Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: e09vIlmDsdV0a0xDIvzK9QgPHfjN1jp36erqPJ0Yw3U=
Subject key identifier: 60:93:33:C2:BC:9B:23:B0:8C:22:71:1A:41:FF:F1:7C:E1:62:3B:0B
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 019851206E8E9EAEE91FD5B294EA7472023C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 07B2
Signing time: Mon 28 Jul 2025 13:02:16 +0000
Manifest this update: Mon 28 Jul 2025 13:02:16 +0000
Manifest next update: Tue 29 Jul 2025 13:02:16 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: jgP0dR4QRFGMkByci5VbNknHl0WpQR8NqF6rxJOnUg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:20:6e:8e:9e:ae:e9:1f:d5:b2:94:ea:74:72:02:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Jul 28 13:02:16 2025 GMT
Not After : Jul 29 13:02:16 2025 GMT
Subject: CN=609333c2bc9b23b08c22711a41fff17ce1623b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:3b:a8:f7:0d:03:0e:9f:6e:ec:ab:e7:1f:
85:e9:90:a8:9b:1d:06:c1:ef:73:66:40:7b:a4:ba:
e0:e2:fa:e2:0b:e3:24:c2:44:47:93:82:3d:16:e6:
ff:fb:c7:ba:8b:87:72:6b:53:68:2b:c9:a0:48:2a:
9c:63:9b:de:fa:3a:83:90:55:27:7e:48:83:1a:a4:
6f:f3:22:4f:93:26:85:b2:55:dd:d8:86:8d:62:33:
4d:2f:6d:7a:99:a6:cf:2e:8a:af:cb:10:f9:62:a8:
dd:49:45:20:fd:7e:ff:20:e9:80:f4:70:d5:f0:60:
e7:35:37:b3:6e:6d:56:14:00:1b:5a:4e:dd:bb:98:
5c:a9:1b:c3:51:88:b7:cf:a6:d6:2c:7c:da:7d:6e:
a5:ec:0e:eb:51:00:b3:3d:80:bd:0b:70:df:7f:3e:
f1:5e:37:ea:79:6d:81:97:97:72:1c:cf:68:2e:7f:
24:ad:cc:fd:be:3c:84:df:31:1f:54:d0:e9:4e:ca:
ff:44:cb:70:2f:85:0f:37:4d:1e:48:93:47:f4:27:
61:fc:52:9a:f1:0b:04:ec:98:af:76:5d:c6:45:8b:
2d:ee:f7:eb:64:01:58:8e:59:a1:dd:1e:21:f1:2d:
77:0c:98:b9:4f:12:a9:a0:2d:cf:03:46:d2:a0:42:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:93:33:C2:BC:9B:23:B0:8C:22:71:1A:41:FF:F1:7C:E1:62:3B:0B
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:83:6d:c5:14:90:8a:48:cf:10:c4:62:e6:56:84:02:9a:
5e:1d:ba:37:1e:6f:51:77:83:ae:93:5a:52:59:47:2b:7b:9b:
e2:3a:4d:2d:f2:91:be:3d:cc:54:52:59:38:53:c5:d5:e8:a4:
6f:45:f8:09:d3:43:b5:c2:85:52:8e:66:b3:6e:d8:56:0a:63:
dd:f3:c2:f6:8a:b7:7d:f3:76:3d:a4:a4:57:d0:c1:ec:22:57:
f4:21:6b:96:22:5b:69:d3:bc:95:66:14:00:f0:26:b2:3f:46:
d6:bd:95:f2:d2:05:7d:bc:a3:cd:43:4b:d1:bb:0a:da:37:eb:
d7:3c:aa:15:85:a2:17:c6:03:5b:fc:a7:87:b5:8f:61:32:5b:
c0:74:a3:e5:0e:b2:70:d2:bc:e4:d9:53:37:51:45:86:bf:f2:
ad:45:a7:03:5c:95:c7:32:b4:b1:58:cb:c5:33:a9:52:5d:ee:
6f:ce:f1:7b:d2:f5:88:ee:6e:e1:30:9c:7f:0d:8f:a9:31:b8:
fc:8d:3d:e3:dc:74:8e:64:62:1f:56:85:94:74:71:f2:45:4f:
25:f2:e0:ad:1a:3e:ec:a2:a0:4a:db:99:83:47:9d:75:f2:63:
aa:c8:0c:ad:42:03:3a:10:89:cd:0d:58:c4:42:bf:f5:ad:9f:
85:f2:aa:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRIG6Onq7pH9WylOp0cgI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTQ3NzVmZGFlZWM3YjBkNWM5MjcwODM5ODhkNTU1NzI3
YzIxYjUwHhcNMjUwNzI4MTMwMjE2WhcNMjUwNzI5MTMwMjE2WjAzMTEwLwYDVQQD
Eyg2MDkzMzNjMmJjOWIyM2IwOGMyMjcxMWE0MWZmZjE3Y2UxNjIzYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRg7qPcNAw6fbuyr5x+F6ZComx0G
we9zZkB7pLrg4vriC+MkwkRHk4I9Fub/+8e6i4dya1NoK8mgSCqcY5ve+jqDkFUn
fkiDGqRv8yJPkyaFslXd2IaNYjNNL216mabPLoqvyxD5YqjdSUUg/X7/IOmA9HDV
8GDnNTezbm1WFAAbWk7du5hcqRvDUYi3z6bWLHzafW6l7A7rUQCzPYC9C3Dffz7x
XjfqeW2Bl5dyHM9oLn8krcz9vjyE3zEfVNDpTsr/RMtwL4UPN00eSJNH9Cdh/FKa
8QsE7Jivdl3GRYst7vfrZAFYjlmh3R4h8S13DJi5TxKpoC3PA0bSoEJmsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCTM8K8myOwjCJxGkH/8XzhYjsLMB8GA1UdIwQY
MBaAFGQUd1/a7sew1cknCDmI1VVyfCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUt
NDc1NzI3YTAzZGQzLzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUtNDc1NzI3YTAzZGQz
LzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ52DbcUU
kIpIzxDEYuZWhAKaXh26Nx5vUXeDrpNaUllHK3ub4jpNLfKRvj3MVFJZOFPF1eik
b0X4CdNDtcKFUo5ms27YVgpj3fPC9oq3ffN2PaSkV9DB7CJX9CFrliJbadO8lWYU
APAmsj9G1r2V8tIFfbyjzUNL0bsK2jfr1zyqFYWiF8YDW/ynh7WPYTJbwHSj5Q6y
cNK85NlTN1FFhr/yrUWnA1yVxzK0sVjLxTOpUl3ub87xe9L1iO5u4TCcfw2PqTG4
/I0949x0jmRiH1aFlHRx8kVPJfLgrRo+7KKgStuZg0eddfJjqsgMrUIDOhCJzQ1Y
xEK/9a2fhfKqGQ==
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:59:43 2025 by rpki-client