Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
File: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft (raw, json)
Hash identifier: 7lFpB+5RYCfezlRis5Op7j3nkL5m9TjIVUilO5Uxn0Y=
Subject key identifier: B1:FD:99:27:14:6F:63:0F:AB:3C:11:D2:72:4D:99:DF:D0:89:E6:2C
Authority key identifier: 66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
Certificate issuer: /CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Certificate serial: 0198D4A7DC2ECED0B7B04A7ECE414B8669C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
Manifest number: 011A
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl (hash: 5DL+/oAtqctlwfM18JL9DxrO+YThzK/YMXue50bCXy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:dc:2e:ce:d0:b7:b0:4a:7e:ce:41:4b:86:69:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=b1fd9927146f630fab3c11d2724d99dfd089e62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:5f:3e:b0:68:25:01:95:49:f9:89:8e:e5:
46:fd:39:ee:6d:2f:16:9b:7b:dc:8d:76:e5:33:8d:
13:f2:7a:86:ea:ab:a3:e6:b9:9c:78:d3:0e:fa:23:
dc:e9:7e:c3:8f:aa:56:df:40:a6:67:55:4f:56:4b:
75:98:d0:8f:25:93:44:59:dc:33:b1:0f:2c:ce:11:
25:ef:29:27:8c:bf:c7:50:a7:60:cd:1b:aa:6e:a8:
5c:ad:d9:a2:fe:cd:ef:3b:72:d4:ab:f0:7b:20:98:
e3:fb:4d:df:58:20:99:2f:e4:be:f0:fa:2a:12:17:
65:de:d1:a2:eb:99:fb:b5:b6:64:64:99:d7:8f:75:
8f:89:51:fb:e7:d9:41:b1:57:0f:93:8c:9e:a7:63:
0c:da:28:61:52:f7:b0:4a:a5:1a:34:6b:3a:f5:5c:
98:30:fe:6e:53:a2:9d:0d:ed:c3:a2:42:0e:91:88:
6c:51:cf:ca:3d:7f:dc:29:ea:28:94:1f:ae:d4:81:
d9:c0:e6:ce:f7:ad:17:78:0d:e7:fd:64:35:02:08:
5a:1d:3e:a1:2f:75:47:4a:69:d8:3b:08:82:fc:93:
7b:c7:d4:92:8c:b6:9b:bd:45:7b:86:b4:29:d7:8c:
a0:c1:d4:60:1b:74:62:91:d3:e2:0b:65:8f:be:7b:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:99:27:14:6F:63:0F:AB:3C:11:D2:72:4D:99:DF:D0:89:E6:2C
X509v3 Authority Key Identifier:
keyid:66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ef:dc:86:5f:70:58:33:c4:ad:b4:8d:da:7e:f7:ac:96:47:
a8:cc:55:0e:8d:c3:b8:39:f4:52:08:15:af:e1:3c:5d:d5:b1:
df:dd:c6:34:67:34:a7:c3:4c:fb:8f:5c:20:f0:d8:73:d1:12:
0c:0b:4c:ee:f8:90:f1:b1:13:88:7b:9f:ea:2c:ed:20:a8:fb:
f0:54:82:be:3b:0a:55:f6:76:ab:89:7b:f9:be:76:53:65:f7:
e5:c1:96:c9:d7:b0:73:4f:a0:cf:26:3b:5e:d8:29:c3:17:90:
f4:78:27:21:7a:58:8d:5f:18:18:17:33:09:b4:45:13:ca:ad:
f0:74:45:99:8e:c0:c3:e8:6a:2f:10:f0:aa:80:76:5b:71:ee:
f2:43:1e:d9:3e:cd:50:15:f4:09:b4:6b:34:34:c5:a7:cf:60:
d6:cb:46:5f:39:99:ba:02:4d:c6:ef:4f:93:60:43:06:1e:2c:
3d:30:ea:e1:97:8a:51:be:92:8c:b7:c1:2a:ea:05:6f:21:0b:
dd:9e:a3:8b:90:8e:a4:a5:4a:f7:df:90:7d:5e:70:2c:56:66:
ce:4b:6e:95:11:fd:81:ee:9d:3f:93:ea:32:fb:85:58:e7:9e:
4f:6a:f8:75:05:03:26:c8:b5:09:a5:7b:56:a9:f9:12:99:70:
43:d6:44:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9wuztC3sEp+zkFLhmnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MjBiNzM2MDRlMTg1NTVhOGZkZjI3NjcxZGRkMDg5NGY4
M2MxNGUwHhcNMjUwODIzMDIwMDI3WhcNMjUwODI0MDIwMDI3WjAzMTEwLwYDVQQD
EyhiMWZkOTkyNzE0NmY2MzBmYWIzYzExZDI3MjRkOTlkZmQwODllNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuBfPrBoJQGVSfmJjuVG/TnubS8W
m3vcjXblM40T8nqG6quj5rmceNMO+iPc6X7Dj6pW30CmZ1VPVkt1mNCPJZNEWdwz
sQ8szhEl7yknjL/HUKdgzRuqbqhcrdmi/s3vO3LUq/B7IJjj+03fWCCZL+S+8Poq
Ehdl3tGi65n7tbZkZJnXj3WPiVH759lBsVcPk4yep2MM2ihhUvewSqUaNGs69VyY
MP5uU6KdDe3DokIOkYhsUc/KPX/cKeoolB+u1IHZwObO960XeA3n/WQ1AghaHT6h
L3VHSmnYOwiC/JN7x9SSjLabvUV7hrQp14ygwdRgG3RikdPiC2WPvnvk9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH9mScUb2MPqzwR0nJNmd/QieYsMB8GA1UdIwQY
MBaAFGYgtzYE4YVVqP3ydnHd0IlPg8FOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmlDM05nVGhoVldvX2ZKMmNkM1FpVS1Ed1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82NmI4NzUtNmE1YS00ZjkzLWE0ZTEt
MjkzNWU3YjVhNDk5LzEvWmlDM05nVGhoVldvX2ZKMmNkM1FpVS1Ed1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82NmI4NzUtNmE1YS00ZjkzLWE0ZTEtMjkzNWU3YjVhNDk5
LzEvWmlDM05nVGhoVldvX2ZKMmNkM1FpVS1Ed1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+/chl9w
WDPErbSN2n73rJZHqMxVDo3DuDn0UggVr+E8XdWx393GNGc0p8NM+49cIPDYc9ES
DAtM7viQ8bETiHuf6iztIKj78FSCvjsKVfZ2q4l7+b52U2X35cGWydewc0+gzyY7
XtgpwxeQ9HgnIXpYjV8YGBczCbRFE8qt8HRFmY7Aw+hqLxDwqoB2W3Hu8kMe2T7N
UBX0CbRrNDTFp89g1stGXzmZugJNxu9Pk2BDBh4sPTDq4ZeKUb6SjLfBKuoFbyEL
3Z6ji5COpKVK99+QfV5wLFZmzktulRH9ge6dP5PqMvuFWOeeT2r4dQUDJsi1CaV7
Vqn5EplwQ9ZEEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:56 2025 by rpki-client