Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: ztizVl2/KAq7XjbCAIoq8KO48e/TNr10zZSXEFH+06c=
Subject key identifier: 47:A9:87:E0:C2:4E:8A:92:1C:DC:74:2F:8E:1D:63:8D:0F:4C:4B:4D
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 0198D7E104B93CC201546F3774198E430E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 0586
Signing time: Sat 23 Aug 2025 17:01:44 +0000
Manifest this update: Sat 23 Aug 2025 17:01:44 +0000
Manifest next update: Sun 24 Aug 2025 17:01:44 +0000
Files and hashes: 1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: 8MdxnO3XX35Di2f6EliAC7a7nR+oUwRppDaQUJrYRko=)
2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:04:b9:3c:c2:01:54:6f:37:74:19:8e:43:0e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Aug 23 17:01:44 2025 GMT
Not After : Aug 24 17:01:44 2025 GMT
Subject: CN=47a987e0c24e8a921cdc742f8e1d638d0f4c4b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:30:f7:c2:5b:d4:d1:e3:24:13:63:16:5e:
e0:bf:20:40:4b:5e:e3:c4:53:c0:99:99:ed:bc:f3:
5a:37:2d:b5:2f:18:c3:fd:91:40:00:f8:87:f5:70:
0b:76:8e:94:d1:52:f5:50:8e:ca:78:f3:58:cf:53:
f2:dc:4d:c6:07:96:5e:a2:6b:7c:fa:75:ac:a1:8e:
ac:6d:58:4b:c0:82:f5:fe:3b:d9:4b:4b:61:19:e0:
42:4d:39:78:7a:1d:de:d8:ed:77:96:d6:2e:76:6a:
4f:51:cf:f9:5c:88:9a:2f:34:1b:bb:fc:87:71:11:
0c:45:6f:fc:0f:8b:60:ef:12:6d:5a:ea:c2:27:e2:
32:d5:64:7d:38:72:e0:46:05:64:dd:b7:ce:8c:2c:
1d:27:9d:05:54:31:da:bc:ca:08:ae:0f:ec:7b:3f:
32:f1:81:ee:26:12:f5:fa:60:db:1c:bf:82:51:02:
e2:9f:fe:40:69:94:5b:a6:30:e7:5c:56:4a:c8:fe:
f4:2a:56:2a:8a:df:72:f2:0d:67:92:9b:14:48:cc:
c6:d4:3b:73:1a:b7:ad:fb:95:22:c0:b4:51:5d:19:
92:85:8d:05:bb:e7:97:43:32:e6:7d:c8:c8:ba:86:
e2:f8:d7:5d:58:2b:fe:47:9c:d3:66:c7:5a:7f:29:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:87:E0:C2:4E:8A:92:1C:DC:74:2F:8E:1D:63:8D:0F:4C:4B:4D
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b9:2e:f1:9b:5b:5e:7a:63:54:e4:ca:e4:ca:4e:70:31:dd:
ae:05:72:e9:63:51:fc:d6:9f:f2:7d:b4:41:bf:bd:18:9e:a7:
fc:93:90:cc:7c:5a:4f:d3:6b:99:67:5d:fe:41:c7:62:92:0e:
a9:bf:31:f9:33:ca:f0:19:74:71:01:9f:7c:6f:c9:7f:5a:02:
d4:dd:f8:1a:19:5f:3d:53:87:ac:fa:11:37:33:03:5a:35:28:
65:df:1a:0f:2a:73:1d:a5:2d:a0:bd:97:8f:ba:b3:e7:86:19:
83:66:0e:7b:ea:54:16:45:bd:3b:8c:5c:29:9e:9d:60:35:7f:
14:70:3b:43:7d:58:9d:44:d6:e0:dd:8f:77:ce:7f:6c:ca:a4:
88:44:47:71:2d:29:63:a9:82:f9:a2:3f:6c:1f:01:cb:97:84:
f3:55:96:91:69:8d:cd:87:10:34:e1:88:a2:fc:25:29:b4:31:
2f:cc:81:82:2e:60:8d:8c:04:4d:2b:44:fd:2e:6c:59:04:80:
6c:29:11:21:8c:3c:1b:f8:dd:57:b4:60:e9:21:8d:dc:ab:34:
a2:5c:83:12:34:50:1b:9e:ef:cd:c2:9b:29:a8:b6:02:a7:25:
19:07:2e:26:74:87:0e:63:bf:16:ed:61:e3:62:29:0c:2e:4a:
5b:91:57:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4QS5PMIBVG83dBmOQw6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2Njg5MDg3ZTc4Nzk5MDkxNjg3OGRiMjBkNTU1Njg0YzIy
Y2Q5ZDUwHhcNMjUwODIzMTcwMTQ0WhcNMjUwODI0MTcwMTQ0WjAzMTEwLwYDVQQD
Eyg0N2E5ODdlMGMyNGU4YTkyMWNkYzc0MmY4ZTFkNjM4ZDBmNGM0YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqgw98Jb1NHjJBNjFl7gvyBAS17j
xFPAmZntvPNaNy21LxjD/ZFAAPiH9XALdo6U0VL1UI7KePNYz1Py3E3GB5Zeomt8
+nWsoY6sbVhLwIL1/jvZS0thGeBCTTl4eh3e2O13ltYudmpPUc/5XIiaLzQbu/yH
cREMRW/8D4tg7xJtWurCJ+Iy1WR9OHLgRgVk3bfOjCwdJ50FVDHavMoIrg/sez8y
8YHuJhL1+mDbHL+CUQLin/5AaZRbpjDnXFZKyP70KlYqit9y8g1nkpsUSMzG1Dtz
Gret+5UiwLRRXRmShY0Fu+eXQzLmfcjIuobi+NddWCv+R5zTZsdafyk9wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeph+DCToqSHNx0L44dY40PTEtNMB8GA1UdIwQY
MBaAFGZokIfnh5kJFoeNsg1VVoTCLNnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMt
MWU3YzE3NzI4YjUwLzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMtMWU3YzE3NzI4YjUw
LzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLku8Ztb
XnpjVOTK5MpOcDHdrgVy6WNR/Naf8n20Qb+9GJ6n/JOQzHxaT9NrmWdd/kHHYpIO
qb8x+TPK8Bl0cQGffG/Jf1oC1N34GhlfPVOHrPoRNzMDWjUoZd8aDypzHaUtoL2X
j7qz54YZg2YOe+pUFkW9O4xcKZ6dYDV/FHA7Q31YnUTW4N2Pd85/bMqkiERHcS0p
Y6mC+aI/bB8By5eE81WWkWmNzYcQNOGIovwlKbQxL8yBgi5gjYwETStE/S5sWQSA
bCkRIYw8G/jdV7Rg6SGN3Ks0olyDEjRQG57vzcKbKai2AqclGQcuJnSHDmO/Fu1h
42IpDC5KW5FXaQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:36:04 2025 by rpki-client