Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
File: zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft (raw, json)
Hash identifier: 723/rH5ul+C2Gho+0yrEcRUifcJ3wBZhC3y6/sA3Jd8=
Subject key identifier: D9:BB:AB:DA:B9:9C:0F:8F:56:F1:A6:5E:23:A3:29:80:24:D7:DF:C5
Authority key identifier: CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
Certificate issuer: /CN=cda054474fafd90b0ea47c55765bbe6f37637531
Certificate serial: 01976CCF756F269EFBCEEBEEF9FC82FC86BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
Manifest number: 43
Signing time: Sat 14 Jun 2025 05:00:24 +0000
Manifest this update: Sat 14 Jun 2025 05:00:24 +0000
Manifest next update: Sun 15 Jun 2025 05:00:24 +0000
Files and hashes: 1: zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl (hash: 2qOzqBFA+PpIzyw28enfxXaZaB6bQ+NBpUMaGWoW1fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:75:6f:26:9e:fb:ce:eb:ee:f9:fc:82:fc:86:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda054474fafd90b0ea47c55765bbe6f37637531
Validity
Not Before: Jun 14 05:00:24 2025 GMT
Not After : Jun 15 05:00:24 2025 GMT
Subject: CN=d9bbabdab99c0f8f56f1a65e23a3298024d7dfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:68:68:76:8a:12:31:c1:3c:e3:a3:e0:11:
a2:69:be:0f:9a:62:3f:22:c7:f0:3c:d5:8c:5a:a5:
20:97:b9:e8:ac:42:eb:7f:5b:2f:c7:b8:80:70:06:
c3:b1:80:81:0d:85:67:ab:ee:7f:00:ca:cc:db:5f:
b2:b8:49:3e:44:45:ec:f7:72:f5:8a:37:85:28:9d:
33:03:78:b4:e2:df:43:c3:93:43:4f:58:77:24:cd:
37:bb:b8:91:16:34:43:4f:ad:b1:95:da:ee:f5:5a:
09:b6:19:2b:2d:37:c6:2f:d7:7d:d5:3c:c4:07:d7:
20:4f:f1:0c:33:01:2e:49:73:bf:1f:cf:b4:39:d7:
05:78:0f:12:e6:b4:f8:fd:5c:3f:56:e7:f1:1f:0a:
9f:00:93:c2:28:b7:ed:00:ac:bc:7a:48:ea:42:d2:
2f:c4:1b:b8:36:8a:2d:5d:1b:4e:cc:28:1e:49:70:
e9:53:e4:4c:32:1b:2f:1c:94:92:5f:fc:8a:51:5b:
40:83:6c:2c:46:e5:d6:07:9d:6e:3b:7f:62:93:49:
9f:5f:ca:06:6c:a1:80:e9:0a:69:c7:de:3b:69:a3:
1f:c0:c0:6e:7f:b7:c2:ae:e6:b7:77:fa:c0:b3:4b:
5e:87:d9:34:dc:13:bc:41:3a:92:17:35:33:98:19:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:AB:DA:B9:9C:0F:8F:56:F1:A6:5E:23:A3:29:80:24:D7:DF:C5
X509v3 Authority Key Identifier:
keyid:CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e4:ba:db:16:43:a5:3b:99:2c:84:6b:f3:20:37:53:06:8d:
b7:61:94:89:dd:1e:80:ad:93:b5:95:4b:1b:97:c4:94:1d:ec:
68:16:67:95:c6:1f:99:3b:bf:ec:68:82:7e:e4:a1:55:10:9b:
0d:19:8a:b8:47:64:44:97:27:f1:f8:6f:43:16:d8:46:dd:fe:
60:5d:4d:8e:bf:b9:16:80:0f:90:f5:a1:ca:b5:8d:00:d6:50:
d7:f6:93:47:e1:2f:68:2c:a8:f4:61:94:3e:c4:9b:42:96:70:
a1:77:4a:ac:7f:f2:d6:d7:71:9a:5c:4a:60:5a:5e:23:ab:be:
15:73:99:af:1e:ad:40:b1:6b:d4:ba:61:0f:cc:c0:b3:a1:3f:
ea:1c:35:05:cf:05:1c:37:74:90:1c:d3:05:7d:1a:0a:35:50:
15:f7:70:40:8d:7e:09:b1:8e:79:d7:a0:62:30:02:d2:c3:1f:
15:b2:d8:4b:5b:63:0f:d4:86:4e:85:58:e9:7c:e9:23:1e:9f:
5b:43:d7:32:f0:1b:b5:11:f1:3b:0a:4f:ac:ec:f9:24:96:d4:
72:a5:17:85:45:69:b1:67:1f:0c:08:ec:5f:74:a2:e7:14:5d:
10:e7:6c:23:50:39:0d:34:00:64:18:9a:c1:03:74:01:22:21:
d7:66:63:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz3VvJp77zuvu+fyC/Ia/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTA1NDQ3NGZhZmQ5MGIwZWE0N2M1NTc2NWJiZTZmMzc2
Mzc1MzEwHhcNMjUwNjE0MDUwMDI0WhcNMjUwNjE1MDUwMDI0WjAzMTEwLwYDVQQD
EyhkOWJiYWJkYWI5OWMwZjhmNTZmMWE2NWUyM2EzMjk4MDI0ZDdkZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT9oaHaKEjHBPOOj4BGiab4PmmI/
IsfwPNWMWqUgl7norELrf1svx7iAcAbDsYCBDYVnq+5/AMrM21+yuEk+REXs93L1
ijeFKJ0zA3i04t9Dw5NDT1h3JM03u7iRFjRDT62xldru9VoJthkrLTfGL9d91TzE
B9cgT/EMMwEuSXO/H8+0OdcFeA8S5rT4/Vw/VufxHwqfAJPCKLftAKy8ekjqQtIv
xBu4NootXRtOzCgeSXDpU+RMMhsvHJSSX/yKUVtAg2wsRuXWB51uO39ik0mfX8oG
bKGA6Qppx947aaMfwMBuf7fCrua3d/rAs0teh9k03BO8QTqSFzUzmBlN1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm7q9q5nA+PVvGmXiOjKYAk19/FMB8GA1UdIwQY
MBaAFM2gVEdPr9kLDqR8VXZbvm83Y3UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYWM5MDQtMjgwMi00MzZlLWFiNDAt
ODEzN2M1Mjk5YWVlLzEvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iYWM5MDQtMjgwMi00MzZlLWFiNDAtODEzN2M1Mjk5YWVl
LzEvemFCVVIwLXYyUXNPcEh4VmRsdS1iemRqZFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOS62xZD
pTuZLIRr8yA3UwaNt2GUid0egK2TtZVLG5fElB3saBZnlcYfmTu/7GiCfuShVRCb
DRmKuEdkRJcn8fhvQxbYRt3+YF1Njr+5FoAPkPWhyrWNANZQ1/aTR+EvaCyo9GGU
PsSbQpZwoXdKrH/y1tdxmlxKYFpeI6u+FXOZrx6tQLFr1LphD8zAs6E/6hw1Bc8F
HDd0kBzTBX0aCjVQFfdwQI1+CbGOedegYjAC0sMfFbLYS1tjD9SGToVY6XzpIx6f
W0PXMvAbtRHxOwpPrOz5JJbUcqUXhUVpsWcfDAjsX3Si5xRdEOdsI1A5DTQAZBia
wQN0ASIh12Zj1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:25 2025 by rpki-client