Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
File: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json)
Hash identifier: mObQ5xY47O4oddVZ3OVhE9AYwVzchAl2CA3TleKHAk0=
Subject key identifier: 92:E3:B7:1C:A9:A8:79:1E:D2:66:4E:E6:BE:4E:7D:CE:94:F8:7C:99
Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
Certificate issuer: /CN=65a07d492468228aa306a66b056a0228c552ec5c
Certificate serial: 0197B6A0935B2572B167AEC3D2B46B793644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
Manifest number: 0CCA
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: fwWn7efauxdMCr+71/cSvWJOh641rqdsSftp9+lrXzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:93:5b:25:72:b1:67:ae:c3:d2:b4:6b:79:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=92e3b71ca9a8791ed2664ee6be4e7dce94f87c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:68:f5:70:39:fb:2d:10:56:8c:b3:38:52:
8e:cb:6a:97:59:be:4d:2c:16:7f:84:df:56:42:07:
ee:41:1f:b0:16:e5:57:34:0a:85:97:d1:5e:41:47:
e2:94:2c:ee:3f:3e:bb:20:51:c3:0d:cc:7d:11:4e:
64:53:ef:15:a3:e4:17:7d:13:dc:3e:d5:83:24:45:
d9:95:6d:fd:62:4d:5d:87:17:2c:d9:41:de:0f:05:
e3:81:ae:3f:ad:84:ec:11:77:0d:cd:12:6d:a6:26:
ce:f7:2a:0c:30:17:54:b2:66:56:b0:4e:9e:81:38:
ae:6d:df:cc:9b:fe:16:2f:32:03:ba:45:f7:07:25:
93:ed:a7:a2:46:5c:0a:e6:8d:0d:26:96:72:5f:78:
bf:06:50:27:78:80:2a:e9:b7:d8:1e:1d:8f:39:9f:
3a:51:7f:71:d3:98:ee:e3:9b:8b:da:d0:e2:fd:48:
4e:09:0e:c8:19:c3:10:f1:10:6a:23:63:a1:6f:c5:
d0:5a:4c:20:4d:4b:a5:c4:42:f8:9e:dd:ba:49:64:
ea:81:4f:28:2b:7c:d8:02:02:31:a2:f1:98:ec:3d:
03:40:13:96:8d:29:c5:e4:b5:f4:81:04:5e:91:17:
80:8c:aa:0b:d1:df:85:c4:24:62:2d:5e:c5:a5:23:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E3:B7:1C:A9:A8:79:1E:D2:66:4E:E6:BE:4E:7D:CE:94:F8:7C:99
X509v3 Authority Key Identifier:
keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:55:3b:5f:f8:d7:6f:d0:e8:83:40:57:15:ff:da:ad:16:eb:
f7:40:25:96:f0:f1:ec:4e:fe:79:9c:30:d8:4a:80:31:05:cd:
db:e6:03:1e:95:26:be:c0:e8:ad:53:3f:d2:93:cf:a0:ff:e7:
cf:65:85:14:8f:44:5b:67:8c:72:65:6b:7f:10:fb:bb:7b:af:
95:2d:ce:d3:3b:62:e2:2f:95:03:b9:bf:09:2e:29:63:3a:66:
d0:7a:6d:eb:df:77:7d:39:29:f5:b2:78:67:e5:6b:00:9f:20:
5b:92:77:b4:a7:19:ee:ca:63:3c:70:99:56:25:25:bc:ba:7c:
cd:8a:04:10:d8:88:c8:2b:04:16:2e:cb:47:5e:15:14:24:26:
b4:a1:f4:45:fb:7e:37:85:19:ee:75:84:df:06:f6:36:b6:98:
8c:42:ff:c8:20:45:59:30:82:dc:fb:0b:f1:11:26:69:93:f5:
d9:03:79:f0:b5:a1:6c:c3:f3:80:07:61:9a:97:cc:6e:3d:ed:
a3:a5:e8:48:b0:f1:86:2f:d3:21:c4:e4:00:45:de:79:90:ef:
7b:6e:9d:61:9b:bc:18:67:53:3e:6c:4f:7f:4f:72:a8:12:94:
da:4b:7b:36:08:dd:c8:c8:1a:66:22:0e:2e:c6:f2:9d:5a:79:
e4:72:2e:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oJNbJXKxZ67D0rRreTZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTA3ZDQ5MjQ2ODIyOGFhMzA2YTY2YjA1NmEwMjI4YzU1
MmVjNWMwHhcNMjUwNjI4MTMwMTA2WhcNMjUwNjI5MTMwMTA2WjAzMTEwLwYDVQQD
Eyg5MmUzYjcxY2E5YTg3OTFlZDI2NjRlZTZiZTRlN2RjZTk0Zjg3Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Ro9XA5+y0QVoyzOFKOy2qXWb5N
LBZ/hN9WQgfuQR+wFuVXNAqFl9FeQUfilCzuPz67IFHDDcx9EU5kU+8Vo+QXfRPc
PtWDJEXZlW39Yk1dhxcs2UHeDwXjga4/rYTsEXcNzRJtpibO9yoMMBdUsmZWsE6e
gTiubd/Mm/4WLzIDukX3ByWT7aeiRlwK5o0NJpZyX3i/BlAneIAq6bfYHh2POZ86
UX9x05ju45uL2tDi/UhOCQ7IGcMQ8RBqI2Ohb8XQWkwgTUulxEL4nt26SWTqgU8o
K3zYAgIxovGY7D0DQBOWjSnF5LX0gQRekReAjKoL0d+FxCRiLV7FpSMNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLjtxypqHke0mZO5r5Ofc6U+HyZMB8GA1UdIwQY
MBaAFGWgfUkkaCKKowamawVqAijFUuxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQt
ZWIwM2JiYTY1YTk2LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQtZWIwM2JiYTY1YTk2
LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1U7X/jX
b9Dog0BXFf/arRbr90AllvDx7E7+eZww2EqAMQXN2+YDHpUmvsDorVM/0pPPoP/n
z2WFFI9EW2eMcmVrfxD7u3uvlS3O0zti4i+VA7m/CS4pYzpm0Hpt6993fTkp9bJ4
Z+VrAJ8gW5J3tKcZ7spjPHCZViUlvLp8zYoEENiIyCsEFi7LR14VFCQmtKH0Rft+
N4UZ7nWE3wb2NraYjEL/yCBFWTCC3PsL8REmaZP12QN58LWhbMPzgAdhmpfMbj3t
o6XoSLDxhi/TIcTkAEXeeZDve26dYZu8GGdTPmxPf09yqBKU2kt7NgjdyMgaZiIO
LsbynVp55HIufA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:50 2025 by rpki-client