Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: xYI4KVVFcpuiilVU8CtTW1E59A1sOkvVUtZIqhYpp3A=
Subject key identifier: B3:CF:67:F1:52:3A:8E:B2:8E:87:01:4B:30:A2:15:48:22:AC:47:BB
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 0199239ED318B3D132DA162E280DD16DB0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0CC7
Signing time: Sun 07 Sep 2025 10:00:35 +0000
Manifest this update: Sun 07 Sep 2025 10:00:35 +0000
Manifest next update: Mon 08 Sep 2025 10:00:35 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: OHFV4lHXBThA28Wwdhxgq1DP7oaWl1DF2ZLIxjQwoAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d3:18:b3:d1:32:da:16:2e:28:0d:d1:6d:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Sep 7 10:00:35 2025 GMT
Not After : Sep 8 10:00:35 2025 GMT
Subject: CN=b3cf67f1523a8eb28e87014b30a2154822ac47bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:20:61:9d:c8:37:7c:5d:70:4f:2c:1d:6f:
2c:bc:4a:e1:5b:1f:e3:ca:5f:99:af:58:c0:bf:72:
62:c0:51:65:2e:77:e5:02:f8:dc:e8:f3:56:a6:85:
4e:55:53:67:b6:21:08:a8:69:4a:9d:07:df:21:15:
90:75:76:e9:2e:d4:94:89:b3:9c:cb:30:5d:dc:f7:
32:4f:f2:e1:ec:f3:50:a2:ad:f9:b8:3f:38:c5:ce:
02:e4:d7:e3:6e:48:fe:5a:d2:2a:a5:32:23:bf:df:
02:95:cf:04:f9:c3:a2:1f:21:9f:5a:a6:ee:27:23:
20:01:77:e6:b3:ec:22:c6:80:59:48:d7:ec:8d:14:
40:9b:50:ab:9a:91:ee:b8:72:bf:b1:09:3e:86:c0:
f7:7c:04:e6:25:02:e2:dc:06:94:e3:8f:cc:9f:53:
cf:e4:21:aa:39:d9:13:04:f9:93:c1:7f:94:cc:40:
7e:5f:c9:2a:f6:0b:8d:67:cf:a4:a0:ec:a8:48:5b:
19:08:1d:41:74:85:8d:e6:01:e4:ba:2c:89:45:32:
0c:d2:fd:b3:cb:7b:14:fa:c0:da:e7:6d:ed:4e:41:
15:f8:f3:d6:78:f1:e7:de:6d:50:18:46:79:a7:c3:
a4:5f:74:17:87:24:bb:b1:9b:a2:fe:7b:82:d8:23:
84:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:67:F1:52:3A:8E:B2:8E:87:01:4B:30:A2:15:48:22:AC:47:BB
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:22:7c:c8:8d:86:09:a3:32:d5:92:43:b9:5e:63:61:21:5f:
b6:ff:72:49:e1:be:35:32:e0:f6:04:60:07:9d:49:4e:05:e9:
9a:7a:7c:b4:16:d3:db:26:be:24:8f:e6:e0:2c:06:3f:f8:b9:
6f:07:00:17:ab:16:3d:3d:98:1e:24:a1:62:05:e4:e6:3f:f7:
d2:97:0d:4a:86:c3:71:06:16:df:2a:26:52:9e:40:9d:a6:b2:
04:8c:1e:d4:bf:5c:ee:c3:57:11:14:65:01:5a:c9:3c:d8:9e:
f3:65:e7:16:43:53:66:83:c7:ff:b6:eb:0b:bf:52:54:94:d1:
ef:70:6d:53:03:33:73:1d:0b:f9:8c:f8:1c:61:83:4f:e7:a1:
91:4c:ff:4f:b2:2b:cf:66:0f:f6:9a:63:0a:ee:ef:b5:f4:24:
cf:92:0b:39:75:2c:d2:b7:fc:cb:2d:27:61:bb:0d:aa:c1:31:
c2:a8:b4:ae:c6:4d:76:5c:ab:20:7b:21:e0:85:54:15:3f:87:
4d:0a:5b:6e:17:46:50:90:de:ec:73:b3:13:4f:c1:59:1b:90:
ac:2c:43:00:27:af:95:3f:02:4d:fb:6b:4b:b5:84:ac:d8:7c:
cb:05:27:5e:54:87:0a:14:13:e1:ea:be:b9:ee:d4:bc:6b:24:
ee:56:5d:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjntMYs9Ey2hYuKA3RbbCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj
MTc2M2IwHhcNMjUwOTA3MTAwMDM1WhcNMjUwOTA4MTAwMDM1WjAzMTEwLwYDVQQD
EyhiM2NmNjdmMTUyM2E4ZWIyOGU4NzAxNGIzMGEyMTU0ODIyYWM0N2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS8gYZ3IN3xdcE8sHW8svErhWx/j
yl+Zr1jAv3JiwFFlLnflAvjc6PNWpoVOVVNntiEIqGlKnQffIRWQdXbpLtSUibOc
yzBd3PcyT/Lh7PNQoq35uD84xc4C5Nfjbkj+WtIqpTIjv98Clc8E+cOiHyGfWqbu
JyMgAXfms+wixoBZSNfsjRRAm1CrmpHuuHK/sQk+hsD3fATmJQLi3AaU44/Mn1PP
5CGqOdkTBPmTwX+UzEB+X8kq9guNZ8+koOyoSFsZCB1BdIWN5gHkuiyJRTIM0v2z
y3sU+sDa523tTkEV+PPWePHn3m1QGEZ5p8OkX3QXhyS7sZui/nuC2COEaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPPZ/FSOo6yjocBSzCiFUgirEe7MB8GA1UdIwQY
MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt
ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0
LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiJ8yI2G
CaMy1ZJDuV5jYSFftv9ySeG+NTLg9gRgB51JTgXpmnp8tBbT2ya+JI/m4CwGP/i5
bwcAF6sWPT2YHiShYgXk5j/30pcNSobDcQYW3yomUp5AnaayBIwe1L9c7sNXERRl
AVrJPNie82XnFkNTZoPH/7brC79SVJTR73BtUwMzcx0L+Yz4HGGDT+ehkUz/T7Ir
z2YP9ppjCu7vtfQkz5ILOXUs0rf8yy0nYbsNqsExwqi0rsZNdlyrIHsh4IVUFT+H
TQpbbhdGUJDe7HOzE0/BWRuQrCxDACevlT8CTftrS7WErNh8ywUnXlSHChQT4eq+
ue7UvGsk7lZdEA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:37 2025 by rpki-client