Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: sKDZIw3SppWRSmW5rFktNPADpXqNPMhhpDO5kw0i7YI=
Subject key identifier: D7:23:BA:88:EA:AA:BB:10:39:39:68:CD:96:68:3B:18:92:4D:5C:38
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 019873E24B0E0754B13587C71207232861C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 07C4
Signing time: Mon 04 Aug 2025 07:01:06 +0000
Manifest this update: Mon 04 Aug 2025 07:01:06 +0000
Manifest next update: Tue 05 Aug 2025 07:01:06 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: JSAZ8BB6VGC4ITSXJWd/euBr+sJ0g71W0iAlRf3OSnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:4b:0e:07:54:b1:35:87:c7:12:07:23:28:61:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Aug 4 07:01:06 2025 GMT
Not After : Aug 5 07:01:06 2025 GMT
Subject: CN=d723ba88eaaabb10393968cd96683b18924d5c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:26:65:5c:42:6e:b0:cc:27:ca:f8:3c:3d:
46:6f:4d:dd:98:59:54:38:f8:55:ea:0f:e9:f9:56:
50:08:41:33:43:f8:6b:3f:05:a1:f5:e7:b4:6a:63:
3a:ce:74:88:42:e8:1a:d7:5b:bf:96:86:98:36:d8:
e5:47:df:f3:44:c2:8d:b0:8f:df:aa:94:f5:f2:5a:
33:7b:c2:b3:0e:30:8d:50:1d:a1:0a:83:50:6c:7a:
ec:7c:24:b0:15:9a:9b:30:28:94:69:22:e3:ef:70:
50:c0:65:a7:7e:1a:6d:3a:cc:86:13:e6:72:b1:5a:
5c:20:ed:50:af:96:56:6b:97:c7:75:4b:20:23:f7:
e5:9d:2b:17:28:0a:87:5f:5a:83:f8:97:68:18:84:
5a:69:e0:d8:0f:20:e7:98:46:f9:f0:91:aa:23:27:
8a:6d:e2:42:bf:79:40:21:74:de:d7:fd:a1:e0:61:
e3:f2:28:20:d8:fe:c2:64:aa:46:10:7e:17:3e:67:
43:a4:82:17:09:93:80:06:d9:33:f2:27:e7:a3:2d:
26:ac:86:61:c9:7a:f9:69:fa:06:2d:fd:13:fd:d3:
71:02:16:20:4d:58:93:ce:95:50:fa:f9:e7:bf:77:
82:53:65:5c:c6:34:38:9e:8b:34:55:d1:7a:ff:48:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:23:BA:88:EA:AA:BB:10:39:39:68:CD:96:68:3B:18:92:4D:5C:38
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a5:9c:f0:91:da:2b:cc:72:0b:f5:32:db:07:82:d8:5c:09:
d5:18:08:c8:2f:7d:8f:a8:74:c0:b7:1e:f6:d6:93:8c:54:30:
2e:9e:d4:a9:3b:12:10:23:a8:03:96:88:3c:1b:69:44:b3:bc:
ef:b5:7a:d5:de:c4:6a:6f:9c:a6:6d:32:17:e5:7e:ce:c6:40:
3e:72:98:aa:9b:13:75:29:ef:32:3c:ae:47:63:fe:30:47:92:
5c:09:b5:a6:0b:dc:95:73:23:f6:b2:16:24:0d:d3:45:c7:ea:
0a:c4:bc:91:1f:f0:3c:16:65:33:c1:df:f8:70:89:1a:ef:4c:
91:8e:a4:7c:1e:e1:96:a6:a9:ac:17:4d:3a:c7:a7:73:c2:e0:
84:25:cb:2f:ed:fe:0c:4d:e7:9d:b6:ea:ab:ff:d0:cc:47:c3:
b0:2f:a4:31:25:1c:c4:1c:ad:de:4d:5d:bc:de:51:02:4b:35:
bd:9b:b5:00:5e:16:38:fb:06:9e:e8:43:51:e1:13:78:44:93:
87:3e:0d:94:94:c2:81:d0:a8:37:5f:20:d1:13:e4:70:ab:1d:
2f:ad:b2:f0:68:11:f5:83:cc:bb:6c:64:0e:37:7f:3a:91:33:
86:49:6d:ce:5e:ed:3a:f5:28:78:d4:a2:a9:36:e5:44:77:96:
2a:93:f7:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4ksOB1SxNYfHEgcjKGHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTQ3NzVmZGFlZWM3YjBkNWM5MjcwODM5ODhkNTU1NzI3
YzIxYjUwHhcNMjUwODA0MDcwMTA2WhcNMjUwODA1MDcwMTA2WjAzMTEwLwYDVQQD
EyhkNzIzYmE4OGVhYWFiYjEwMzkzOTY4Y2Q5NjY4M2IxODkyNGQ1YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZkmZVxCbrDMJ8r4PD1Gb03dmFlU
OPhV6g/p+VZQCEEzQ/hrPwWh9ee0amM6znSIQuga11u/loaYNtjlR9/zRMKNsI/f
qpT18loze8KzDjCNUB2hCoNQbHrsfCSwFZqbMCiUaSLj73BQwGWnfhptOsyGE+Zy
sVpcIO1Qr5ZWa5fHdUsgI/flnSsXKAqHX1qD+JdoGIRaaeDYDyDnmEb58JGqIyeK
beJCv3lAIXTe1/2h4GHj8igg2P7CZKpGEH4XPmdDpIIXCZOABtkz8ifnoy0mrIZh
yXr5afoGLf0T/dNxAhYgTViTzpVQ+vnnv3eCU2VcxjQ4nos0VdF6/0g93QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcjuojqqrsQOTlozZZoOxiSTVw4MB8GA1UdIwQY
MBaAFGQUd1/a7sew1cknCDmI1VVyfCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUt
NDc1NzI3YTAzZGQzLzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUtNDc1NzI3YTAzZGQz
LzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6Wc8JHa
K8xyC/Uy2weC2FwJ1RgIyC99j6h0wLce9taTjFQwLp7UqTsSECOoA5aIPBtpRLO8
77V61d7Eam+cpm0yF+V+zsZAPnKYqpsTdSnvMjyuR2P+MEeSXAm1pgvclXMj9rIW
JA3TRcfqCsS8kR/wPBZlM8Hf+HCJGu9MkY6kfB7hlqaprBdNOsenc8LghCXLL+3+
DE3nnbbqq//QzEfDsC+kMSUcxByt3k1dvN5RAks1vZu1AF4WOPsGnuhDUeETeEST
hz4NlJTCgdCoN18g0RPkcKsdL62y8GgR9YPMu2xkDjd/OpEzhkltzl7tOvUoeNSi
qTblRHeWKpP3BA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:19 2025 by rpki-client