Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: hiS3Fn5nLJZPL272N4390L2CANn2gLqegi7BC3KkiKE=
Subject key identifier: 8D:2D:DF:8F:23:96:FC:C5:08:DA:CF:A8:25:EA:D0:A1:34:70:97:7D
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 0198D6CDEA6940E0328EA884C3F84934093B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 0A0D
Signing time: Sat 23 Aug 2025 12:01:15 +0000
Manifest this update: Sat 23 Aug 2025 12:01:15 +0000
Manifest next update: Sun 24 Aug 2025 12:01:15 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: 2nX1JCbuWo/8o4esmWF49ba6iAZrbINBYrP9+JOAqZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ea:69:40:e0:32:8e:a8:84:c3:f8:49:34:09:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Aug 23 12:01:15 2025 GMT
Not After : Aug 24 12:01:15 2025 GMT
Subject: CN=8d2ddf8f2396fcc508dacfa825ead0a13470977d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:73:dc:49:0f:3c:b3:ff:a5:26:d4:61:ca:
31:fd:d7:43:4c:ed:3a:68:9a:65:b1:31:d9:9d:ce:
ee:6b:7a:5f:ce:4d:08:77:ce:2b:3c:a5:0b:ae:1e:
92:3d:12:8b:b8:ff:a6:0a:ee:51:87:2e:eb:a1:40:
4f:d2:50:2a:75:2b:e6:29:a1:f7:cf:5d:02:8a:fb:
aa:1f:62:b3:76:e7:bc:7a:6d:0b:81:4a:3e:0d:10:
ea:8b:3c:cd:c1:d3:eb:5e:b8:2b:44:03:3a:30:31:
bb:4d:a3:12:3e:8f:7d:b1:0e:db:bb:07:1a:72:73:
4b:0a:af:ed:b5:00:4c:ec:11:26:d6:98:85:b9:00:
da:fe:11:ab:4b:6c:aa:9c:77:1e:31:e1:fc:8a:a0:
29:fc:fc:e3:bd:fc:38:4d:c1:27:10:c9:be:25:d4:
b0:89:a5:c8:99:fe:84:db:a0:da:47:d2:a0:f0:27:
db:1b:c7:06:85:0e:8e:c5:43:44:d9:51:88:8e:42:
9c:52:df:f1:dd:a3:48:c5:d9:83:7b:ad:a1:5c:bd:
e2:48:f0:43:82:e4:81:7c:79:57:a6:82:85:b8:9d:
90:99:47:8c:eb:c7:93:67:99:9e:a1:fc:f2:2a:ef:
45:44:af:0f:ab:38:dd:ab:d0:41:3c:79:a0:02:a2:
ff:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2D:DF:8F:23:96:FC:C5:08:DA:CF:A8:25:EA:D0:A1:34:70:97:7D
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:43:c8:2f:33:8e:c4:9e:cd:a0:85:65:3f:3e:95:78:8d:68:
e1:86:be:5f:d0:3d:f2:0c:0a:9e:43:a4:b8:40:21:54:dd:3a:
93:84:1f:44:3c:f6:d2:10:cc:a5:21:f5:ac:51:bc:55:e6:88:
4a:5e:49:e7:5c:47:8c:18:96:cb:ee:68:01:17:7e:a3:cc:0c:
c5:ea:da:25:b0:da:3d:e5:93:51:ed:41:d9:9c:be:db:c5:64:
2f:bc:c2:d4:0e:c3:b1:b9:7b:f4:34:2c:7b:d9:ab:63:50:09:
b5:71:3b:c1:95:f6:03:c4:36:ff:63:d7:0c:db:ec:e3:b3:7a:
7e:d2:33:9b:6b:d4:97:60:75:47:55:48:29:1b:ad:d7:aa:c8:
2e:c2:83:d5:6e:08:3b:8c:61:6f:b0:98:0a:18:02:2c:b7:2a:
62:aa:ec:d6:9c:3c:91:a0:00:bf:c5:40:08:5c:c1:32:56:36:
88:0b:61:5d:b0:47:60:39:6f:73:d8:1e:6c:bf:b7:63:18:1f:
c0:86:21:a5:b2:47:37:6e:e2:e8:31:8e:d4:39:b7:4d:6e:3b:
cb:52:43:e9:ef:95:ce:ac:69:63:f5:2b:ac:4b:d9:74:1e:d4:
da:39:b8:e1:15:b4:fa:4f:2f:f0:63:fd:8b:fc:16:9e:8e:4b:
a5:87:17:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzeppQOAyjqiEw/hJNAk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NmEzYjVjMDkyNmYzYjQ1OTc5ODBkYTUwODk5YzI4ZWE2
YTZiZDkwHhcNMjUwODIzMTIwMTE1WhcNMjUwODI0MTIwMTE1WjAzMTEwLwYDVQQD
Eyg4ZDJkZGY4ZjIzOTZmY2M1MDhkYWNmYTgyNWVhZDBhMTM0NzA5NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Bz3EkPPLP/pSbUYcox/ddDTO06
aJplsTHZnc7ua3pfzk0Id84rPKULrh6SPRKLuP+mCu5Rhy7roUBP0lAqdSvmKaH3
z10CivuqH2Kzdue8em0LgUo+DRDqizzNwdPrXrgrRAM6MDG7TaMSPo99sQ7buwca
cnNLCq/ttQBM7BEm1piFuQDa/hGrS2yqnHceMeH8iqAp/Pzjvfw4TcEnEMm+JdSw
iaXImf6E26DaR9Kg8CfbG8cGhQ6OxUNE2VGIjkKcUt/x3aNIxdmDe62hXL3iSPBD
guSBfHlXpoKFuJ2QmUeM68eTZ5meofzyKu9FRK8Pqzjdq9BBPHmgAqL/4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0t348jlvzFCNrPqCXq0KE0cJd9MB8GA1UdIwQY
MBaAFGVqO1wJJvO0WXmA2lCJnCjqamvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgt
NGNkOGI0MzhmODE1LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgtNGNkOGI0MzhmODE1
LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkPILzOO
xJ7NoIVlPz6VeI1o4Ya+X9A98gwKnkOkuEAhVN06k4QfRDz20hDMpSH1rFG8VeaI
Sl5J51xHjBiWy+5oARd+o8wMxeraJbDaPeWTUe1B2Zy+28VkL7zC1A7Dsbl79DQs
e9mrY1AJtXE7wZX2A8Q2/2PXDNvs47N6ftIzm2vUl2B1R1VIKRut16rILsKD1W4I
O4xhb7CYChgCLLcqYqrs1pw8kaAAv8VACFzBMlY2iAthXbBHYDlvc9gebL+3Yxgf
wIYhpbJHN27i6DGO1Dm3TW47y1JD6e+VzqxpY/UrrEvZdB7U2jm44RW0+k8v8GP9
i/wWno5LpYcXBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:27 2025 by rpki-client