Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: 4gwVOeNv0dj3CVbaWrcOPJ+Y04Eoio4VRe3X4P45UAY=
Subject key identifier: 0D:EF:DE:BB:AD:92:F0:07:63:C2:B1:B8:F9:88:A0:44:09:9E:FB:39
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 0197B6A08B1E106F8342DA5D767B7A1F0E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 0762
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: MxfgUHdNiZNGkbUwUZOKPHOc4ZxExVluatY+mtfBXPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8b:1e:10:6f:83:42:da:5d:76:7b:7a:1f:0e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=0defdebbad92f00763c2b1b8f988a044099efb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:e5:bd:54:d4:34:19:59:fc:61:09:4a:21:
3b:5f:69:ec:1c:06:fe:cc:9d:ea:6c:e4:35:fd:16:
e2:7e:54:75:18:53:1a:27:d3:48:c1:0d:57:e9:86:
8d:75:72:b0:f3:d3:40:9a:ca:4a:ac:6a:c6:af:86:
19:2b:21:8b:55:dd:76:80:cd:43:9e:23:5e:6e:1f:
a5:90:ad:93:c6:d0:f2:0a:d1:1c:59:9c:33:01:41:
1a:7d:d5:aa:27:24:54:88:46:91:7f:78:5f:25:a6:
42:2d:ab:c9:12:95:81:24:46:13:d9:d7:f7:8b:c9:
f3:0c:fd:a1:29:89:51:b5:be:6f:1b:1a:a6:ff:2c:
8a:82:9e:33:9f:a7:01:1b:a4:38:cd:5b:4a:05:57:
c7:f2:2c:6d:e9:35:14:16:50:f8:5c:d8:61:41:39:
b3:b8:dd:4b:a5:97:99:95:f9:05:e4:a4:29:98:05:
c0:8f:df:ce:f8:e2:9e:55:e4:cd:b8:b1:a4:a2:07:
ff:fe:a6:83:d0:e0:c2:ef:51:06:f2:a1:f6:6a:04:
58:ff:39:9e:1a:c6:df:a1:67:18:7a:c6:02:6e:82:
5d:b8:7f:0f:b2:0c:82:f5:f0:a4:92:6c:ca:8a:95:
35:d4:39:cc:53:58:a9:42:71:24:49:8e:eb:e1:2a:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EF:DE:BB:AD:92:F0:07:63:C2:B1:B8:F9:88:A0:44:09:9E:FB:39
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:94:26:f8:be:d9:b5:76:07:cd:38:24:72:80:98:6e:5e:da:
b8:39:3c:ab:34:11:ef:e1:e4:24:bd:43:82:87:12:c6:d6:b0:
f0:d2:8f:ea:7b:cb:d8:0a:ef:99:d4:3d:8e:73:6c:3b:a2:c8:
8f:3c:9e:2d:5b:7b:fe:e8:9e:4b:e1:d9:45:72:ca:e8:08:94:
aa:b8:e8:d8:71:7a:04:b4:39:fc:7a:b7:24:b3:c0:7a:31:9a:
d6:cc:b5:46:ad:c3:db:90:36:c8:3d:27:28:c5:a2:b0:af:34:
e4:e2:83:86:e3:da:6a:9e:ca:e0:3d:04:5b:13:ed:e3:fe:32:
0b:ba:13:b1:3d:01:34:e5:64:4d:41:4a:af:cb:ab:34:c5:d8:
21:89:70:ba:31:35:3a:95:41:fb:ad:ef:eb:51:27:c2:53:72:
52:2a:62:ff:23:58:8e:e7:c0:37:ee:6a:69:46:01:db:35:8c:
6c:8c:ee:12:a9:25:7f:8d:4e:0b:7b:d6:f7:71:9b:62:34:6d:
27:aa:bc:9c:73:d8:af:2b:72:d1:0a:2e:61:77:06:99:7e:cf:
6c:df:e8:57:a7:10:d0:76:cb:a7:c0:ba:ef:06:e6:e2:5a:83:
fd:77:14:46:25:af:36:e2:3b:7b:23:bd:4c:16:03:8b:0c:41:
f4:d1:54:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIseEG+DQtpddnt6Hw5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTQ3NzVmZGFlZWM3YjBkNWM5MjcwODM5ODhkNTU1NzI3
YzIxYjUwHhcNMjUwNjI4MTMwMTAzWhcNMjUwNjI5MTMwMTAzWjAzMTEwLwYDVQQD
EygwZGVmZGViYmFkOTJmMDA3NjNjMmIxYjhmOTg4YTA0NDA5OWVmYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucPlvVTUNBlZ/GEJSiE7X2nsHAb+
zJ3qbOQ1/RbiflR1GFMaJ9NIwQ1X6YaNdXKw89NAmspKrGrGr4YZKyGLVd12gM1D
niNebh+lkK2TxtDyCtEcWZwzAUEafdWqJyRUiEaRf3hfJaZCLavJEpWBJEYT2df3
i8nzDP2hKYlRtb5vGxqm/yyKgp4zn6cBG6Q4zVtKBVfH8ixt6TUUFlD4XNhhQTmz
uN1LpZeZlfkF5KQpmAXAj9/O+OKeVeTNuLGkogf//qaD0ODC71EG8qH2agRY/zme
GsbfoWcYesYCboJduH8PsgyC9fCkkmzKipU11DnMU1ipQnEkSY7r4SpFCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3v3rutkvAHY8KxuPmIoEQJnvs5MB8GA1UdIwQY
MBaAFGQUd1/a7sew1cknCDmI1VVyfCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUt
NDc1NzI3YTAzZGQzLzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUtNDc1NzI3YTAzZGQz
LzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZQm+L7Z
tXYHzTgkcoCYbl7auDk8qzQR7+HkJL1DgocSxtaw8NKP6nvL2ArvmdQ9jnNsO6LI
jzyeLVt7/uieS+HZRXLK6AiUqrjo2HF6BLQ5/Hq3JLPAejGa1sy1Rq3D25A2yD0n
KMWisK805OKDhuPaap7K4D0EWxPt4/4yC7oTsT0BNOVkTUFKr8urNMXYIYlwujE1
OpVB+63v61EnwlNyUipi/yNYjufAN+5qaUYB2zWMbIzuEqklf41OC3vW93GbYjRt
J6q8nHPYryty0QouYXcGmX7PbN/oV6cQ0HbLp8C67wbm4lqD/XcURiWvNuI7eyO9
TBYDiwxB9NFUeA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:02:57 2025 by rpki-client