Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: q97TFlqb0MJkF7zd3peo7kSOeVhOIRMkFapxGGxwTZQ=
Subject key identifier: 8D:B3:F4:D2:EA:95:72:2E:21:06:5B:EB:98:2D:93:32:19:01:65:DC
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 0197B6A1DF1479E3A8E2CD1BBAB0E369EE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0C0A
Signing time: Sat 28 Jun 2025 13:02:31 +0000
Manifest this update: Sat 28 Jun 2025 13:02:31 +0000
Manifest next update: Sun 29 Jun 2025 13:02:31 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: gR/Wt5cALHQVV8r0JKA8QHafn47KrJlbV+O7Y09Tnrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:df:14:79:e3:a8:e2:cd:1b:ba:b0:e3:69:ee:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Jun 28 13:02:31 2025 GMT
Not After : Jun 29 13:02:31 2025 GMT
Subject: CN=8db3f4d2ea95722e21065beb982d9332190165dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:b5:b0:f1:c8:0b:f3:55:63:93:c0:50:09:
c1:3c:40:b4:4e:8d:76:fb:3d:3d:ac:45:9e:f3:aa:
77:a6:d8:7f:f6:24:94:1c:0e:77:5f:a2:1a:51:9b:
82:58:84:8a:bc:d8:5d:18:ce:49:c5:c1:c5:1f:e1:
cb:87:3d:f9:4a:bd:d1:44:c1:b2:46:ef:8b:ca:25:
6a:c1:1e:96:06:f6:31:40:d5:c9:e6:18:b1:22:e8:
38:00:56:df:fc:f1:d2:b1:30:ae:ec:58:68:69:47:
46:da:b8:a2:03:e5:54:e8:4e:cc:fd:be:54:24:e2:
6f:ae:2a:00:2a:d8:f9:36:5b:d5:c4:29:d7:3a:02:
e3:b3:53:1d:c7:9e:82:62:f4:3d:51:7f:93:14:05:
81:49:01:84:c9:6a:7c:5b:3d:8d:30:ea:02:59:56:
22:a4:49:40:18:5c:30:c7:b0:dd:15:05:18:ce:f5:
15:96:0e:c4:4a:9b:e2:ba:d9:d2:35:ec:22:67:f7:
1b:63:6a:db:0e:7a:6e:c3:0d:16:67:6f:de:62:b0:
cf:ba:7f:48:67:f4:ed:3e:08:37:7b:fc:1c:7c:ba:
a7:72:60:25:1f:7b:85:0d:72:e3:71:78:f2:74:02:
e5:7f:80:a1:47:18:10:8c:af:25:60:41:57:39:7c:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B3:F4:D2:EA:95:72:2E:21:06:5B:EB:98:2D:93:32:19:01:65:DC
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:65:00:25:38:37:05:8a:88:e3:e7:de:0a:1d:1c:cb:bd:c7:
0f:cd:e4:8b:70:a4:86:bc:76:fa:28:de:95:19:bb:a9:c2:89:
c7:d3:b1:ec:e2:8b:a7:21:26:7a:84:d5:4c:66:90:30:2e:4c:
0a:b9:1f:ce:2c:08:83:28:aa:03:da:78:1e:50:57:43:ff:4f:
2d:d9:ac:3d:9d:0b:3d:8f:98:eb:4a:45:15:11:d1:4c:95:38:
3f:0e:5c:2f:04:6e:e3:11:5d:dc:d5:ec:cd:2e:7d:a8:b8:77:
4c:2a:0b:74:9f:af:c4:f6:ff:4e:f6:8c:86:36:78:d9:ac:2a:
c6:7f:42:da:18:1d:fe:d6:e8:c6:34:85:14:81:f9:bc:fe:84:
5e:2c:68:83:c1:f4:5d:3f:33:dd:75:a2:2c:ea:5f:ec:89:50:
08:9d:6d:7d:ef:1b:07:a9:ef:fb:92:f6:cc:f7:84:38:e1:1c:
16:7b:6a:1b:c5:c8:ca:f1:dc:b0:b3:c8:09:0e:e2:6d:3a:ef:
5c:21:3e:df:b3:8e:c1:3d:ba:6b:50:a0:66:57:db:d1:54:a4:
78:47:67:2c:c8:5d:5a:60:49:f2:8f:71:6e:3f:43:4d:98:d9:
f9:ec:cc:91:3c:f0:62:34:20:8d:e2:11:cf:c1:db:6f:ec:78:
9b:6e:de:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2od8UeeOo4s0burDjae52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj
MTc2M2IwHhcNMjUwNjI4MTMwMjMxWhcNMjUwNjI5MTMwMjMxWjAzMTEwLwYDVQQD
Eyg4ZGIzZjRkMmVhOTU3MjJlMjEwNjViZWI5ODJkOTMzMjE5MDE2NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq+1sPHIC/NVY5PAUAnBPEC0To12
+z09rEWe86p3pth/9iSUHA53X6IaUZuCWISKvNhdGM5JxcHFH+HLhz35Sr3RRMGy
Ru+LyiVqwR6WBvYxQNXJ5hixIug4AFbf/PHSsTCu7FhoaUdG2riiA+VU6E7M/b5U
JOJvrioAKtj5NlvVxCnXOgLjs1Mdx56CYvQ9UX+TFAWBSQGEyWp8Wz2NMOoCWVYi
pElAGFwwx7DdFQUYzvUVlg7ESpviutnSNewiZ/cbY2rbDnpuww0WZ2/eYrDPun9I
Z/TtPgg3e/wcfLqncmAlH3uFDXLjcXjydALlf4ChRxgQjK8lYEFXOXxKnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2z9NLqlXIuIQZb65gtkzIZAWXcMB8GA1UdIwQY
MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt
ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0
LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWUAJTg3
BYqI4+feCh0cy73HD83ki3Ckhrx2+ijelRm7qcKJx9Ox7OKLpyEmeoTVTGaQMC5M
CrkfziwIgyiqA9p4HlBXQ/9PLdmsPZ0LPY+Y60pFFRHRTJU4Pw5cLwRu4xFd3NXs
zS59qLh3TCoLdJ+vxPb/TvaMhjZ42awqxn9C2hgd/tboxjSFFIH5vP6EXixog8H0
XT8z3XWiLOpf7IlQCJ1tfe8bB6nv+5L2zPeEOOEcFntqG8XIyvHcsLPICQ7ibTrv
XCE+37OOwT26a1CgZlfb0VSkeEdnLMhdWmBJ8o9xbj9DTZjZ+ezMkTzwYjQgjeIR
z8Hbb+x4m27etg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:10 2025 by rpki-client