Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: crWaPNCSHRxukLTyPxVnndT3AaN8ksKzOiTUOrUqzRQ=
Subject key identifier: AA:79:23:18:2B:54:44:95:15:CF:9B:EA:A3:63:B2:45:F4:06:4F:38
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 01984889CC291CB4AE076D199061B0371DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0947
Signing time: Sat 26 Jul 2025 21:00:46 +0000
Manifest this update: Sat 26 Jul 2025 21:00:46 +0000
Manifest next update: Sun 27 Jul 2025 21:00:46 +0000
Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: Ug86C2NHdxyec8UU4TIm84UT4JOe7s3pu91a/LRO8oY=)
2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:cc:29:1c:b4:ae:07:6d:19:90:61:b0:37:1d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Jul 26 21:00:46 2025 GMT
Not After : Jul 27 21:00:46 2025 GMT
Subject: CN=aa7923182b54449515cf9beaa363b245f4064f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:5f:f4:c6:5d:b0:ee:77:ac:db:bf:19:e4:
df:8f:da:a9:59:55:51:2e:42:38:42:5d:54:ef:67:
b4:44:21:00:2a:7b:8d:4e:04:10:11:41:63:f7:e0:
48:af:f2:3e:d0:7c:0e:09:25:5b:0a:41:9d:e2:ae:
51:2c:93:0f:40:c7:c2:4f:88:a9:9b:40:8d:24:98:
c7:62:7e:95:b2:92:63:3d:70:c3:ac:b8:07:91:84:
f9:04:68:c5:b0:50:5d:ae:91:f4:62:26:94:49:14:
9a:04:2d:1c:d9:65:a3:14:44:ec:2a:85:5a:80:dd:
8e:6c:e1:2c:de:98:e9:39:80:e5:87:bc:13:66:31:
3c:a0:7c:c1:69:a5:d0:54:b0:c1:0d:5c:47:e6:d0:
c9:59:4d:bb:63:9e:7c:d7:75:05:32:0b:d6:5d:87:
fa:76:e6:b1:e9:ae:32:bf:e4:69:a7:e5:0a:5b:38:
d6:34:92:a2:78:32:5d:62:d2:af:97:46:47:ec:62:
5a:9f:15:6c:09:09:5f:ed:9e:fa:62:4b:36:50:49:
28:e1:d8:b1:99:b0:fc:6c:ce:14:f5:70:85:27:3e:
10:c3:4b:98:58:ab:83:ca:a6:95:22:23:e9:dc:5a:
0f:eb:43:a1:5d:96:b1:41:b1:eb:4c:f0:a7:73:66:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:23:18:2B:54:44:95:15:CF:9B:EA:A3:63:B2:45:F4:06:4F:38
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a0:20:2c:07:1e:fd:09:9e:c4:0b:57:d9:8d:75:5c:a3:20:
38:27:51:46:7c:d4:30:fc:bb:d2:14:da:6c:e2:7d:3b:42:75:
47:5c:ef:b8:09:08:6d:84:1a:48:ee:b8:08:6f:dc:e6:e6:af:
32:18:c3:42:56:0e:43:78:91:eb:fc:83:e2:11:88:3a:3b:be:
aa:97:18:1a:7a:bf:0d:ab:60:1c:6b:92:99:90:e5:f5:95:77:
6e:7d:b2:c4:1f:f5:69:51:97:cf:90:80:05:34:45:c6:b3:7a:
6f:31:ac:e4:61:bc:d4:df:69:5d:2d:1a:dd:6a:cb:de:e6:10:
f8:05:44:4f:05:45:42:3f:b7:ab:f1:d3:41:1d:80:f5:26:fa:
cd:de:d8:2b:19:9b:cc:1e:35:71:0a:12:63:6b:81:d0:51:61:
55:df:44:ff:64:ff:e4:81:da:13:18:2e:25:9e:51:25:db:ce:
60:e5:ce:f6:9d:53:1e:73:10:54:33:02:d1:cd:58:cb:6c:63:
d2:c8:5c:82:6a:a7:80:f4:2d:cc:4d:b9:76:09:ac:fa:a6:e7:
ca:a7:f6:b4:1c:15:bc:a8:e3:6b:1c:c1:a5:f4:4e:0e:7d:cc:
c6:19:00:e7:4e:7d:58:76:9e:50:d4:b4:bf:c7:3b:cb:9e:59:
46:0c:fb:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIicwpHLSuB20ZkGGwNx3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YjA3OGRlZDM3NTkyMzBjYTJlMWEzYmU5MDY2MzhkMTMw
NmI5MDgwHhcNMjUwNzI2MjEwMDQ2WhcNMjUwNzI3MjEwMDQ2WjAzMTEwLwYDVQQD
EyhhYTc5MjMxODJiNTQ0NDk1MTVjZjliZWFhMzYzYjI0NWY0MDY0ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxApf9MZdsO53rNu/GeTfj9qpWVVR
LkI4Ql1U72e0RCEAKnuNTgQQEUFj9+BIr/I+0HwOCSVbCkGd4q5RLJMPQMfCT4ip
m0CNJJjHYn6VspJjPXDDrLgHkYT5BGjFsFBdrpH0YiaUSRSaBC0c2WWjFETsKoVa
gN2ObOEs3pjpOYDlh7wTZjE8oHzBaaXQVLDBDVxH5tDJWU27Y55813UFMgvWXYf6
duax6a4yv+Rpp+UKWzjWNJKieDJdYtKvl0ZH7GJanxVsCQlf7Z76Yks2UEko4dix
mbD8bM4U9XCFJz4Qw0uYWKuDyqaVIiPp3FoP60OhXZaxQbHrTPCnc2ZLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp5IxgrVESVFc+b6qNjskX0Bk84MB8GA1UdIwQY
MBaAFGaweN7TdZIwyi4aO+kGY40TBrkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEt
NDAyZTYyYzU0ZDMyLzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEtNDAyZTYyYzU0ZDMy
LzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqAgLAce
/QmexAtX2Y11XKMgOCdRRnzUMPy70hTabOJ9O0J1R1zvuAkIbYQaSO64CG/c5uav
MhjDQlYOQ3iR6/yD4hGIOju+qpcYGnq/DatgHGuSmZDl9ZV3bn2yxB/1aVGXz5CA
BTRFxrN6bzGs5GG81N9pXS0a3WrL3uYQ+AVETwVFQj+3q/HTQR2A9Sb6zd7YKxmb
zB41cQoSY2uB0FFhVd9E/2T/5IHaExguJZ5RJdvOYOXO9p1THnMQVDMC0c1Yy2xj
0shcgmqngPQtzE25dgms+qbnyqf2tBwVvKjjaxzBpfRODn3MxhkA5059WHaeUNS0
v8c7y55ZRgz7AA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:51 2025 by rpki-client