Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
File: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft (raw, json)
Hash identifier: g4l5Va2t3W9pT+vdIBUXRIrn8Kvbq+dMqs0YwFd+qGQ=
Subject key identifier: 77:A6:BA:F2:CF:ED:90:C6:DA:E0:ED:AB:B5:3F:DE:0E:60:D1:2B:95
Authority key identifier: 66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
Certificate issuer: /CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Certificate serial: 0198D4043CF3630D007E97E7D86C11584D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
Manifest number: 11D5
Signing time: Fri 22 Aug 2025 23:01:44 +0000
Manifest this update: Fri 22 Aug 2025 23:01:44 +0000
Manifest next update: Sat 23 Aug 2025 23:01:44 +0000
Files and hashes: 1: ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl (hash: lbEqY42rRV1pNZxnWufazhiH41sGOXJNnXlX9VQznjc=)
2: uoOTDO3I8Ju9HNeb_RrUnxiXqMM.roa (hash: uWLf97UT0+0lxJvC3noTnvF0IVTFV5k9XbA2AIDmE6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:3c:f3:63:0d:00:7e:97:e7:d8:6c:11:58:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d5e5cd7d0375de252740546412b88ba5bcfa7a
Validity
Not Before: Aug 22 23:01:44 2025 GMT
Not After : Aug 23 23:01:44 2025 GMT
Subject: CN=77a6baf2cfed90c6dae0edabb53fde0e60d12b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:ec:d8:b8:66:8e:78:7c:db:fc:be:b0:ec:
a7:55:70:f8:cb:e3:82:ea:3a:b3:78:27:64:ef:cd:
8e:22:b8:a7:98:f3:ef:11:d6:48:8f:7e:0c:21:de:
0c:73:49:6d:9b:cd:8c:8a:7d:0b:cd:0d:3a:8c:46:
b5:2a:4d:4f:23:0a:47:88:84:7a:ac:2f:8d:5c:bd:
8c:f4:3e:29:31:57:eb:b9:b6:ca:05:2d:71:0b:dd:
c2:3d:56:f7:6f:03:22:b3:82:87:2a:71:42:37:3d:
38:b2:35:02:d1:bc:d2:2b:d6:8e:d4:9f:1e:5f:fa:
e5:13:16:49:41:a3:01:b7:cd:3f:2f:db:d1:50:a9:
ed:b8:f0:bb:2e:14:3e:fd:fd:d7:cc:a8:c4:0d:67:
f3:1c:bf:d7:77:8a:ff:e7:ba:b3:bb:57:9a:77:e6:
e8:79:02:39:20:f2:54:48:15:c9:2e:0d:14:93:69:
ca:b7:06:ed:27:d1:ec:39:40:2c:35:ac:b5:87:18:
1c:06:51:80:f3:37:16:03:ca:88:42:91:c3:24:42:
50:86:4c:19:86:83:3e:7d:24:12:78:81:2e:8b:59:
6b:07:8a:64:49:aa:7b:c7:2a:ea:d4:92:04:1d:3a:
7b:bf:95:6e:28:76:41:aa:8d:31:b9:5e:47:2b:db:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:BA:F2:CF:ED:90:C6:DA:E0:ED:AB:B5:3F:DE:0E:60:D1:2B:95
X509v3 Authority Key Identifier:
keyid:66:D5:E5:CD:7D:03:75:DE:25:27:40:54:64:12:B8:8B:A5:BC:FA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3db8d3-3404-45ef-8409-86b90f197ede/1/ZtXlzX0Ddd4lJ0BUZBK4i6W8-no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9e:07:be:9d:ce:e6:89:88:4f:43:80:eb:2b:ed:1b:95:aa:
