Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: bo2jRL1zBo6q/q8ByXklyzzyzIffjLTi53YBUrndxpU=
Subject key identifier: 60:7A:AB:82:05:C0:9A:4F:8C:0A:94:43:68:5A:F5:EA:5F:42:19:E8
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 019921B128AB2FEF6C78EF4748F0B2F7435F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 046A
Signing time: Sun 07 Sep 2025 01:01:22 +0000
Manifest this update: Sun 07 Sep 2025 01:01:22 +0000
Manifest next update: Mon 08 Sep 2025 01:01:22 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: tqWzQyHZjVmVfMsQ13aFD/zSIn4MdMlU4XQ5roj36xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:28:ab:2f:ef:6c:78:ef:47:48:f0:b2:f7:43:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Sep 7 01:01:22 2025 GMT
Not After : Sep 8 01:01:22 2025 GMT
Subject: CN=607aab8205c09a4f8c0a9443685af5ea5f4219e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:b3:be:85:9c:a5:0c:ee:b9:26:87:df:1d:
8e:0e:f7:08:b6:4a:ae:97:5b:82:ee:ae:ba:8d:f8:
55:f1:96:7f:9c:87:5a:df:10:83:b3:de:4f:b2:2b:
3a:ae:29:a8:70:e5:52:a5:47:de:5d:52:34:f3:69:
00:06:4b:6e:42:a7:5c:09:ef:22:24:82:c5:ee:b0:
4b:04:d4:2d:30:63:92:8e:8c:a0:c9:08:54:38:6d:
d5:17:af:b3:e9:91:a4:47:13:73:62:ca:dc:ea:5a:
b8:0f:22:7c:b0:52:d9:89:57:ee:dd:f8:8e:58:b0:
b8:7a:16:90:04:3a:11:39:e8:35:3e:83:d3:35:b1:
2f:95:e8:9a:a8:2d:2e:cd:4d:26:08:59:82:fa:bb:
2a:12:87:ca:d2:a1:d6:7f:2e:7d:9a:0a:c7:ba:d4:
08:5e:e1:72:52:49:ef:ae:02:ee:11:5c:b5:59:9a:
0b:39:cd:c4:ef:06:31:a6:12:7f:d0:e6:64:50:c8:
8d:b6:1f:0c:e5:81:1c:e7:d7:9f:3b:55:de:32:2e:
db:72:da:ca:54:ee:45:8c:a3:7e:19:f8:a1:c9:3c:
b5:69:44:51:da:34:ae:d7:0b:d7:a2:c5:35:4b:4a:
65:72:d6:e8:a5:7e:3b:7f:7d:75:0b:71:8c:b1:0d:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7A:AB:82:05:C0:9A:4F:8C:0A:94:43:68:5A:F5:EA:5F:42:19:E8
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:36:e6:00:de:6a:69:23:7a:06:89:94:61:9b:24:ee:27:0f:
bb:ac:59:82:38:d2:d6:96:3a:a1:62:78:3d:32:71:47:84:3f:
bf:d6:4a:ea:99:9a:e5:66:4e:62:0d:13:62:0f:f5:39:2d:b6:
32:33:21:d3:5c:9a:99:f8:46:ce:1e:2f:19:89:ee:1f:c8:be:
a4:83:34:c7:a5:b2:23:fe:4b:01:24:88:9a:0a:fe:9b:8a:02:
3f:24:c9:4d:64:44:e1:86:b8:e2:c7:2c:21:b5:10:c2:7b:d5:
8d:be:5e:ba:62:5e:55:7f:00:c1:a6:1e:66:38:4c:6d:ed:45:
41:6d:a0:56:b2:b7:c6:84:99:a0:99:c4:73:fa:2a:f4:dc:b8:
73:3c:b7:da:38:96:84:61:6d:89:3f:2e:2d:62:47:1a:f4:f7:
39:d7:08:f9:95:0e:1a:a5:a4:30:27:32:59:1b:43:ec:e7:94:
ba:54:45:11:a3:97:43:8c:f9:83:39:3f:c8:0c:6c:f1:e1:3d:
14:25:93:0f:30:85:0a:3a:ec:4b:6e:b6:fc:fc:cc:ed:4c:37:
31:28:94:f3:31:ec:85:1c:0e:50:b8:9e:e0:16:7a:5a:76:5d:
0c:29:45:bb:16:50:75:dc:03:c2:60:fa:92:3e:2e:3c:7e:93:
f1:f7:97:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsSirL+9seO9HSPCy90NfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlODhhOWVkOTlhZDk3YWMzNzE3MTIxMjlmZTA1NGY2OTZk
YzU2N2QwHhcNMjUwOTA3MDEwMTIyWhcNMjUwOTA4MDEwMTIyWjAzMTEwLwYDVQQD
Eyg2MDdhYWI4MjA1YzA5YTRmOGMwYTk0NDM2ODVhZjVlYTVmNDIxOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1mzvoWcpQzuuSaH3x2ODvcItkqu
l1uC7q66jfhV8ZZ/nIda3xCDs95Psis6rimocOVSpUfeXVI082kABktuQqdcCe8i
JILF7rBLBNQtMGOSjoygyQhUOG3VF6+z6ZGkRxNzYsrc6lq4DyJ8sFLZiVfu3fiO
WLC4ehaQBDoROeg1PoPTNbEvleiaqC0uzU0mCFmC+rsqEofK0qHWfy59mgrHutQI
XuFyUknvrgLuEVy1WZoLOc3E7wYxphJ/0OZkUMiNth8M5YEc59efO1XeMi7bctrK
VO5FjKN+GfihyTy1aURR2jSu1wvXosU1S0plctbopX47f311C3GMsQ3CgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB6q4IFwJpPjAqUQ2ha9epfQhnoMB8GA1UdIwQY
MBaAFM6Iqe2ZrZesNxcSEp/gVPaW3FZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yN2YyYTctOGUyMC00ZmFkLWEyMDEt
MWM2ZjAzNWZiMjJjLzEvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yN2YyYTctOGUyMC00ZmFkLWEyMDEtMWM2ZjAzNWZiMjJj
LzEvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjbmAN5q
aSN6BomUYZsk7icPu6xZgjjS1pY6oWJ4PTJxR4Q/v9ZK6pma5WZOYg0TYg/1OS22
MjMh01yamfhGzh4vGYnuH8i+pIM0x6WyI/5LASSImgr+m4oCPyTJTWRE4Ya44scs
IbUQwnvVjb5eumJeVX8AwaYeZjhMbe1FQW2gVrK3xoSZoJnEc/oq9Ny4czy32jiW
hGFtiT8uLWJHGvT3OdcI+ZUOGqWkMCcyWRtD7OeUulRFEaOXQ4z5gzk/yAxs8eE9
FCWTDzCFCjrsS262/PzM7Uw3MSiU8zHshRwOULie4BZ6WnZdDClFuxZQddwDwmD6
kj4uPH6T8feXYQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:39 2025 by rpki-client