Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: guzQaaPAaBwKUix7lh6C/LP9d3WscE3Dgu2CMzCM/Pk=
Subject key identifier: AC:9A:B9:21:0F:B2:CD:9D:D8:99:79:FD:69:D0:4F:E9:CB:4F:7D:7F
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 019A4EF44E3D92F515E65226CD02F12659F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0D62
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: aAP+zcUVQaex/S3NqcZhao1F/wfNZmA9hiObnOyIBOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4e:3d:92:f5:15:e6:52:26:cd:02:f1:26:59:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=ac9ab9210fb2cd9dd89979fd69d04fe9cb4f7d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:c6:b5:56:76:c8:db:fc:d8:da:e2:ea:96:
11:63:88:17:93:4c:01:b0:d0:14:1e:01:cb:0c:92:
de:d8:65:94:44:e6:6a:54:a9:71:dc:a7:71:12:c9:
a9:56:9a:e0:16:10:ad:c9:61:ed:94:23:02:4a:e4:
59:87:25:24:ba:0b:37:17:81:e5:a2:ee:22:74:6c:
86:d6:4d:4c:52:30:49:6e:0a:67:bc:8c:f2:cc:0b:
04:77:c3:05:34:16:34:88:b5:e7:b9:01:fe:da:33:
3a:a8:44:ae:2c:35:8b:96:6d:f7:22:fa:ce:c7:02:
2e:8b:e1:2e:6d:96:1e:32:7e:ce:aa:e4:df:0b:0e:
6b:5a:11:b6:4a:57:34:ed:ee:81:81:ec:b3:04:0b:
4f:d3:e4:03:9c:44:42:6b:b2:7e:7f:1e:1f:45:61:
89:a0:df:90:a9:fb:31:a2:86:0d:37:7b:a7:e8:da:
c2:c7:ed:da:a1:f7:da:c0:32:59:2e:0c:64:7a:db:
44:59:59:8a:53:c4:15:83:21:52:12:f0:b4:76:b7:
52:64:fb:5b:e4:e6:8c:88:10:4a:7d:28:d9:bd:3a:
82:28:73:27:fe:d5:f9:f0:13:10:5b:c8:44:63:7d:
d3:df:b6:22:0e:95:40:1c:fe:f4:93:a0:77:76:ef:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:B9:21:0F:B2:CD:9D:D8:99:79:FD:69:D0:4F:E9:CB:4F:7D:7F
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9a:5c:b5:08:79:46:bf:b4:91:f8:db:b2:1f:a6:72:a2:b9:
06:a1:3a:f3:c2:68:59:d3:99:7b:ed:c2:eb:ca:14:22:69:81:
fd:87:9d:57:95:18:ad:c7:06:5d:90:00:53:4f:eb:d5:86:15:
aa:a4:74:b6:aa:16:ab:33:82:4b:8f:77:a2:4e:40:80:76:56:
50:f8:51:68:fe:27:6a:f1:14:9c:b5:74:3f:1a:07:c9:07:22:
89:ee:a3:27:e6:23:e4:2b:19:74:30:e1:31:ef:aa:ff:1b:6c:
cf:7c:5a:04:15:7b:4d:95:5b:e3:14:82:c8:ea:98:54:9d:7a:
21:11:65:d8:20:a1:ca:ba:5a:e0:90:95:bb:8a:29:6c:c6:f5:
87:df:5e:c5:f5:f8:a5:79:45:b6:3b:90:ca:98:0e:b7:2e:ae:
9e:52:e6:8c:70:7f:ed:03:f8:62:02:29:d3:4c:34:9c:4f:ef:
9f:fd:2b:39:b5:9f:0c:6c:4f:94:4b:21:fb:59:c5:e7:60:80:
af:8c:58:7f:5e:f7:b7:2f:94:c9:37:4d:d1:3a:e7:7c:18:8a:
84:de:e6:43:aa:8f:2f:05:47:e5:e6:0a:53:15:45:e8:aa:21:
22:db:67:97:30:b2:02:9a:29:aa:cd:21:e8:4e:22:49:c9:87:
65:3d:d5:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9E49kvUV5lImzQLxJln3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj
MTc2M2IwHhcNMjUxMTA0MTMwMDI0WhcNMjUxMTA1MTMwMDI0WjAzMTEwLwYDVQQD
EyhhYzlhYjkyMTBmYjJjZDlkZDg5OTc5ZmQ2OWQwNGZlOWNiNGY3ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUzGtVZ2yNv82Nri6pYRY4gXk0wB
sNAUHgHLDJLe2GWUROZqVKlx3KdxEsmpVprgFhCtyWHtlCMCSuRZhyUkugs3F4Hl
ou4idGyG1k1MUjBJbgpnvIzyzAsEd8MFNBY0iLXnuQH+2jM6qESuLDWLlm33IvrO
xwIui+EubZYeMn7OquTfCw5rWhG2Slc07e6BgeyzBAtP0+QDnERCa7J+fx4fRWGJ
oN+QqfsxooYNN3un6NrCx+3aoffawDJZLgxkettEWVmKU8QVgyFSEvC0drdSZPtb
5OaMiBBKfSjZvTqCKHMn/tX58BMQW8hEY33T37YiDpVAHP70k6B3du9v7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyauSEPss2d2Jl5/WnQT+nLT31/MB8GA1UdIwQY
MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt
ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0
LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJpctQh5
Rr+0kfjbsh+mcqK5BqE688JoWdOZe+3C68oUImmB/YedV5UYrccGXZAAU0/r1YYV
qqR0tqoWqzOCS493ok5AgHZWUPhRaP4navEUnLV0PxoHyQciie6jJ+Yj5CsZdDDh
Me+q/xtsz3xaBBV7TZVb4xSCyOqYVJ16IRFl2CChyrpa4JCVu4opbMb1h99exfX4
pXlFtjuQypgOty6unlLmjHB/7QP4YgIp00w0nE/vn/0rObWfDGxPlEsh+1nF52CA
r4xYf173ty+UyTdN0TrnfBiKhN7mQ6qPLwVH5eYKUxVF6KohIttnlzCyApopqs0h
6E4iScmHZT3VDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:19 2025 by rpki-client