Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
File: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json)
Hash identifier: fTTeaeXpJw6vOLhRdWvYUYfEvXjHC7EOk+7N1ZbI1JQ=
Subject key identifier: 8B:46:DF:F2:B8:69:D2:35:6E:07:C8:A5:6F:84:59:BF:7A:C9:73:80
Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
Certificate issuer: /CN=65a07d492468228aa306a66b056a0228c552ec5c
Certificate serial: 0199FDDA0B0014CE59E84C16875C54D93BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
Manifest number: 0DF8
Signing time: Sun 19 Oct 2025 19:02:29 +0000
Manifest this update: Sun 19 Oct 2025 19:02:29 +0000
Manifest next update: Mon 20 Oct 2025 19:02:29 +0000
Files and hashes: 1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: 7AgrUjWaDDdkU1AyRgJyULhzTIx+ERvo2Kzs/G42WDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:0b:00:14:ce:59:e8:4c:16:87:5c:54:d9:3b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c
Validity
Not Before: Oct 19 19:02:29 2025 GMT
Not After : Oct 20 19:02:29 2025 GMT
Subject: CN=8b46dff2b869d2356e07c8a56f8459bf7ac97380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:85:e0:56:44:86:94:24:08:ed:85:ac:f3:
7d:fd:c9:97:b4:6f:d3:be:86:00:bf:8f:62:87:86:
ed:ab:e3:dc:c1:aa:5f:b9:eb:f9:89:53:7c:c4:98:
26:c3:a3:9c:ae:36:fa:60:fa:bb:a5:7c:09:33:7c:
45:b6:2d:60:9f:df:f7:de:b7:ed:11:a1:72:1a:8c:
97:ec:f0:8f:63:a1:5f:47:b7:a8:18:c1:da:7e:23:
54:86:d8:cb:0b:93:90:2d:99:2b:a5:fd:c7:8f:d0:
cd:35:01:70:b1:96:c4:1c:24:88:7b:54:10:72:79:
aa:22:68:fb:47:34:7d:cd:e5:f2:b4:aa:72:26:06:
53:a1:5d:a0:1e:94:60:d5:6d:7c:6b:87:b2:ed:df:
d8:15:9e:a6:ff:36:25:03:b6:ca:41:07:7a:ca:24:
c9:f1:59:d8:e0:f0:5a:57:92:bf:ef:8b:4b:fb:6e:
d8:93:ca:03:61:8f:43:58:f6:a4:d5:bf:d1:bd:c4:
76:e3:77:30:33:84:2f:7f:81:37:11:4f:7f:c8:8b:
e4:66:41:7c:b1:a2:c0:bd:24:40:34:8b:3a:98:0b:
ca:8a:3e:be:46:6a:8f:45:2a:eb:37:12:06:86:5d:
70:8b:a5:05:13:cc:30:8f:49:a5:52:b4:22:9f:ec:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:DF:F2:B8:69:D2:35:6E:07:C8:A5:6F:84:59:BF:7A:C9:73:80
X509v3 Authority Key Identifier:
keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f3:9b:95:8e:f7:fb:75:72:1c:8c:05:ad:ed:9f:b9:88:e3:
4e:6c:7f:77:d4:ce:35:48:37:05:5d:ea:1a:bf:9a:2b:25:d4:
31:e0:74:4f:df:28:15:1e:a1:bc:1e:84:f1:3c:d7:9e:50:74:
0f:d5:e7:71:b3:25:e6:4f:77:26:a2:3b:9c:f1:4f:53:75:98:
79:bd:4d:d1:7c:f3:15:2f:29:54:02:34:93:f4:21:10:ce:c3:
eb:27:d0:aa:65:4d:53:75:df:63:63:54:72:38:a1:a3:8d:c9:
02:d8:a6:b6:b5:81:a5:bf:27:ca:25:af:93:d1:41:88:fd:fd:
59:e3:8b:6e:68:d3:1b:0a:9e:1a:2f:17:c8:99:2c:3c:1a:d9:
e8:c2:9f:15:84:67:44:91:f0:24:bc:fb:fa:9f:04:5d:8a:50:
58:b5:e7:f1:dc:43:9d:0c:f9:30:76:07:d0:d8:76:f1:06:65:
ea:f4:e4:fa:a9:a4:9e:98:0b:f1:0c:61:e9:d0:82:d0:9d:08:
35:09:dd:2b:70:24:39:ec:88:8c:36:d4:48:ed:1e:8e:8f:76:
39:6d:65:1c:83:28:f3:d0:31:bd:ea:98:4a:a9:53:32:f3:c6:
d3:7d:70:ff:64:c5:f0:4e:96:8d:c1:ce:fc:04:18:91:36:2f:
ae:30:3f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92gsAFM5Z6EwWh1xU2TvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTA3ZDQ5MjQ2ODIyOGFhMzA2YTY2YjA1NmEwMjI4YzU1
MmVjNWMwHhcNMjUxMDE5MTkwMjI5WhcNMjUxMDIwMTkwMjI5WjAzMTEwLwYDVQQD
Eyg4YjQ2ZGZmMmI4NjlkMjM1NmUwN2M4YTU2Zjg0NTliZjdhYzk3MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46F4FZEhpQkCO2FrPN9/cmXtG/T
voYAv49ih4btq+Pcwapfuev5iVN8xJgmw6Ocrjb6YPq7pXwJM3xFti1gn9/33rft
EaFyGoyX7PCPY6FfR7eoGMHafiNUhtjLC5OQLZkrpf3Hj9DNNQFwsZbEHCSIe1QQ
cnmqImj7RzR9zeXytKpyJgZToV2gHpRg1W18a4ey7d/YFZ6m/zYlA7bKQQd6yiTJ
8VnY4PBaV5K/74tL+27Yk8oDYY9DWPak1b/RvcR243cwM4Qvf4E3EU9/yIvkZkF8
saLAvSRANIs6mAvKij6+RmqPRSrrNxIGhl1wi6UFE8wwj0mlUrQin+yMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItG3/K4adI1bgfIpW+EWb96yXOAMB8GA1UdIwQY
MBaAFGWgfUkkaCKKowamawVqAijFUuxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQt
ZWIwM2JiYTY1YTk2LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQtZWIwM2JiYTY1YTk2
LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/OblY73
+3VyHIwFre2fuYjjTmx/d9TONUg3BV3qGr+aKyXUMeB0T98oFR6hvB6E8TzXnlB0
D9XncbMl5k93JqI7nPFPU3WYeb1N0XzzFS8pVAI0k/QhEM7D6yfQqmVNU3XfY2NU
cjiho43JAtimtrWBpb8nyiWvk9FBiP39WeOLbmjTGwqeGi8XyJksPBrZ6MKfFYRn
RJHwJLz7+p8EXYpQWLXn8dxDnQz5MHYH0Nh28QZl6vTk+qmknpgL8Qxh6dCC0J0I
NQndK3AkOeyIjDbUSO0ejo92OW1lHIMo89AxveqYSqlTMvPG031w/2TF8E6WjcHO
/AQYkTYvrjA/yQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:25 2025 by rpki-client