Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: LuRk8tnig195Z7Mi491MY77cBJLmLmTNNUzk1hwH4Lg=
Subject key identifier: CA:BB:7F:FF:C0:45:15:A0:30:92:81:C9:7F:66:EA:27:5C:96:BE:04
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 0199240D866DB8EC23F662D2DBFE6EB958A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 0A35
Signing time: Sun 07 Sep 2025 12:01:30 +0000
Manifest this update: Sun 07 Sep 2025 12:01:30 +0000
Manifest next update: Mon 08 Sep 2025 12:01:30 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: G4BKVKKZ066tH8q8hbv60fRMT3C2vF76N2NDiRVBfHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:86:6d:b8:ec:23:f6:62:d2:db:fe:6e:b9:58:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Sep 7 12:01:30 2025 GMT
Not After : Sep 8 12:01:30 2025 GMT
Subject: CN=cabb7fffc04515a0309281c97f66ea275c96be04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:6e:41:09:85:6f:53:5b:0e:ed:95:68:6c:
84:ec:fb:51:99:f7:ce:ad:26:78:aa:e2:45:9c:4b:
a9:75:f9:26:61:30:d1:01:cb:3a:5d:2c:c3:21:99:
65:a0:55:2e:95:6a:20:93:56:15:51:7f:44:ba:7c:
27:80:21:c0:4c:1c:63:62:df:3b:70:e2:94:4f:94:
c2:53:92:4a:90:38:cf:1b:1a:9a:98:e0:eb:f4:35:
2e:fc:f1:03:08:f4:7a:78:f0:f8:e9:08:cc:c9:0b:
28:84:e0:7a:ef:82:10:73:b8:7d:c0:88:1e:3b:82:
3a:d3:cf:17:48:b0:3d:39:ec:17:d8:3e:c3:57:87:
e2:88:57:8c:54:46:90:85:8c:05:e3:2c:5d:14:f9:
5c:e2:e7:5a:de:84:e3:9a:df:a7:bc:de:af:cf:b8:
14:7f:66:f7:9b:74:5a:94:fb:eb:e3:96:49:1b:87:
43:3b:22:f7:56:99:f4:8d:b6:26:91:7d:31:37:01:
71:bb:5c:3e:2e:6a:4e:ff:c8:90:ba:1e:82:c6:a1:
f0:a7:3c:0e:bf:dc:c7:c1:06:65:e4:43:59:8a:59:
0f:2c:c1:7f:0b:b5:7c:19:ae:a0:b7:ce:6e:b6:4d:
ea:28:7a:3e:7c:9a:59:80:93:67:5d:1e:3b:5e:9e:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BB:7F:FF:C0:45:15:A0:30:92:81:C9:7F:66:EA:27:5C:96:BE:04
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:27:1c:ac:28:8b:c7:3b:2c:44:d8:2c:aa:83:7d:ba:f4:03:
d2:3c:a9:a0:27:1d:51:84:28:60:82:c0:44:4b:92:18:75:90:
f6:65:dd:e1:e1:13:0d:12:be:d2:14:91:b0:54:a6:88:e3:be:
39:cc:f4:34:10:33:47:c4:15:a5:b1:0a:72:46:a2:f4:30:a0:
d6:cb:29:d5:84:df:99:8f:cc:f3:9e:4b:c3:86:77:37:57:76:
b2:d0:36:79:41:57:50:9d:ca:14:d2:ea:88:7e:35:d3:2f:e5:
5c:23:18:d4:5a:4f:89:d9:69:f2:f0:ff:da:6e:46:51:a5:ca:
5e:f1:8d:d8:58:88:99:5d:fb:40:24:e8:44:be:96:88:67:4a:
57:04:88:26:1a:c3:9f:66:04:ed:27:7c:f0:c1:4e:0b:dc:f6:
8d:a0:91:ca:36:83:4c:d2:ed:39:47:d8:6b:6b:8a:66:47:3f:
a8:4f:8d:ba:e6:d1:32:f3:c2:30:56:cb:36:ed:39:2f:89:4f:
a1:29:1f:aa:3d:3a:fa:68:b3:f6:6e:01:fe:14:0f:bf:66:a7:
f2:cd:06:9a:1f:0f:70:be:56:12:63:d1:23:e9:ad:5b:0a:24:
8e:7c:ad:28:92:d7:2d:87:6e:05:78:b9:8c:ce:7a:26:c7:37:
f5:59:9a:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDYZtuOwj9mLS2/5uuVijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NmEzYjVjMDkyNmYzYjQ1OTc5ODBkYTUwODk5YzI4ZWE2
YTZiZDkwHhcNMjUwOTA3MTIwMTMwWhcNMjUwOTA4MTIwMTMwWjAzMTEwLwYDVQQD
EyhjYWJiN2ZmZmMwNDUxNWEwMzA5MjgxYzk3ZjY2ZWEyNzVjOTZiZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI1uQQmFb1NbDu2VaGyE7PtRmffO
rSZ4quJFnEupdfkmYTDRAcs6XSzDIZlloFUulWogk1YVUX9EunwngCHATBxjYt87
cOKUT5TCU5JKkDjPGxqamODr9DUu/PEDCPR6ePD46QjMyQsohOB674IQc7h9wIge
O4I6088XSLA9OewX2D7DV4fiiFeMVEaQhYwF4yxdFPlc4uda3oTjmt+nvN6vz7gU
f2b3m3RalPvr45ZJG4dDOyL3Vpn0jbYmkX0xNwFxu1w+LmpO/8iQuh6CxqHwpzwO
v9zHwQZl5ENZilkPLMF/C7V8Ga6gt85utk3qKHo+fJpZgJNnXR47Xp4NGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq7f//ARRWgMJKByX9m6idclr4EMB8GA1UdIwQY
MBaAFGVqO1wJJvO0WXmA2lCJnCjqamvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgt
NGNkOGI0MzhmODE1LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgtNGNkOGI0MzhmODE1
LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSccrCiL
xzssRNgsqoN9uvQD0jypoCcdUYQoYILAREuSGHWQ9mXd4eETDRK+0hSRsFSmiOO+
Ocz0NBAzR8QVpbEKckai9DCg1ssp1YTfmY/M855Lw4Z3N1d2stA2eUFXUJ3KFNLq
iH410y/lXCMY1FpPidlp8vD/2m5GUaXKXvGN2FiImV37QCToRL6WiGdKVwSIJhrD
n2YE7Sd88MFOC9z2jaCRyjaDTNLtOUfYa2uKZkc/qE+NuubRMvPCMFbLNu05L4lP
oSkfqj06+miz9m4B/hQPv2an8s0Gmh8PcL5WEmPRI+mtWwokjnytKJLXLYduBXi5
jM56Jsc39VmajQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:41 2025 by rpki-client