Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: 2mqv/TQ7adEn+8eNkBuak/DkyHdI/Nng+y+ucG0fayU=
Subject key identifier: F0:44:44:5B:C1:18:6F:0C:0C:94:FC:54:D1:4E:84:35:76:C4:E4:A6
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 0198D5BBA815E74ABA9E8F5C5E125189B482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 1467
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: iYqjHJwQP/u5EvmgH0dD9SikSWrC4F+9MjS15HK0+Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a8:15:e7:4a:ba:9e:8f:5c:5e:12:51:89:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=f044445bc1186f0c0c94fc54d14e843576c4e4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:57:d3:9e:a6:00:77:b7:eb:5c:db:56:6c:
a7:ed:be:0e:7d:3b:60:e3:72:de:fe:55:1d:8d:9b:
b2:7c:55:c3:64:3c:32:78:e3:3f:c9:cb:55:16:5c:
64:4e:ae:8f:73:81:a3:67:52:76:64:31:78:62:4b:
ea:e9:51:44:7e:4d:75:b4:f8:69:53:7f:d5:03:1a:
d2:4a:e9:0c:e2:e3:c1:3c:37:36:50:8d:aa:b3:99:
f0:f7:31:a4:9b:67:8c:3f:e0:2a:a0:9f:c8:60:7a:
ed:13:a7:08:92:fa:05:ed:42:b5:a4:63:a3:4d:0a:
11:0d:fd:9f:81:d3:14:57:71:43:2e:c4:d0:56:f1:
42:28:ec:59:98:9d:bd:46:eb:56:c6:57:8a:6d:ed:
9a:d7:2a:e2:6e:ca:e5:e2:9e:55:aa:f6:e1:97:4a:
6e:87:1e:8a:dc:df:41:27:42:5e:4f:21:c3:4e:2a:
aa:9a:2a:0c:d0:eb:b8:6b:59:9b:24:a3:4c:3d:b4:
df:60:20:b0:9c:5d:f2:ab:f7:ad:5a:27:9b:04:44:
22:2c:53:22:94:cf:a3:de:a9:9d:f8:09:bf:3d:d8:
a3:96:72:e7:e6:4a:06:f8:bd:df:92:2d:14:73:3c:
c7:0a:52:ae:8d:cd:66:88:7b:6d:bf:68:d8:d2:b1:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:44:5B:C1:18:6F:0C:0C:94:FC:54:D1:4E:84:35:76:C4:E4:A6
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:92:2d:6d:dc:e1:b7:cc:3c:24:80:04:af:14:19:66:4f:
34:5c:4c:80:74:c1:51:f1:04:b2:82:61:ae:4d:25:4c:73:ff:
c0:16:7c:2e:92:bd:cc:bc:a1:fd:97:54:b8:6a:5d:68:73:e3:
57:36:c4:f4:0b:54:e4:33:9a:cc:24:1f:06:d5:19:4d:34:74:
a0:0b:26:a4:14:f9:c6:18:a2:24:2e:ca:74:0b:9b:10:e4:41:
a1:91:35:18:28:d0:af:05:fe:92:d0:73:44:71:ff:e8:50:71:
2b:f6:a2:06:12:5d:41:8d:f3:cc:a2:10:ff:63:16:c9:24:33:
94:ed:af:5d:5a:50:3a:e8:fd:66:f7:48:7e:f2:cf:a5:f3:72:
15:43:d8:93:d3:81:b2:4c:35:ee:64:db:56:a2:ee:fe:22:c3:
92:d5:99:37:20:0e:e9:13:33:66:2a:78:29:a2:3d:ea:71:9b:
55:6f:15:04:44:6c:75:24:9f:c2:07:64:d8:21:1d:35:cf:64:
0f:e9:96:84:62:f2:cb:4c:69:39:8e:3b:65:c7:4b:f4:23:9c:
ab:1f:cd:f3:d2:df:9e:32:b5:da:c2:c7:03:e8:77:6f:1a:84:
4c:36:5c:59:44:7f:fe:f8:c5:7f:98:98:6c:9c:14:40:32:64:
e0:ba:c5:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6gV50q6no9cXhJRibSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmZiZjA5YWU2ODg2ZWM3ZGQ1ODZiNGEzNGIxZGM5NzM3
ZTg3N2QwHhcNMjUwODIzMDcwMTQxWhcNMjUwODI0MDcwMTQxWjAzMTEwLwYDVQQD
EyhmMDQ0NDQ1YmMxMTg2ZjBjMGM5NGZjNTRkMTRlODQzNTc2YzRlNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsddX056mAHe361zbVmyn7b4OfTtg
43Le/lUdjZuyfFXDZDwyeOM/yctVFlxkTq6Pc4GjZ1J2ZDF4Ykvq6VFEfk11tPhp
U3/VAxrSSukM4uPBPDc2UI2qs5nw9zGkm2eMP+AqoJ/IYHrtE6cIkvoF7UK1pGOj
TQoRDf2fgdMUV3FDLsTQVvFCKOxZmJ29RutWxleKbe2a1yribsrl4p5Vqvbhl0pu
hx6K3N9BJ0JeTyHDTiqqmioM0Ou4a1mbJKNMPbTfYCCwnF3yq/etWiebBEQiLFMi
lM+j3qmd+Am/PdijlnLn5koG+L3fki0UczzHClKujc1miHttv2jY0rGuIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBERFvBGG8MDJT8VNFOhDV2xOSmMB8GA1UdIwQY
MBaAFGYvvwmuaIbsfdWGtKNLHclzfod9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hZWI0M2UtMDI4Ny00MTljLWFhNTUt
MWM2NjhmZjU3ODczLzEvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hZWI0M2UtMDI4Ny00MTljLWFhNTUtMWM2NjhmZjU3ODcz
LzEvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0mSLW3c
4bfMPCSABK8UGWZPNFxMgHTBUfEEsoJhrk0lTHP/wBZ8LpK9zLyh/ZdUuGpdaHPj
VzbE9AtU5DOazCQfBtUZTTR0oAsmpBT5xhiiJC7KdAubEORBoZE1GCjQrwX+ktBz
RHH/6FBxK/aiBhJdQY3zzKIQ/2MWySQzlO2vXVpQOuj9ZvdIfvLPpfNyFUPYk9OB
skw17mTbVqLu/iLDktWZNyAO6RMzZip4KaI96nGbVW8VBERsdSSfwgdk2CEdNc9k
D+mWhGLyy0xpOY47ZcdL9COcqx/N89LfnjK12sLHA+h3bxqETDZcWUR//vjFf5iY
bJwUQDJk4LrFdA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:21 2025 by rpki-client