Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: SU088cTDL4CBVlx02Cqr5vmjQ82f9jMPToli3ZRgqi0=
Subject key identifier: 03:DE:D4:C5:33:75:0D:10:BC:30:3F:32:5D:8A:06:58:18:54:6C:01
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 0199FDDA402AE3C03F934EF6C87E3F0FD0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 04DC
Signing time: Sun 19 Oct 2025 19:02:42 +0000
Manifest this update: Sun 19 Oct 2025 19:02:42 +0000
Manifest next update: Mon 20 Oct 2025 19:02:42 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: tqD0IpeaQrPV/r9ez8P3Sb4GrFvh8iMup+B3c79FC3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:40:2a:e3:c0:3f:93:4e:f6:c8:7e:3f:0f:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Oct 19 19:02:42 2025 GMT
Not After : Oct 20 19:02:42 2025 GMT
Subject: CN=03ded4c533750d10bc303f325d8a065818546c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:5c:0e:0e:4f:07:35:75:0d:28:b0:40:3e:
e2:c3:05:27:17:21:2e:aa:3b:8a:b6:50:9e:63:1a:
12:e7:39:d4:3c:fd:a3:7c:26:1d:dd:ae:e0:61:aa:
06:84:d1:d0:ac:33:d2:c3:5e:3c:c7:b8:80:7d:f0:
92:a0:2a:df:6c:79:b6:fb:40:74:e8:f1:0e:6c:49:
f4:47:0d:47:7e:f0:65:8a:7d:cd:3a:e5:17:ab:0d:
75:cc:2a:b9:ed:95:fa:c4:9e:40:16:e0:cd:5f:5d:
d8:7e:a3:5a:4f:61:2e:0d:ae:16:6c:31:e6:a5:c6:
2c:be:ca:06:19:4b:65:06:85:5e:38:87:f6:69:e3:
6d:bf:02:34:b8:e3:67:09:c0:e8:b6:92:c4:61:5b:
16:ae:ed:26:f4:ea:00:cd:07:8b:1c:c7:32:6c:7a:
7b:bc:ab:3a:d8:91:95:eb:31:e5:10:9f:be:fb:18:
1d:eb:c2:2d:9e:28:4e:fb:62:02:ff:99:a5:67:9d:
b1:15:a2:c7:5f:7a:58:32:d7:65:19:ef:23:00:53:
68:9b:64:4e:8b:6f:4a:61:c4:95:30:65:45:58:bf:
52:bc:f8:75:bc:dd:19:b3:28:1b:5a:3b:5b:59:ac:
8d:94:4a:a7:e4:3f:86:d9:b1:3c:85:6a:1c:92:65:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DE:D4:C5:33:75:0D:10:BC:30:3F:32:5D:8A:06:58:18:54:6C:01
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6b:0a:73:55:5c:8b:b8:46:4a:16:60:ac:68:a7:40:8d:bc:
55:60:0e:6e:ec:2a:8a:c6:67:f4:f4:08:19:32:3d:18:9d:1d:
59:4d:e4:f6:98:25:ac:f1:7d:a9:ee:be:aa:e0:35:29:37:e1:
8a:e4:8d:f3:a3:ad:04:d4:1d:3e:96:9b:01:da:54:63:80:c4:
ee:1a:70:6d:6a:15:f6:c2:9f:e0:ce:49:1e:bd:67:f6:a0:35:
bd:96:76:01:c1:f1:f6:34:84:e3:7c:2f:81:b1:95:bb:fd:a8:
f7:67:2d:9e:fd:fb:18:40:5c:81:63:bf:c6:d3:41:06:48:f3:
6e:ac:92:e9:94:10:d7:6e:26:64:50:40:20:ac:26:5b:fa:b6:
0e:6a:bc:16:27:2b:c0:78:40:1d:c1:ca:2b:cc:e2:ab:79:e6:
09:eb:05:f2:59:a6:69:98:20:7d:16:68:e5:28:4c:dd:cc:b2:
92:e8:70:02:c1:5a:3f:36:09:f4:d8:e0:ee:5e:53:72:9d:b4:
d6:e2:85:4f:79:5c:55:05:40:a8:54:c9:3e:7c:eb:4e:90:b9:
43:16:82:2c:50:c3:5d:09:f6:69:bf:8f:b8:61:7b:53:4f:31:
b6:6f:0f:d6:cd:5a:f1:2a:f7:2e:3b:6e:ec:20:a1:5c:26:cb:
ae:5d:c4:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92kAq48A/k072yH4/D9DYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlODhhOWVkOTlhZDk3YWMzNzE3MTIxMjlmZTA1NGY2OTZk
YzU2N2QwHhcNMjUxMDE5MTkwMjQyWhcNMjUxMDIwMTkwMjQyWjAzMTEwLwYDVQQD
EygwM2RlZDRjNTMzNzUwZDEwYmMzMDNmMzI1ZDhhMDY1ODE4NTQ2YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l9cDg5PBzV1DSiwQD7iwwUnFyEu
qjuKtlCeYxoS5znUPP2jfCYd3a7gYaoGhNHQrDPSw148x7iAffCSoCrfbHm2+0B0
6PEObEn0Rw1HfvBlin3NOuUXqw11zCq57ZX6xJ5AFuDNX13YfqNaT2EuDa4WbDHm
pcYsvsoGGUtlBoVeOIf2aeNtvwI0uONnCcDotpLEYVsWru0m9OoAzQeLHMcybHp7
vKs62JGV6zHlEJ+++xgd68ItnihO+2IC/5mlZ52xFaLHX3pYMtdlGe8jAFNom2RO
i29KYcSVMGVFWL9SvPh1vN0ZsygbWjtbWayNlEqn5D+G2bE8hWockmXoKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPe1MUzdQ0QvDA/Ml2KBlgYVGwBMB8GA1UdIwQY
MBaAFM6Iqe2ZrZesNxcSEp/gVPaW3FZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yN2YyYTctOGUyMC00ZmFkLWEyMDEt
MWM2ZjAzNWZiMjJjLzEvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yN2YyYTctOGUyMC00ZmFkLWEyMDEtMWM2ZjAzNWZiMjJj
LzEvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimsKc1Vc
i7hGShZgrGinQI28VWAObuwqisZn9PQIGTI9GJ0dWU3k9pglrPF9qe6+quA1KTfh
iuSN86OtBNQdPpabAdpUY4DE7hpwbWoV9sKf4M5JHr1n9qA1vZZ2AcHx9jSE43wv
gbGVu/2o92ctnv37GEBcgWO/xtNBBkjzbqyS6ZQQ124mZFBAIKwmW/q2Dmq8Ficr
wHhAHcHKK8ziq3nmCesF8lmmaZggfRZo5ShM3cyykuhwAsFaPzYJ9Njg7l5Tcp20
1uKFT3lcVQVAqFTJPnzrTpC5QxaCLFDDXQn2ab+PuGF7U08xtm8P1s1a8Sr3Ljtu
7CChXCbLrl3EbA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:41:27 2025 by rpki-client