Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: S+1C6/hbvKpWadBq/8ToSbsnm/XPfuvtakHq9dPo2bs=
Subject key identifier: 83:DB:5E:32:15:6F:ED:14:3A:81:76:3C:B0:BF:B7:2B:16:D4:D0:9A
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 0198D5F1D25DF310D91D1C13F0CA414972D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 09B3
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: 81oPaJSoF4fw0VfEgnF7Dr2gQ9xqPKrytDh9+ZPboxk=)
2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d2:5d:f3:10:d9:1d:1c:13:f0:ca:41:49:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=83db5e32156fed143a81763cb0bfb72b16d4d09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:c7:d8:91:12:6c:98:c0:1c:6f:53:ba:22:
5c:c0:e7:4c:6a:46:2c:b8:13:c5:b8:04:5d:95:65:
cb:00:ec:62:66:35:2e:ea:df:10:ef:60:a3:a7:a1:
93:72:5d:a7:48:49:31:eb:4d:af:79:0e:d8:10:48:
af:55:b6:e8:a8:99:bf:56:b7:a9:9b:94:b9:ea:b5:
60:57:70:78:eb:b2:c3:3a:85:f5:b9:ad:ea:ac:20:
9c:8d:8e:36:93:98:7c:2f:c7:fb:cd:81:77:0e:16:
5b:67:d8:b4:46:6c:bf:77:ca:e9:64:e4:53:5b:1a:
c7:62:70:1e:42:1d:df:c4:af:db:96:61:c2:2a:b2:
57:f1:ba:9a:6f:e3:2f:e3:16:36:09:30:dc:cd:ce:
16:5f:c2:3e:e7:eb:e6:4a:05:e6:bb:44:40:d3:87:
b3:55:93:73:7a:a5:fd:e0:08:73:9f:69:b0:62:59:
e6:db:d0:22:fd:d6:36:af:eb:19:fd:4c:43:cc:16:
62:2e:d0:29:c1:34:9b:52:21:46:2b:a1:78:4c:a8:
99:34:c9:82:bd:db:00:e3:ac:58:84:24:76:6d:e7:
b6:6e:28:39:37:c3:9d:58:26:4d:0f:e7:2a:eb:9d:
86:01:04:35:54:9a:82:2f:44:e3:b0:cb:71:91:cb:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:5E:32:15:6F:ED:14:3A:81:76:3C:B0:BF:B7:2B:16:D4:D0:9A
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:df:6f:74:74:c9:18:8b:f7:54:66:31:5b:f0:15:17:3b:10:
dc:ad:30:93:1b:c2:44:fb:23:0a:62:90:eb:7d:95:47:06:1a:
86:97:05:c0:48:21:59:80:c4:d2:f6:fd:ab:db:64:24:71:15:
49:34:bc:60:07:96:72:ce:06:f5:60:51:d8:95:f4:0a:b0:fd:
3d:dc:8c:71:cf:74:63:a7:38:22:40:37:39:2f:d3:4c:43:d5:
90:ae:64:95:16:26:e1:72:c5:8c:2e:15:54:83:54:d8:47:d1:
d8:ca:68:11:81:e5:36:49:e1:be:44:fd:8a:63:e6:2c:15:b7:
0e:7e:32:ac:92:81:45:93:f9:92:ef:11:3d:64:ce:d3:e3:f4:
86:8c:7b:f9:cc:4d:86:30:2e:31:eb:b0:27:e9:a8:72:27:b6:
58:da:95:69:df:a8:e5:79:7c:8f:35:a7:f0:cc:6f:a3:7a:07:
a5:e3:42:ec:9a:b4:db:65:c5:1e:48:f3:e6:44:8c:02:43:83:
a0:c6:f6:48:df:84:ed:7c:68:df:0e:3b:82:77:f2:b4:44:f2:
0f:23:25:fc:66:24:bc:0f:2e:11:c7:c4:59:ed:93:d2:4c:5e:
4a:a4:e1:c0:bc:4e:aa:5b:6a:a5:e9:44:5d:77:23:93:59:24:
f0:0c:1c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8dJd8xDZHRwT8MpBSXLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmJhYjg0NTk5NDhiNzk3NDc2NDhlMTNlOTliOWQwYTU4
MjUwNmEwHhcNMjUwODIzMDgwMDUxWhcNMjUwODI0MDgwMDUxWjAzMTEwLwYDVQQD
Eyg4M2RiNWUzMjE1NmZlZDE0M2E4MTc2M2NiMGJmYjcyYjE2ZDRkMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8bH2JESbJjAHG9TuiJcwOdMakYs
uBPFuARdlWXLAOxiZjUu6t8Q72Cjp6GTcl2nSEkx602veQ7YEEivVbboqJm/Vrep
m5S56rVgV3B467LDOoX1ua3qrCCcjY42k5h8L8f7zYF3DhZbZ9i0Rmy/d8rpZORT
WxrHYnAeQh3fxK/blmHCKrJX8bqab+Mv4xY2CTDczc4WX8I+5+vmSgXmu0RA04ez
VZNzeqX94Ahzn2mwYlnm29Ai/dY2r+sZ/UxDzBZiLtApwTSbUiFGK6F4TKiZNMmC
vdsA46xYhCR2bee2big5N8OdWCZND+cq652GAQQ1VJqCL0TjsMtxkcsVyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPbXjIVb+0UOoF2PLC/tysW1NCaMB8GA1UdIwQY
MBaAFGQrq4RZlIt5dHZI4T6ZudClglBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMt
NWIxNTUyM2JmY2JiLzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMtNWIxNTUyM2JmY2Ji
LzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet9vdHTJ
GIv3VGYxW/AVFzsQ3K0wkxvCRPsjCmKQ632VRwYahpcFwEghWYDE0vb9q9tkJHEV
STS8YAeWcs4G9WBR2JX0CrD9PdyMcc90Y6c4IkA3OS/TTEPVkK5klRYm4XLFjC4V
VINU2EfR2MpoEYHlNknhvkT9imPmLBW3Dn4yrJKBRZP5ku8RPWTO0+P0hox7+cxN
hjAuMeuwJ+mocie2WNqVad+o5Xl8jzWn8Mxvo3oHpeNC7Jq022XFHkjz5kSMAkOD
oMb2SN+E7Xxo3w47gnfytETyDyMl/GYkvA8uEcfEWe2T0kxeSqThwLxOqltqpelE
XXcjk1kk8AwcLA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:02 2025 by rpki-client