Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: 94dgaFGuScsH36WUAZIO+E1s6Bzg1WreGMSr8pF0yfs=
Subject key identifier: D7:6F:1E:D9:3D:8D:A7:61:60:58:AA:90:51:53:DA:60:FC:27:6A:CA
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 0199FC58A2BFA392FF63BA3FD36BE21A286A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 13A2
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: kpzKbE8yd+CT+Tgx+XywMfA3yf17WnkUwUFALbbyvfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a2:bf:a3:92:ff:63:ba:3f:d3:6b:e2:1a:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=d76f1ed93d8da7616058aa905153da60fc276aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:8e:bc:1b:8a:8a:5b:a5:df:75:71:f3:27:
b9:8b:12:75:b8:41:a2:d4:32:d6:2d:88:45:0e:32:
a0:19:a4:a3:cd:df:24:79:28:7a:1c:41:44:5c:36:
8a:51:3d:35:db:9e:f9:0d:0c:55:8d:af:82:b1:f3:
d8:aa:0b:bd:3d:6a:23:f2:68:a0:83:51:5c:25:3a:
f3:a8:c5:22:1e:e6:bc:39:f9:7e:9e:71:06:6e:2e:
22:37:f1:88:79:9d:a0:64:01:8e:80:c6:56:d2:c5:
0b:6d:b6:7d:b3:99:c7:5a:2d:67:97:30:6e:09:5e:
04:f8:4d:a8:05:bf:26:51:d0:86:06:f3:ff:53:34:
a9:3a:99:fa:06:cb:49:ab:d2:df:da:de:49:03:ed:
d2:52:aa:11:7f:3b:30:1f:22:2d:11:61:34:d8:30:
5c:d1:84:a1:00:1e:77:e5:eb:8d:61:d3:35:0c:dc:
c7:a0:a6:50:11:65:86:9b:f4:3f:6f:c8:1b:4a:0c:
7a:71:ea:da:d3:aa:83:ec:c7:92:60:c1:af:3d:7e:
5d:68:b9:18:62:69:ef:30:d8:79:e1:01:03:b0:42:
96:c9:34:b1:14:85:10:83:7f:16:5c:58:d9:3e:5f:
a8:79:eb:14:03:dc:fd:f6:94:cb:76:3e:0b:ae:08:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6F:1E:D9:3D:8D:A7:61:60:58:AA:90:51:53:DA:60:FC:27:6A:CA
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a3:ea:a9:07:be:a6:5e:1d:c0:86:2c:78:22:a1:55:47:3f:
82:52:31:4b:7a:94:6d:31:ca:0d:65:b7:05:99:19:1d:f6:fb:
62:31:bf:aa:3b:fb:e1:37:7b:c3:3b:ee:5e:e4:61:d4:d8:f9:
29:6c:87:d2:94:2e:33:73:a9:7b:53:93:a3:cb:79:74:80:62:
1e:45:36:3d:1e:d9:9d:ad:e5:99:41:32:5c:eb:e3:7c:83:f8:
8d:b0:69:4b:ec:17:15:44:16:82:62:87:db:ed:51:42:21:d0:
43:04:99:90:08:07:63:41:5a:47:dd:98:30:f0:5d:40:fe:a5:
51:06:4f:a2:c5:34:a1:32:86:c0:45:3f:92:33:08:3c:16:bd:
67:17:de:d6:c3:fb:a2:4f:c8:1e:f1:21:65:7b:e7:a3:7b:6e:
fd:99:11:ae:9a:9e:4a:63:70:e3:c2:c7:c1:c7:df:9e:e6:72:
b8:da:21:9f:7e:d2:40:ac:02:49:d3:c9:b9:11:7b:c4:31:c2:
d3:65:40:35:ed:b5:e0:20:f5:9f:66:7b:97:b5:45:d4:6e:db:
d0:23:df:db:52:d5:cc:88:e1:88:b2:9e:02:d5:cd:c0:e1:f2:
29:a0:c2:0d:b3:2e:25:e1:48:a2:a8:49:a4:d4:ac:5f:12:3c:
d0:4b:8a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKK/o5L/Y7o/02viGihqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MTA0OTA5Njc1MjhjYTBiNmEwYTljYjczNjQzYzlhZDJj
YzFiYmQwHhcNMjUxMDE5MTIwMTMxWhcNMjUxMDIwMTIwMTMxWjAzMTEwLwYDVQQD
EyhkNzZmMWVkOTNkOGRhNzYxNjA1OGFhOTA1MTUzZGE2MGZjMjc2YWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22COvBuKilul33Vx8ye5ixJ1uEGi
1DLWLYhFDjKgGaSjzd8keSh6HEFEXDaKUT012575DQxVja+CsfPYqgu9PWoj8mig
g1FcJTrzqMUiHua8Ofl+nnEGbi4iN/GIeZ2gZAGOgMZW0sULbbZ9s5nHWi1nlzBu
CV4E+E2oBb8mUdCGBvP/UzSpOpn6BstJq9Lf2t5JA+3SUqoRfzswHyItEWE02DBc
0YShAB535euNYdM1DNzHoKZQEWWGm/Q/b8gbSgx6cera06qD7MeSYMGvPX5daLkY
YmnvMNh54QEDsEKWyTSxFIUQg38WXFjZPl+oeesUA9z99pTLdj4LrgiARwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdvHtk9jadhYFiqkFFT2mD8J2rKMB8GA1UdIwQY
MBaAFGcQSQlnUoygtqCpy3NkPJrSzBu9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NWQyNDUtODgyOC00MWUwLThlYTgt
ZjBhZTAyM2FiNTkyLzEvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NWQyNDUtODgyOC00MWUwLThlYTgtZjBhZTAyM2FiNTky
LzEvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaPqqQe+
pl4dwIYseCKhVUc/glIxS3qUbTHKDWW3BZkZHfb7YjG/qjv74Td7wzvuXuRh1Nj5
KWyH0pQuM3Ope1OTo8t5dIBiHkU2PR7Zna3lmUEyXOvjfIP4jbBpS+wXFUQWgmKH
2+1RQiHQQwSZkAgHY0FaR92YMPBdQP6lUQZPosU0oTKGwEU/kjMIPBa9Zxfe1sP7
ok/IHvEhZXvno3tu/ZkRrpqeSmNw48LHwcffnuZyuNohn37SQKwCSdPJuRF7xDHC
02VANe214CD1n2Z7l7VF1G7b0CPf21LVzIjhiLKeAtXNwOHyKaDCDbMuJeFIoqhJ
pNSsXxI80EuKmg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:49 2025 by rpki-client