b7:70:3a:92:b3:06:39:2a:9b:fd:54:a3:65:9b:d7:ff:b4:2c:
1b:87:51:59:cc:7d:ed:f7:ce:b1:3c:cf:08:2d:31:e8:f1:f1:
ee:fb:8c:34:be:22:22:01:10:2e:be:6d:56:cc:9a:c0:33:0f:
c0:bf:f7:cf:e4:8e:4d:6b:a4:c5:c2:a0:e2:6e:aa:9a:ad:ef:
71:ef:34:65:a1:2e:06:b8:0e:65:87:06:cc:73:6b:71:19:59:
65:6c:92:69:a9:14:0a:93:61:d0:60:1c:ad:a9:1a:ee:dc:af:
e3:4e:a0:91:d9:c4:0d:9d:40:80:22:13:9e:32:7f:59:8b:a1:
39:7f:5e:29:8a:4b:4d:f7:42:58:2d:fa:d6:02:20:f0:8e:e3:
2f:5c:7e:e1:b2:38:d8:5b:17:86:3a:57:a3:f3:43:8c:ab:70:
81:5d:4f:4d:0d:96:b8:94:a3:3f:ee:36:a6:98:4a:64:ca:7e:
2c:21:8d:6c:68:2a:1c:85:be:84:8f:62:72:02:bd:c5:88:94:
2b:51:79:45:aa:36:24:22:fa:10:45:33:23:cd:21:7f:42:9b:
55:3c:7c:e6:dc:40:dd:d3:f7:61:db:1b:5d:df:45:c6:01:a6:
dd:ab:94:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBDzzYw0Afpfn2GwRWE0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDVlNWNkN2QwMzc1ZGUyNTI3NDA1NDY0MTJiODhiYTVi
Y2ZhN2EwHhcNMjUwODIyMjMwMTQ0WhcNMjUwODIzMjMwMTQ0WjAzMTEwLwYDVQQD
Eyg3N2E2YmFmMmNmZWQ5MGM2ZGFlMGVkYWJiNTNmZGUwZTYwZDEyYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNLs2Lhmjnh82/y+sOynVXD4y+OC
6jqzeCdk782OIrinmPPvEdZIj34MId4Mc0ltm82Min0LzQ06jEa1Kk1PIwpHiIR6
rC+NXL2M9D4pMVfrubbKBS1xC93CPVb3bwMis4KHKnFCNz04sjUC0bzSK9aO1J8e
X/rlExZJQaMBt80/L9vRUKntuPC7LhQ+/f3XzKjEDWfzHL/Xd4r/57qzu1ead+bo
eQI5IPJUSBXJLg0Uk2nKtwbtJ9HsOUAsNay1hxgcBlGA8zcWA8qIQpHDJEJQhkwZ
hoM+fSQSeIEui1lrB4pkSap7xyrq1JIEHTp7v5VuKHZBqo0xuV5HK9vQjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHemuvLP7ZDG2uDtq7U/3g5g0SuVMB8GA1UdIwQY
MBaAFGbV5c19A3XeJSdAVGQSuIulvPp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDkt
ODZiOTBmMTk3ZWRlLzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zZGI4ZDMtMzQwNC00NWVmLTg0MDktODZiOTBmMTk3ZWRl
LzEvWnRYbHpYMERkZDRsSjBCVVpCSzRpNlc4LW5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlp4Hvp3O
5omIT0OA6yvtG5Wqt3A6krMGOSqb/VSjZZvX/7QsG4dRWcx97ffOsTzPCC0x6PHx
7vuMNL4iIgEQLr5tVsyawDMPwL/3z+SOTWukxcKg4m6qmq3vce80ZaEuBrgOZYcG
zHNrcRlZZWySaakUCpNh0GAcraka7tyv406gkdnEDZ1AgCITnjJ/WYuhOX9eKYpL
TfdCWC361gIg8I7jL1x+4bI42FsXhjpXo/NDjKtwgV1PTQ2WuJSjP+42pphKZMp+
LCGNbGgqHIW+hI9icgK9xYiUK1F5Rao2JCL6EEUzI80hf0KbVTx85txA3dP3Ydsb
Xd9FxgGm3auUmA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:49 2025 by rpki-client