Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: ZacdDO/L5wuynYQLNx258x8wHblMN+yrVeLmN3lWJHI=
Subject key identifier: EA:89:55:BB:B6:44:84:91:7E:F4:EC:59:C1:8A:32:AA:9F:D4:BB:1B
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 01977AC21A61FE0B773DE9067320F85C09E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 22:00:30 +0000
Manifest this update: Mon 16 Jun 2025 22:00:30 +0000
Manifest next update: Tue 17 Jun 2025 22:00:30 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: Di5npd0d3pYdKrPvYYheq+03U+EZyi5OLqoNZSt3+pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:1a:61:fe:0b:77:3d:e9:06:73:20:f8:5c:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Jun 16 22:00:30 2025 GMT
Not After : Jun 17 22:00:30 2025 GMT
Subject: CN=ea8955bbb64484917ef4ec59c18a32aa9fd4bb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:de:dd:86:d2:5f:44:92:9f:ac:99:8e:60:
50:95:ef:69:ea:4b:a3:8e:1d:16:e4:2e:da:1c:ae:
01:46:3d:29:3e:6c:25:38:a9:df:5f:45:df:16:af:
50:00:29:37:4a:4f:bf:3b:7f:c2:ec:60:38:31:01:
6d:1e:d8:0a:77:76:3d:8e:6a:4b:a4:90:56:a6:c3:
d3:04:b2:e7:a8:0e:14:7d:f1:77:05:06:ec:a8:08:
f5:59:ef:62:cc:98:91:9c:32:36:eb:c5:63:cc:ff:
86:c8:78:47:4f:9e:85:b2:71:9e:52:df:13:0e:ee:
ea:a4:2e:f1:6a:0f:5c:58:9c:56:a7:db:e8:02:c9:
55:23:cd:96:40:c2:cc:84:de:97:12:89:2c:2c:6b:
1d:16:f1:c4:90:47:68:da:61:60:d3:58:a1:8e:5e:
bd:98:8d:2f:8b:80:f4:13:fa:8e:7b:4b:e0:ca:d3:
e9:55:1f:e7:a5:6b:df:79:62:19:77:d3:47:6a:d0:
63:04:5b:97:25:8c:85:24:a4:da:f3:f8:56:95:03:
57:e8:20:a5:11:ec:3a:93:71:c9:81:ef:69:b0:92:
6a:96:c1:c8:4d:ae:28:62:87:02:eb:8e:3b:f7:be:
74:8d:1c:4c:6c:44:a0:23:31:9f:39:59:e6:01:8c:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:89:55:BB:B6:44:84:91:7E:F4:EC:59:C1:8A:32:AA:9F:D4:BB:1B
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:71:61:9a:4d:cc:0d:2f:44:17:ee:ee:79:74:cc:d9:29:c0:
88:e9:bf:9e:73:2b:83:42:f0:95:03:9e:85:0e:85:42:4b:e8:
57:b3:ab:56:4a:42:0b:20:04:c7:e9:1e:d3:f6:6c:fc:a3:8b:
d3:60:4c:07:a4:7d:c5:33:00:7d:98:0c:18:aa:32:3d:68:e5:
fe:32:77:c2:8d:ca:99:e0:27:f1:8b:aa:8a:41:4b:16:b4:e6:
b9:af:f1:6f:f1:f6:06:44:ba:32:4a:70:9d:47:5c:8e:40:67:
b9:15:01:c8:32:a6:07:64:4e:46:77:70:48:f5:dc:c2:0a:cf:
ea:0c:e3:88:94:ee:af:ef:0f:95:ba:eb:1d:d1:b8:3f:8a:83:
ff:d4:9c:42:e1:ab:8a:a0:dc:ad:b4:da:20:84:b5:49:4d:e6:
4f:9b:0d:d4:f5:ad:9e:05:57:2f:f0:9b:52:1b:30:02:02:88:
8b:91:3e:09:43:5e:09:30:35:10:c2:72:d8:15:d5:6a:6d:d5:
49:8b:35:75:64:83:d9:da:1a:63:55:e0:fa:fc:1d:92:3c:a4:
9a:62:7a:6c:32:e7:7f:88:a1:b9:7f:05:f6:48:4d:a5:b3:6b:
4e:e3:b5:1f:d5:c3:3f:68:48:eb:ce:f7:78:47:dd:06:fb:89:
cb:60:69:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6whph/gt3PekGcyD4XAnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjNlMzY2MDZmYTUyYzNhNDcyMWM4Y2EwZmIzMzA5OTUz
NDE5NWEwHhcNMjUwNjE2MjIwMDMwWhcNMjUwNjE3MjIwMDMwWjAzMTEwLwYDVQQD
EyhlYTg5NTViYmI2NDQ4NDkxN2VmNGVjNTljMThhMzJhYTlmZDRiYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgLe3YbSX0SSn6yZjmBQle9p6kuj
jh0W5C7aHK4BRj0pPmwlOKnfX0XfFq9QACk3Sk+/O3/C7GA4MQFtHtgKd3Y9jmpL
pJBWpsPTBLLnqA4UffF3BQbsqAj1We9izJiRnDI268VjzP+GyHhHT56FsnGeUt8T
Du7qpC7xag9cWJxWp9voAslVI82WQMLMhN6XEoksLGsdFvHEkEdo2mFg01ihjl69
mI0vi4D0E/qOe0vgytPpVR/npWvfeWIZd9NHatBjBFuXJYyFJKTa8/hWlQNX6CCl
Eew6k3HJge9psJJqlsHITa4oYocC64479750jRxMbESgIzGfOVnmAYx35QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqJVbu2RISRfvTsWcGKMqqf1LsbMB8GA1UdIwQY
MBaAFGSz42YG+lLDpHIcjKD7MwmVNBlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUt
MGUzODFiZDQxM2QzLzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUtMGUzODFiZDQxM2Qz
LzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3Fhmk3M
DS9EF+7ueXTM2SnAiOm/nnMrg0LwlQOehQ6FQkvoV7OrVkpCCyAEx+ke0/Zs/KOL
02BMB6R9xTMAfZgMGKoyPWjl/jJ3wo3KmeAn8YuqikFLFrTmua/xb/H2BkS6Mkpw
nUdcjkBnuRUByDKmB2RORndwSPXcwgrP6gzjiJTur+8PlbrrHdG4P4qD/9ScQuGr
iqDcrbTaIIS1SU3mT5sN1PWtngVXL/CbUhswAgKIi5E+CUNeCTA1EMJy2BXVam3V
SYs1dWSD2doaY1Xg+vwdkjykmmJ6bDLnf4ihuX8F9khNpbNrTuO1H9XDP2hI6873
eEfdBvuJy2Bp9g==
-----END CERTIFICATE-----
Generated at Tue Jun 17 06:49:29 2025 by rpki-client