Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: RNPiCPGQMUM5ZNDnkr5w5/BT3X2XwjGDr7gwtKK2NOc=
Subject key identifier: 68:01:9D:98:DD:7B:B1:2C:2B:23:60:47:50:A2:E6:4A:3A:5C:7A:52
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 0198D4A7EFA1558371A70970CF9A78A9E822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0C96
Signing time: Sat 23 Aug 2025 02:00:32 +0000
Manifest this update: Sat 23 Aug 2025 02:00:32 +0000
Manifest next update: Sun 24 Aug 2025 02:00:32 +0000
Files and hashes: 1: 6uraY0RUo083dp6VRDIhaMr-XOw.roa (hash: 84hQ/Wr95yt1TasjhyzEMQBsJDQIG0TsCg+7NafRezY=)
2: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: 3lF3Tvj7CVN8DenbbeZl783flP0CoE858KpZFNRZxOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ef:a1:55:83:71:a7:09:70:cf:9a:78:a9:e8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Aug 23 02:00:32 2025 GMT
Not After : Aug 24 02:00:32 2025 GMT
Subject: CN=68019d98dd7bb12c2b23604750a2e64a3a5c7a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:88:06:bd:1e:53:33:17:44:3b:42:4f:e5:
74:25:e9:8c:10:d8:b8:27:3a:39:1b:6f:35:59:f7:
f7:83:84:32:d0:8b:70:93:83:8c:ae:ba:93:11:c1:
a1:46:c3:92:63:17:cf:6b:9c:3c:02:66:0f:b5:3d:
4e:f2:fc:4d:12:c1:46:04:f9:2d:2d:53:2e:c6:95:
0f:60:de:01:db:b1:74:ff:ac:f1:ae:b0:9d:1a:92:
16:83:79:be:99:f3:d1:1c:bf:03:b2:55:b9:da:e3:
f3:64:95:a1:93:c8:89:79:98:7f:da:07:60:78:76:
38:c0:1b:73:9a:02:1b:f7:c7:9e:2e:52:c0:3e:8f:
c5:f8:96:e6:64:4f:36:17:41:47:f0:1a:08:34:52:
3f:c3:62:09:93:78:14:3d:d1:95:6c:ca:b9:0b:5a:
ac:91:a4:61:92:58:96:4d:61:b8:7e:3c:42:6b:98:
70:d5:d5:4b:45:94:88:8a:45:cc:53:e6:9a:08:90:
c7:71:40:b5:8c:ca:f9:d3:bd:64:b7:eb:94:a5:69:
2a:db:8a:d6:78:eb:ce:96:1a:c8:0d:a2:25:cb:2e:
82:69:17:92:b1:8f:a6:26:57:3e:91:e6:00:d7:7d:
b3:df:ee:a8:24:0a:9d:2d:eb:92:3d:a9:02:d3:5e:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:9D:98:DD:7B:B1:2C:2B:23:60:47:50:A2:E6:4A:3A:5C:7A:52
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:48:f0:b4:db:98:35:e9:e8:67:34:e9:b7:6a:61:ec:76:ef:
12:de:4b:2b:8c:21:ab:83:17:10:19:2b:2b:69:3b:9d:6b:ed:
9b:8d:6f:e1:9f:d4:59:88:72:e7:92:43:3b:1b:71:73:29:f3:
d6:de:b8:4c:fc:8d:1a:ae:fb:06:0a:5d:34:d3:49:ce:62:d0:
a8:e5:3a:5d:12:99:f3:7b:4a:eb:8c:98:c9:af:4a:aa:57:12:
0b:ff:11:21:5e:a3:9e:b5:c4:c6:43:fd:73:b3:11:c8:81:06:
5e:40:c3:8c:6c:85:2c:05:99:14:1e:73:3b:d1:91:1b:d3:a5:
41:af:84:97:19:39:71:c6:b1:48:de:37:27:15:52:03:6a:a6:
43:49:43:86:5d:44:06:cf:ac:7d:43:05:c6:e6:d0:70:04:9d:
e8:ba:d0:f6:e2:37:bd:ec:84:bb:df:a7:5a:39:32:31:18:3a:
c8:3b:9c:55:7d:b8:cd:74:2f:b5:52:71:3c:e8:a0:7f:59:c5:
57:47:0d:4e:6d:2f:fe:cf:d3:26:00:3a:f2:9d:76:73:12:8a:
f8:52:11:86:aa:53:5a:ca:80:bb:f1:66:86:5f:28:fc:2c:7a:
b3:a8:46:b8:b9:a9:7a:69:68:13:04:e6:de:94:52:e7:f3:cc:
d1:61:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:07 2025 by rpki-client