Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
File: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft (raw, json)
Hash identifier: F8WISckWptKd3Gvi8YD4YaXCCr/yIopHstSgh9odQKE=
Subject key identifier: 92:CA:1E:82:EC:98:A2:65:7A:54:14:D0:28:F2:00:FE:33:3B:55:90
Authority key identifier: 66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
Certificate issuer: /CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Certificate serial: 0197B6D761DFC5B0F3C83FFDB8ED8D180340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
Manifest number: 86
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl (hash: vBASEWXwIUqdEVmeLY7V14RqlKegVtYBCaBed1N9y58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:61:df:c5:b0:f3:c8:3f:fd:b8:ed:8d:18:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=92ca1e82ec98a2657a5414d028f200fe333b5590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:1e:b6:99:f7:b0:6b:66:45:d9:10:48:2c:
aa:e7:4f:d3:db:62:fe:45:57:03:43:bd:63:af:0f:
f4:33:8e:f2:93:b3:bb:52:2d:33:2a:16:5c:7f:6b:
43:eb:be:40:64:46:fa:fa:17:45:07:ce:af:5b:60:
7d:89:6e:50:43:b4:a5:3b:91:ad:83:47:38:19:b3:
4f:f8:f7:f4:88:d1:94:a8:c7:db:78:3f:bc:12:5e:
19:06:ff:b3:1a:9d:c7:ac:08:51:3e:2b:d2:7d:f8:
a5:d9:e7:40:00:73:38:9c:1c:72:26:17:81:cb:a3:
68:6d:40:49:95:ac:68:a9:0d:2c:f6:5d:d2:1b:57:
41:e8:4a:8b:2b:58:ac:1d:87:b8:28:17:0a:45:f7:
1f:57:e1:65:b7:cd:01:ea:35:b3:70:5d:03:f0:37:
24:04:13:f9:de:62:15:db:43:37:47:3f:7d:bb:9a:
78:d4:cf:5b:b9:55:74:f8:6a:40:60:93:8a:a8:ef:
41:9e:b2:cd:3a:b5:62:0b:d4:4a:12:74:f5:c4:86:
02:3f:a7:4b:6e:d3:40:e9:e5:64:92:78:42:8b:44:
57:dd:02:cc:bd:20:7a:0b:1f:34:b6:f8:f9:f1:84:
8a:6f:10:60:cc:e0:96:90:c4:b4:a4:10:7f:f9:85:
c3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:1E:82:EC:98:A2:65:7A:54:14:D0:28:F2:00:FE:33:3B:55:90
X509v3 Authority Key Identifier:
keyid:66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8c:d7:a8:3f:5d:c5:da:8a:b2:2f:4a:e7:fa:73:a0:84:7a:
e4:29:b5:d3:c9:40:7c:76:82:ea:db:7a:67:3a:b6:61:39:8c:
42:88:c2:2c:f8:2f:0f:e9:82:a0:96:72:08:2f:a7:e2:ea:29:
aa:0c:f3:f8:d2:d7:1c:b9:ac:9f:ef:14:84:67:86:64:57:4d:
5b:78:fa:8f:86:39:76:e2:20:72:4e:0c:d7:33:21:15:73:15:
b6:1d:70:0f:1f:8f:bc:d8:8d:a3:1d:93:3c:64:71:66:ca:fd:
84:e2:20:48:6a:e4:60:33:33:7f:cc:64:34:11:6d:01:24:e6:
92:3e:f1:f3:d8:9c:64:3b:c4:d6:da:b9:c1:7f:1c:b8:da:9e:
53:8b:00:17:84:2d:65:ce:fe:cd:3c:1e:ad:72:c4:f9:65:f0:
fe:82:91:04:96:28:50:38:4f:92:34:85:a8:38:a9:54:14:05:
4a:37:40:70:c5:1c:17:d6:77:f7:e6:54:43:78:35:a6:24:1b:
a5:a4:48:94:66:63:d6:ff:6e:14:c6:94:21:f0:51:2a:a8:d7:
f9:1a:8f:c4:7f:ee:95:bd:eb:46:fb:35:bf:37:18:2b:b7:83:
5b:dd:ea:cb:a6:6a:e3:34:8c:c2:19:84:6a:ac:0e:4e:ba:3b:
2b:2d:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:35 2025 by rpki-client