Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier: rgfqagOWknQT3OjMMRocKa++VqTV/TWqTX10vBPcoFA=
Subject key identifier: 9B:A2:08:B3:96:A0:BC:D0:E3:F8:5F:26:43:45:41:5C:C4:26:CE:43
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial: 019923A0E2BF620AD0B8599D339B4274ED48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:02:50 +0000
Manifest this update: Sun 07 Sep 2025 10:02:50 +0000
Manifest next update: Mon 08 Sep 2025 10:02:50 +0000
Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: RJObFdXroUC/kjBi7ItBbUukyxbY88sxKCjfvbqe00Y=)
2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e2:bf:62:0a:d0:b8:59:9d:33:9b:42:74:ed:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Validity
Not Before: Sep 7 10:02:50 2025 GMT
Not After : Sep 8 10:02:50 2025 GMT
Subject: CN=9ba208b396a0bcd0e3f85f264345415cc426ce43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:64:85:de:58:a4:5e:8a:74:dc:8c:63:b6:
25:b3:22:f6:2b:81:bb:0e:fe:89:61:ea:51:fb:55:
f8:ab:55:b6:09:f8:a0:a4:d3:c4:4d:3f:5d:a3:db:
1b:13:7d:91:c8:89:50:35:66:80:93:c1:4e:fe:a3:
7e:64:c7:cb:b1:fa:52:49:27:1f:77:26:a2:60:ba:
3e:2e:8f:1d:cd:7f:90:77:2c:03:30:5a:da:85:2e:
67:5d:9b:12:18:67:77:01:2a:e4:c9:ed:de:ad:3c:
2a:ee:dc:a2:1f:e6:74:b4:09:b0:05:0a:70:86:28:
f3:50:af:dd:21:3e:99:aa:95:9a:ee:67:fe:6b:fb:
a3:f2:27:c6:45:5e:29:6c:17:b2:df:b6:1b:0a:f2:
2c:db:56:8d:e1:5f:bd:79:20:32:ad:35:61:cc:f4:
a4:40:5a:b1:2c:32:16:b5:fe:ad:7b:10:92:2e:a3:
9a:0a:7d:b4:9f:4d:3f:aa:53:58:3f:74:45:33:31:
43:2e:20:d1:e9:f6:d7:61:65:30:bd:36:94:a4:8f:
3e:2b:53:db:f2:f9:bc:43:4f:8a:a8:29:2f:d7:98:
e5:ff:c3:86:70:43:75:02:67:7c:4f:4a:d0:c1:f3:
9c:c7:d7:fa:20:fb:5d:f7:07:ba:df:0d:f4:3b:11:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A2:08:B3:96:A0:BC:D0:E3:F8:5F:26:43:45:41:5C:C4:26:CE:43
X509v3 Authority Key Identifier:
keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:fc:9b:e1:f0:4b:c6:84:87:3c:b9:a5:f3:4d:ef:30:dd:
f9:60:34:21:a0:06:56:56:54:7c:3b:2f:49:ab:e2:82:98:d6:
78:48:fc:24:40:9b:3c:0d:6f:bc:3d:de:fb:91:39:a0:bf:9e:
66:b2:36:5d:e4:03:9f:f0:29:ed:23:35:d2:b4:c9:e3:f5:34:
e6:b5:e5:2f:24:cc:91:f5:93:01:82:0f:a7:c8:43:2a:55:4c:
3b:35:99:0c:b1:70:d0:cb:73:22:84:29:74:94:b8:03:f8:8a:
4c:b6:db:5e:3b:07:6a:ee:72:4f:48:fb:60:d6:bd:9f:60:97:
90:d1:81:c3:e0:94:f4:ae:02:2d:64:54:e0:16:3a:99:e0:78:
69:02:96:bd:d3:c1:56:71:25:a0:9e:55:68:49:1e:f9:31:3e:
19:74:b6:d2:b1:88:23:23:b8:a9:94:c1:96:07:d0:29:3e:26:
09:42:b2:7d:03:45:82:e4:a8:cb:5c:57:3a:07:6c:22:a9:95:
ef:b6:99:31:8d:92:18:99:5e:cd:5e:65:71:b9:57:5e:19:0f:
de:fe:a3:9f:bc:f3:95:e5:45:1a:e6:2d:b1:18:94:9a:5e:f5:
cb:ef:29:6c:a9:72:6f:ca:6f:98:b5:f4:b5:66:c5:49:ae:cf:
41:c5:b9:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoOK/YgrQuFmdM5tCdO1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzUzZDIwYjk4YTBlZTc3MGMzYjUxNjZhM2Y0YTA3ZjA1
MTViZGQwHhcNMjUwOTA3MTAwMjUwWhcNMjUwOTA4MTAwMjUwWjAzMTEwLwYDVQQD
Eyg5YmEyMDhiMzk2YTBiY2QwZTNmODVmMjY0MzQ1NDE1Y2M0MjZjZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzblkhd5YpF6KdNyMY7YlsyL2K4G7
Dv6JYepR+1X4q1W2CfigpNPETT9do9sbE32RyIlQNWaAk8FO/qN+ZMfLsfpSSScf
dyaiYLo+Lo8dzX+QdywDMFrahS5nXZsSGGd3ASrkye3erTwq7tyiH+Z0tAmwBQpw
hijzUK/dIT6ZqpWa7mf+a/uj8ifGRV4pbBey37YbCvIs21aN4V+9eSAyrTVhzPSk
QFqxLDIWtf6texCSLqOaCn20n00/qlNYP3RFMzFDLiDR6fbXYWUwvTaUpI8+K1Pb
8vm8Q0+KqCkv15jl/8OGcEN1Amd8T0rQwfOcx9f6IPtd9we63w30OxEsKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuiCLOWoLzQ4/hfJkNFQVzEJs5DMB8GA1UdIwQY
MBaAFGR1PSC5ig7ncMO1Fmo/SgfwUVvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1Yjgt
YWE5OTU5MDJiODRiLzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1YjgtYWE5OTU5MDJiODRi
LzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORD8m+Hw
S8aEhzy5pfNN7zDd+WA0IaAGVlZUfDsvSavigpjWeEj8JECbPA1vvD3e+5E5oL+e
ZrI2XeQDn/Ap7SM10rTJ4/U05rXlLyTMkfWTAYIPp8hDKlVMOzWZDLFw0MtzIoQp
dJS4A/iKTLbbXjsHau5yT0j7YNa9n2CXkNGBw+CU9K4CLWRU4BY6meB4aQKWvdPB
VnEloJ5VaEke+TE+GXS20rGIIyO4qZTBlgfQKT4mCUKyfQNFguSoy1xXOgdsIqmV
77aZMY2SGJlezV5lcblXXhkP3v6jn7zzleVFGuYtsRiUml71y+8pbKlyb8pvmLX0
tWbFSa7PQcW5gQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:06 2025 by rpki-client