Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: JGjOm6Is4M9LXIhdRsBD/Xs+iJ8wel95+KyRdZ5P7nQ=
Subject key identifier: FE:C2:28:EC:51:A7:AF:51:23:B6:FF:8E:99:C5:15:D2:E9:E9:B0:52
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 0198D4E0F7FC4D772B479E643D6A13A2EE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 1309
Signing time: Sat 23 Aug 2025 03:02:49 +0000
Manifest this update: Sat 23 Aug 2025 03:02:49 +0000
Manifest next update: Sun 24 Aug 2025 03:02:49 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: PGJRuq6f+tAmAHZ/LFuz9VBYhBBlxzcTgeeeKJSUWZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:f7:fc:4d:77:2b:47:9e:64:3d:6a:13:a2:ee:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Aug 23 03:02:49 2025 GMT
Not After : Aug 24 03:02:49 2025 GMT
Subject: CN=fec228ec51a7af5123b6ff8e99c515d2e9e9b052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:20:3d:1b:49:21:7a:40:a2:26:eb:3c:d3:
93:c3:ea:f0:ee:52:0f:75:f4:45:64:d0:6f:bc:2b:
1a:95:7a:7e:d7:d6:55:68:63:64:46:bf:1d:dd:e0:
f5:76:cf:f2:f5:46:e1:50:57:b4:fa:a0:48:f3:20:
d1:fd:04:e4:17:a3:8a:92:a4:62:35:4c:46:48:ec:
fe:a8:23:f9:00:59:e7:06:ee:e1:c7:2e:f2:a7:e6:
de:e7:3d:cf:cb:b1:03:88:ab:f4:ac:82:e4:65:05:
47:99:4e:9e:ff:cc:a4:15:43:1a:49:60:bb:4d:10:
8e:56:03:8d:91:42:f7:71:96:e5:c8:48:3f:4f:87:
85:68:d7:b8:32:ce:9d:c7:98:98:39:db:ff:52:2b:
6e:7f:87:66:7c:0e:96:49:27:b9:c8:30:d2:f8:54:
c3:3b:6d:a3:34:a9:a5:77:c2:20:f6:8f:63:4c:28:
4c:82:78:31:3b:2d:7c:52:ca:e7:50:b2:b0:4a:61:
f2:35:18:4c:ac:43:c4:6a:29:f2:f5:02:1f:79:8a:
22:ca:33:f5:db:f1:bb:b1:dc:53:1c:13:ca:73:c0:
a2:c7:c4:e2:0d:3b:51:d4:db:13:19:95:ef:8f:ac:
d8:5e:01:42:51:19:48:0d:34:9c:ca:53:19:7f:9e:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:28:EC:51:A7:AF:51:23:B6:FF:8E:99:C5:15:D2:E9:E9:B0:52
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bb:d4:ff:7d:1a:1a:b0:91:cb:25:97:80:12:3d:37:58:2b:
90:7d:8d:73:db:9e:c6:51:2c:95:ff:54:fd:2a:ac:9d:15:e6:
1d:1c:c7:31:1a:1b:44:a9:91:1e:60:ed:f1:0c:0d:c3:bf:f2:
55:7f:2b:f8:12:d6:ce:fd:19:cd:2b:85:fe:23:09:af:1d:a0:
d0:bd:20:6d:29:8c:2b:a1:ae:d7:38:90:b0:61:a7:a3:2b:76:
e8:09:5d:54:98:7f:36:93:e4:dc:19:e5:2d:8c:85:ce:7d:86:
19:10:c9:ef:20:49:0e:63:d4:2b:38:1f:50:84:1e:b2:a4:11:
32:38:7d:15:3e:9e:a0:09:cc:fd:35:29:75:5c:5c:5b:ab:a3:
f2:56:e2:a2:47:e5:2f:36:70:37:74:ca:7d:02:ba:3b:8b:a5:
fc:85:f1:58:de:59:7e:0d:4d:43:98:c2:e0:37:11:ec:8d:3b:
49:5d:b7:d1:d8:78:46:e5:b2:31:3f:71:75:3f:0d:37:14:fd:
7a:9c:50:06:0c:74:74:28:ec:9b:70:65:aa:d3:53:d4:f1:f3:
48:dd:46:99:88:67:70:a0:e9:31:1e:e1:40:cf:90:30:ac:1c:
cf:58:5f:f1:ea:b5:14:1c:78:d3:6c:a4:65:d5:92:4f:54:8a:
60:f7:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:23 2025 by rpki-client