Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: AdnlI1pD2Yv3KmlwNwsAoWprzhZZLxgF/1rMIxY3AbQ=
Subject key identifier: 99:CC:BC:16:49:C9:18:F5:93:CD:99:4E:09:F1:EF:DB:6F:E8:99:CD
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 01984A4117FB23A144509EEE1E715A87B68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:36 +0000
Manifest this update: Sun 27 Jul 2025 05:00:36 +0000
Manifest next update: Mon 28 Jul 2025 05:00:36 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: NJGmtIPMhBpaWGPdfva4vS3gdiU8Ooy86+wLgjt72JE=)
2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:17:fb:23:a1:44:50:9e:ee:1e:71:5a:87:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: Jul 27 05:00:36 2025 GMT
Not After : Jul 28 05:00:36 2025 GMT
Subject: CN=99ccbc1649c918f593cd994e09f1efdb6fe899cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:94:fe:a8:40:fc:0e:00:01:88:6e:c3:62:
ed:62:d8:d6:b8:e7:09:5e:b9:7f:91:c1:0c:d6:19:
4f:6a:43:5f:52:86:5a:b6:19:62:c4:22:02:d0:c6:
8c:67:08:a2:ae:ac:6b:e9:59:a4:8f:47:21:01:f8:
6b:2f:da:3a:4b:8e:63:e2:22:17:2c:91:94:d0:9f:
e7:5c:82:f4:47:29:7f:53:f9:53:65:0d:7b:29:38:
bf:8c:b8:fc:7f:39:9e:62:09:27:af:c2:65:a1:cd:
c4:65:c8:5d:a1:d7:c7:23:ad:c3:f6:87:91:94:9a:
c8:53:fb:ab:47:69:ae:eb:07:15:ba:34:9f:94:c6:
eb:36:e1:31:ac:6e:d8:be:f5:20:68:b7:1e:c7:56:
cc:da:9d:e5:ca:fc:fe:8e:60:20:ec:b4:81:8c:8d:
86:00:4b:99:3c:2f:f3:33:95:53:58:2b:06:3f:78:
b5:5a:83:c4:49:db:b9:8e:c1:5d:dd:d5:9b:0f:44:
8f:95:b3:35:ad:11:d9:99:e3:9f:f5:b8:e4:f4:65:
66:d6:05:8d:7e:bf:dd:fd:a3:2b:50:33:9e:ee:07:
f5:fd:ce:40:97:6c:e0:e2:e0:73:1c:86:c5:6f:c7:
eb:29:a8:25:72:13:40:0e:f9:e3:3b:a0:9c:ad:5e:
af:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CC:BC:16:49:C9:18:F5:93:CD:99:4E:09:F1:EF:DB:6F:E8:99:CD
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:18:34:f6:50:07:c0:a0:be:52:cc:58:a6:7c:c8:14:1d:
cf:fc:54:31:0e:ba:b8:f2:fe:02:db:50:46:cf:20:5d:6c:c8:
bb:3c:75:8c:da:a0:d6:f4:69:52:f3:dd:55:58:62:13:16:a5:
ed:22:c6:67:02:b7:26:55:ce:d6:f0:1f:bf:d7:ec:32:82:c7:
8b:a6:46:2c:6a:7a:e5:b0:08:b4:cd:2a:09:d7:b6:4e:a0:32:
67:3e:97:8b:e5:f6:4e:14:63:32:a3:d6:d6:d3:3b:90:2b:11:
87:3c:84:a3:50:c9:ab:ad:e5:22:10:b5:b2:86:27:d7:21:b0:
7d:63:15:c4:a7:17:aa:9f:07:38:13:6e:e2:b8:75:01:7c:fe:
25:e7:38:fc:26:4b:d5:fd:c7:08:7b:9d:a0:1f:6c:07:0b:c8:
be:59:a7:da:fa:0f:d3:54:5c:36:ba:5b:ff:c6:8f:11:e5:85:
ee:72:d3:f3:ee:a1:23:a3:db:c1:c5:5d:13:ae:51:26:cb:46:
f5:34:5a:a5:90:8e:e2:ea:8f:32:7c:d2:3e:c6:f0:cb:24:05:
db:db:46:40:8d:40:f4:b8:74:35:a9:e1:47:0e:df:ac:53:d7:
77:91:d6:6d:24:f9:3f:d4:be:8d:c3:c4:c7:25:e3:40:67:43:
44:83:a6:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQRf7I6FEUJ7uHnFah7aMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm
MDhhZDgwHhcNMjUwNzI3MDUwMDM2WhcNMjUwNzI4MDUwMDM2WjAzMTEwLwYDVQQD
Eyg5OWNjYmMxNjQ5YzkxOGY1OTNjZDk5NGUwOWYxZWZkYjZmZTg5OWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR+U/qhA/A4AAYhuw2LtYtjWuOcJ
Xrl/kcEM1hlPakNfUoZathlixCIC0MaMZwiirqxr6Vmkj0chAfhrL9o6S45j4iIX
LJGU0J/nXIL0Ryl/U/lTZQ17KTi/jLj8fzmeYgknr8Jloc3EZchdodfHI63D9oeR
lJrIU/urR2mu6wcVujSflMbrNuExrG7YvvUgaLcex1bM2p3lyvz+jmAg7LSBjI2G
AEuZPC/zM5VTWCsGP3i1WoPESdu5jsFd3dWbD0SPlbM1rRHZmeOf9bjk9GVm1gWN
fr/d/aMrUDOe7gf1/c5Al2zg4uBzHIbFb8frKaglchNADvnjO6CcrV6vBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnMvBZJyRj1k82ZTgnx79tv6JnNMB8GA1UdIwQY
MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt
MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0
LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2EYNPZQ
B8CgvlLMWKZ8yBQdz/xUMQ66uPL+AttQRs8gXWzIuzx1jNqg1vRpUvPdVVhiExal
7SLGZwK3JlXO1vAfv9fsMoLHi6ZGLGp65bAItM0qCde2TqAyZz6Xi+X2ThRjMqPW
1tM7kCsRhzyEo1DJq63lIhC1soYn1yGwfWMVxKcXqp8HOBNu4rh1AXz+Jec4/CZL
1f3HCHudoB9sBwvIvlmn2voP01RcNrpb/8aPEeWF7nLT8+6hI6PbwcVdE65RJstG
9TRapZCO4uqPMnzSPsbwyyQF29tGQI1A9Lh0NanhRw7frFPXd5HWbST5P9S+jcPE
xyXjQGdDRIOmmw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:47 2025 by rpki-client