Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier: cjy1HlH1SC0A5sqzKx5wCM5TreS9LmtSbhE5jqtJtUs=
Subject key identifier: E8:10:B3:21:BC:6D:69:C4:05:F6:A4:E6:0D:87:3A:A4:87:A2:B0:5B
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial: 0198D472E4A33C28022B69AD3604756D3179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number: 0B3D
Signing time: Sat 23 Aug 2025 01:02:35 +0000
Manifest this update: Sat 23 Aug 2025 01:02:35 +0000
Manifest next update: Sun 24 Aug 2025 01:02:35 +0000
Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: hd0gTh/vnBtZnp0OFUCh/XTDoTOl8dczeCFDIKZyjUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e4:a3:3c:28:02:2b:69:ad:36:04:75:6d:31:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Validity
Not Before: Aug 23 01:02:35 2025 GMT
Not After : Aug 24 01:02:35 2025 GMT
Subject: CN=e810b321bc6d69c405f6a4e60d873aa487a2b05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:3d:3c:06:be:45:5f:09:43:bf:ba:91:e9:
2d:b7:7a:c0:b1:51:01:73:7c:c9:3a:a0:80:58:1b:
25:22:cb:1d:99:ec:9d:4f:de:dc:cc:9b:fc:55:9c:
2b:16:1b:c2:4b:98:66:66:bd:dd:0c:46:ce:02:33:
0f:39:8b:66:dc:14:14:19:7e:84:fb:a9:e8:4f:98:
14:a3:93:3f:7d:fb:ba:4b:dc:0e:38:c8:9f:e7:b4:
ba:21:26:e4:a3:dc:ef:65:47:5d:a9:80:de:75:55:
f5:3c:0c:af:24:29:b5:f6:dc:38:6d:37:dc:61:8e:
f5:1e:b3:9e:66:9d:22:1d:8b:36:ad:2c:cd:bf:3d:
e2:a7:b1:47:86:af:dc:d8:80:c6:5e:7d:25:b9:21:
43:d2:49:38:f2:42:00:15:6e:60:17:cf:21:23:e4:
2f:ed:f7:a4:51:ff:4f:a2:65:95:b0:c1:5d:36:a5:
cb:b1:6a:c2:1d:d7:66:d9:c9:b9:f9:9e:d6:b6:dd:
b3:94:5d:a4:ed:98:88:21:51:ea:d7:1c:ba:99:13:
ec:8a:cf:81:ee:89:67:fb:fc:d6:b7:9e:b6:3b:d3:
99:63:68:88:dc:5b:dd:68:ea:fb:62:be:18:cd:ba:
8c:6e:64:4e:0b:d0:5c:79:6e:a2:22:a3:24:8f:24:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:B3:21:BC:6D:69:C4:05:F6:A4:E6:0D:87:3A:A4:87:A2:B0:5B
X509v3 Authority Key Identifier:
keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5f:ce:a4:aa:a1:f0:2e:b8:dd:48:5d:b7:e0:32:94:3b:f1:
fd:a3:27:dd:b1:91:cd:b0:0b:9e:2c:ee:93:9e:ec:a3:d7:24:
3f:f9:c2:b5:74:2c:d2:7b:b1:f2:a5:8c:52:c2:be:94:dc:3d:
55:84:17:67:09:c3:cb:93:99:38:ca:c3:5c:c0:4a:b8:0b:57:
48:0d:02:59:1d:00:df:24:a6:75:c4:2e:b2:22:01:54:84:80:
4f:75:32:26:32:12:4e:96:5c:2b:1b:e8:b5:c9:03:00:4e:ec:
30:bf:47:9d:09:42:dd:a3:9d:f4:eb:ff:a0:07:40:b5:ad:03:
29:a6:ca:86:f3:20:2c:b4:6a:07:3a:c6:40:da:f5:9f:7d:3f:
50:c1:80:0f:24:36:34:f1:bd:48:85:57:a0:69:34:61:9c:9f:
c2:63:13:d6:98:08:a6:0f:8d:96:1c:aa:27:c3:2c:0c:4c:51:
6f:8a:af:8f:31:18:77:86:1e:f1:4f:48:8d:47:c8:be:0e:69:
13:1d:ab:88:5a:0e:52:ae:ad:a0:d9:23:25:5a:b3:d6:6d:3f:
8e:dd:60:8b:9b:e9:ff:e1:ca:f6:d5:91:f0:da:34:26:25:be:
ed:68:d0:c2:92:d6:0e:b4:4e:99:ef:b2:16:f1:20:c8:3e:ec:
79:f0:46:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:05 2025 by rpki-client