b:55:c1:
7b:7f:18:5b:01:e6:46:c0:73:28:2d:63:21:cb:df:
5b:13:bf:22:94:30:e2:5e:92:18:b3:ee:df:46:63:
8f:d9:2b:b0:f9:7f:19:72:9b:43:a4:51:e0:eb:b3:
a1:2f:e7:c7:b9:1a:66:10:35:68:95:fd:ae:76:65:
d4:62:0f:c6:0c:45:54:62:bf:88:36:ec:48:7c:66:
90:b6:ff:57:72:88:66:94:c6:0f:16:c2:c7:56:3b:
fc:26:bd:71:7d:7c:44:1b:e1:70:ce:84:37:9b:bc:
46:b8:ed:36:a4:98:e5:85:b2:75:45:df:6c:29:e1:
df:13:8f:f9:bc:09:3d:b5:97:ad:d7:4d:4e:64:84:
2c:d1:c4:10:c6:c8:79:6d:4d:dc:8c:a7:2c:bd:bc:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:03:99:2D:DE:F2:1B:8B:4D:40:72:E6:8F:A7:9D:9B:FA:01:3A:99
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d9:36:74:49:6e:45:c1:e2:06:69:8f:6c:14:ac:e8:a3:06:
aa:72:eb:e4:89:50:2d:f9:15:64:57:7d:89:47:46:07:17:de:
22:36:ad:a1:b7:12:4a:5e:d0:69:70:b7:e6:3f:a3:d5:1b:48:
d1:c7:d4:bf:b7:36:bc:63:36:9e:db:82:35:d1:01:42:8f:a3:
5f:f3:68:b8:cc:2e:1a:ae:e1:b2:f0:d3:c9:77:3c:63:16:31:
d1:d0:eb:a8:89:c3:49:7c:f8:33:b8:69:88:d2:a0:e7:ae:cb:
1b:cc:f3:5c:61:c5:2e:f9:68:34:a7:9a:1b:61:5f:52:a5:7c:
b2:10:78:d3:7c:b5:a3:27:d2:84:83:98:21:12:21:f3:07:49:
fd:0b:a1:6f:77:56:f9:f4:08:95:95:2a:06:12:88:f8:80:85:
16:1a:51:08:4c:90:75:19:e1:b3:6d:5d:b9:9f:2b:56:d5:94:
6c:2b:cc:ef:48:38:3c:07:84:39:fe:06:f8:c1:cf:87:44:db:
94:01:94:18:c7:86:cc:ca:76:6a:6a:6f:99:b7:b0:d1:bc:a6:
3f:26:8f:7e:e0:48:0b:6e:7c:fe:89:85:de:41:30:33:a1:f5:
ac:99:83:9f:b0:32:c3:3b:c2:4c:f0:fc:ce:fa:28:e3:f4:9d:
fa:8d:d4:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPY/JNddbz+i+7hXBjq27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzUwN2E1YTFlNTUwMWE3YWQ2MzU1MzM1YWNkZmU2M2Rh
YmM5MGIwHhcNMjUwODA0MDQwMTExWhcNMjUwODA1MDQwMTExWjAzMTEwLwYDVQQD
Eyg2MjAzOTkyZGRlZjIxYjhiNGQ0MDcyZTY4ZmE3OWQ5YmZhMDEzYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2LxvWnkqyegW5P9bcNs7vWjPhDP
2bHni8g9O4wWGp3SyFWWugvxOeda9AuyMeFpMuMJfX1rO655n+0+lVcXP2cN29j9
BkhU71tQSvMiJlTwDhurNDiUbqWzwJa66dROudG/5Ld7VcF7fxhbAeZGwHMoLWMh
y99bE78ilDDiXpIYs+7fRmOP2Suw+X8ZcptDpFHg67OhL+fHuRpmEDVolf2udmXU
Yg/GDEVUYr+INuxIfGaQtv9XcohmlMYPFsLHVjv8Jr1xfXxEG+FwzoQ3m7xGuO02
pJjlhbJ1Rd9sKeHfE4/5vAk9tZet101OZIQs0cQQxsh5bU3cjKcsvbyGiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIDmS3e8huLTUBy5o+nnZv6ATqZMB8GA1UdIwQY
MBaAFM7FB6Wh5VAaetY1UzWs3+Y9q8kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2Mt
ZDI0YWE1Nzk0ZDhiLzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2MtZDI0YWE1Nzk0ZDhi
LzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndk2dElu
RcHiBmmPbBSs6KMGqnLr5IlQLfkVZFd9iUdGBxfeIjatobcSSl7QaXC35j+j1RtI
0cfUv7c2vGM2ntuCNdEBQo+jX/NouMwuGq7hsvDTyXc8YxYx0dDrqInDSXz4M7hp
iNKg567LG8zzXGHFLvloNKeaG2FfUqV8shB403y1oyfShIOYIRIh8wdJ/Quhb3dW
+fQIlZUqBhKI+ICFFhpRCEyQdRnhs21duZ8rVtWUbCvM70g4PAeEOf4G+MHPh0Tb
lAGUGMeGzMp2ampvmbew0bymPyaPfuBIC258/omF3kEwM6H1rJmDn7AywzvCTPD8
zvoo4/Sd+o3UTg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:48 2025 by rpki-client