Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier: Gdj3RGwjwQLUgI6Za9asd+gj++iz/4PT51jAqAaxDLc=
Subject key identifier: AC:34:79:C7:76:70:56:38:94:B4:17:E6:22:9E:3B:21:91:0A:E9:71
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial: 0198D65FBE1B8AA95D34311652BA1311E802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number: 10F8
Signing time: Sat 23 Aug 2025 10:00:55 +0000
Manifest this update: Sat 23 Aug 2025 10:00:55 +0000
Manifest next update: Sun 24 Aug 2025 10:00:55 +0000
Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: pcqSylPk43OWEI/5tB2AwP6S47sRF0gsTUQAu3+4kVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:be:1b:8a:a9:5d:34:31:16:52:ba:13:11:e8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Validity
Not Before: Aug 23 10:00:55 2025 GMT
Not After : Aug 24 10:00:55 2025 GMT
Subject: CN=ac3479c77670563894b417e6229e3b21910ae971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:fb:fc:be:b1:19:0c:5f:d1:ab:8c:3e:d8:
6d:1c:cc:a2:98:2e:a5:43:81:9f:c6:0b:3e:f1:6f:
1c:9b:49:79:a0:b7:04:bc:13:c6:7a:1f:4f:06:aa:
aa:81:a2:f8:3a:a8:c4:86:cc:33:b6:e7:99:35:7d:
36:0b:f3:bf:0e:07:29:68:e7:f5:3b:09:dc:ee:3b:
c2:8e:6d:ec:77:3b:e2:8a:05:30:d9:3b:59:02:a3:
f2:8f:9d:0e:10:e9:2a:d0:a6:2d:9f:78:9c:07:7c:
c4:b1:ff:40:71:b0:6a:52:08:d4:5f:65:4e:90:63:
5e:a8:28:2c:1b:e0:aa:58:7e:91:9a:5d:52:63:10:
44:5d:fd:c0:68:18:dc:7f:76:24:e9:35:66:fb:6a:
4a:2c:2f:4d:50:a6:32:54:55:be:af:99:f4:84:b5:
4c:a4:ff:ee:93:53:b1:92:6c:12:1a:cf:5d:d9:50:
54:f8:fd:87:e7:a3:0b:97:5a:c2:e3:6d:ca:5b:04:
e3:0d:fa:69:5b:e7:76:5a:89:00:bd:a9:0e:eb:72:
f6:3d:92:4b:78:7b:2f:c9:52:00:f8:c8:51:8d:be:
fd:3f:7a:15:04:40:38:d5:f8:b9:db:e3:f3:48:9b:
f9:4c:db:f1:ab:64:79:6a:d4:18:fb:86:59:a8:38:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:34:79:C7:76:70:56:38:94:B4:17:E6:22:9E:3B:21:91:0A:E9:71
X509v3 Authority Key Identifier:
keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:87:57:ef:4d:2e:76:58:8e:77:b2:11:08:bf:67:0d:4d:27:
4f:a1:43:f9:d2:78:71:02:8f:79:f9:2f:77:30:f8:62:d7:bd:
85:a7:bb:a7:6b:c9:a3:8a:24:91:f5:9f:c7:bc:c3:29:9d:65:
7b:0c:34:4e:cf:65:69:31:6d:71:39:35:3a:42:cc:6b:73:c8:
f6:06:06:77:61:42:81:e8:a1:e3:38:ed:6a:de:49:81:27:9b:
2f:be:bf:7c:1a:25:c6:b8:45:1f:25:89:f4:27:e6:e1:f6:85:
f3:d6:b4:08:4c:cf:63:4b:6f:84:5b:1c:f4:26:bd:81:e9:71:
60:98:b5:ee:a4:e8:14:53:a0:98:db:2c:35:ee:c3:de:29:a3:
91:95:e9:eb:cc:f6:2c:c3:24:33:f1:ee:89:82:ff:5f:31:12:
c1:9f:d7:86:53:39:db:c5:a6:9a:78:a7:94:87:d0:dd:3b:ca:
1c:ca:44:10:5b:9c:7b:73:60:a6:1f:9b:4b:5f:e1:d8:40:6e:
7f:d7:5c:14:00:c0:bc:b3:7d:0d:38:fd:b7:4a:5f:98:bf:d7:
77:6a:c0:31:54:42:3b:78:d9:34:f1:68:c3:d6:8b:10:83:41:
63:0a:b4:21:1b:1d:6f:01:db:12:16:07:7f:16:f4:6d:7f:e7:
85:79:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:57 2025 by rpki-client