Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
File: zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft (raw, json)
Hash identifier: P94DX/K4jeX9Pz2hzV2LH4efC4CIjAKsqjI8T3MOD6M=
Subject key identifier: D9:8B:11:66:03:78:68:F8:2E:1D:EC:72:9D:BB:66:61:30:B5:21:8F
Authority key identifier: CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
Certificate issuer: /CN=cda054474fafd90b0ea47c55765bbe6f37637531
Certificate serial: 01989FDEC5BAFFEBF137B630E413558FFCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
Manifest number: E2
Signing time: Tue 12 Aug 2025 20:00:33 +0000
Manifest this update: Tue 12 Aug 2025 20:00:33 +0000
Manifest next update: Wed 13 Aug 2025 20:00:33 +0000
Files and hashes: 1: zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl (hash: wnt7kcf1H9TWCELmjz4WUAhCEpyDlTmVW2p5k6qOBx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:c5:ba:ff:eb:f1:37:b6:30:e4:13:55:8f:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda054474fafd90b0ea47c55765bbe6f37637531
Validity
Not Before: Aug 12 20:00:33 2025 GMT
Not After : Aug 13 20:00:33 2025 GMT
Subject: CN=d98b1166037868f82e1dec729dbb666130b5218f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:d1:0e:e7:cd:e7:81:4f:62:22:df:34:0a:
c2:4c:a8:28:ba:1b:2e:dd:ca:2c:5a:29:46:35:d8:
cb:37:8d:ce:a9:b7:78:0e:97:ef:66:58:91:1b:2b:
b8:df:8b:28:73:55:48:ad:64:79:98:ba:9a:4b:fb:
d2:83:46:61:88:47:6d:ce:75:81:11:cd:22:7e:cb:
35:77:12:f7:d4:40:f1:9f:2b:25:5e:e5:9f:56:e3:
64:42:04:6e:a2:19:bb:f2:ca:7f:48:b5:69:1e:57:
61:01:44:83:5b:ef:3c:e0:b0:02:0d:cd:3e:90:19:
c7:f7:76:2a:6d:91:27:88:e3:be:78:7e:96:36:53:
af:47:49:5f:dd:81:05:69:fd:ca:5a:65:66:6f:25:
5a:8d:11:90:7b:d5:9f:c0:50:b1:09:6a:d7:ac:55:
32:5f:54:3a:65:f9:57:81:00:49:26:db:94:93:0d:
19:4f:19:a1:34:80:67:16:6c:47:4b:1b:58:e5:5f:
dc:b8:d3:ad:3f:9b:60:6e:09:e9:0a:fd:fc:e6:11:
4b:1f:90:bc:6d:1f:c2:c2:b2:da:22:ad:42:c9:a4:
c5:5a:7b:7b:2a:e5:2c:87:6f:9f:0c:a0:fa:1f:bb:
70:7c:ad:20:b4:07:1c:3e:ae:4b:ed:47:a4:4e:94:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8B:11:66:03:78:68:F8:2E:1D:EC:72:9D:BB:66:61:30:B5:21:8F
X509v3 Authority Key Identifier:
keyid:CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d0:24:a8:f1:42:38:5c:b6:05:e7:d4:f4:d5:b4:38:8a:6f:
bc:bf:e4:3c:f1:20:77:30:fd:80:9d:88:1d:75:b1:91:b0:59:
3d:9b:b9:38:11:0b:e3:2d:71:80:9f:d0:40:18:ca:9c:93:fc:
24:97:e3:85:8b:80:33:bb:b2:14:c9:96:af:65:e0:33:c1:37:
93:11:1f:73:88:bf:00:4c:20:a5:e2:11:61:12:08:ac:f1:53:
59:f6:2c:94:ad:eb:e1:8c:19:98:48:9e:b4:3a:3b:5e:f9:27:
e9:5a:ce:96:ed:5f:ee:f6:13:ed:96:08:ba:b5:4f:3e:8f:94:
b1:0d:62:2b:c7:7f:db:b3:89:a8:29:69:e4:d3:d4:73:52:03:
cb:06:d8:16:70:be:b7:c1:89:ae:8a:16:52:8f:99:2e:d8:78:
a9:f1:3e:0f:5c:01:32:bc:36:85:b4:70:4d:35:74:b2:7f:4f:
48:8e:7c:c3:0b:05:51:c8:dc:95:06:10:fb:86:8e:f1:be:2b:
cd:3e:7c:45:2d:23:a1:e8:a6:dd:6c:0a:c4:2a:0a:4a:cc:a0:
51:5a:9e:55:a9:04:19:ea:c8:05:be:28:5f:9e:1d:39:7a:c6:
1b:4d:d2:2c:fd:a4:82:07:f7:16:39:d6:d1:98:d4:f3:b7:8f:
1d:86:dc:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZif3sW6/+vxN7Yw5BNVj/y4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTA1NDQ3NGZhZmQ5MGIwZWE0N2M1NTc2NWJiZTZmMzc2
Mzc1MzEwHhcNMjUwODEyMjAwMDMzWhcNMjUwODEzMjAwMDMzWjAzMTEwLwYDVQQD
EyhkOThiMTE2NjAzNzg2OGY4MmUxZGVjNzI5ZGJiNjY2MTMwYjUyMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6bRDufN54FPYiLfNArCTKgouhsu
3cosWilGNdjLN43Oqbd4DpfvZliRGyu434soc1VIrWR5mLqaS/vSg0ZhiEdtznWB
Ec0ifss1dxL31EDxnyslXuWfVuNkQgRuohm78sp/SLVpHldhAUSDW+884LACDc0+
kBnH93YqbZEniOO+eH6WNlOvR0lf3YEFaf3KWmVmbyVajRGQe9WfwFCxCWrXrFUy
X1Q6ZflXgQBJJtuUkw0ZTxmhNIBnFmxHSxtY5V/cuNOtP5tgbgnpCv385hFLH5C8
bR/CwrLaIq1CyaTFWnt7KuUsh2+fDKD6H7twfK0gtAccPq5L7UekTpRj/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmLEWYDeGj4Lh3scp27ZmEwtSGPMB8GA1UdIwQY
MBaAFM2gVEdPr9kLDqR8VXZbvm83Y3UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYWM5MDQtMjgwMi00MzZlLWFiNDAt
ODEzN2M1Mjk5YWVlLzEvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iYWM5MDQtMjgwMi00MzZlLWFiNDAtODEzN2M1Mjk5YWVl
LzEvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9AkqPFC
OFy2BefU9NW0OIpvvL/kPPEgdzD9gJ2IHXWxkbBZPZu5OBEL4y1xgJ/QQBjKnJP8
JJfjhYuAM7uyFMmWr2XgM8E3kxEfc4i/AEwgpeIRYRIIrPFTWfYslK3r4YwZmEie
tDo7Xvkn6VrOlu1f7vYT7ZYIurVPPo+UsQ1iK8d/27OJqClp5NPUc1IDywbYFnC+
t8GJrooWUo+ZLth4qfE+D1wBMrw2hbRwTTV0sn9PSI58wwsFUcjclQYQ+4aO8b4r
zT58RS0joeim3WwKxCoKSsygUVqeVakEGerIBb4oX54dOXrGG03SLP2kggf3FjnW
0ZjU87ePHYbcIw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:25:10 2025 by rpki-client