Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File: Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier: FFSP8nZ3gQ5P+dw3+PzXkXHOdsnRQoWtUykxMwwTx2A=
Subject key identifier: 97:46:86:FB:47:FA:7C:04:39:0C:DB:15:D0:2B:C6:87:97:74:11:3D
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 0198D6613981B1632A397AB01C1CA5798746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number: 0D34
Signing time: Sat 23 Aug 2025 10:02:32 +0000
Manifest this update: Sat 23 Aug 2025 10:02:32 +0000
Manifest next update: Sun 24 Aug 2025 10:02:32 +0000
Files and hashes: 1: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: +cr6WRJyaquHDLjIuWfO1K0Cg4E1BDOMez2qKwlpwn8=)
2: g-_eT5ct7bDp65zymgf5llHzTKc.roa (hash: 6qrqxL/Wtd1D30D40m2/VyQoFXL4FQNDdMtRsZ56brc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:39:81:b1:63:2a:39:7a:b0:1c:1c:a5:79:87:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Aug 23 10:02:32 2025 GMT
Not After : Aug 24 10:02:32 2025 GMT
Subject: CN=974686fb47fa7c04390cdb15d02bc6879774113d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:af:c4:f0:90:28:86:6c:36:ff:e5:02:68:
dc:f0:42:4b:41:b1:b0:4f:ec:d2:dd:01:f1:40:f6:
7e:51:92:4a:ef:4c:66:55:e8:58:27:e2:6b:9d:d3:
4f:c5:17:f1:6f:55:36:c2:33:bf:19:da:c7:4f:46:
e6:1c:b3:0b:fd:cc:d1:e7:82:4c:30:82:85:80:46:
f1:42:24:2b:8d:04:bb:05:c7:17:2f:03:49:b3:69:
06:3b:0c:8e:20:71:cf:c4:3a:5c:6c:8c:f2:e7:0d:
44:26:bb:ec:73:8d:29:7d:a7:6d:0a:23:cc:09:d7:
68:bc:40:d4:80:33:83:4e:2d:1f:7a:32:d2:17:87:
87:cd:7d:ff:57:42:aa:0f:45:a7:37:e9:d0:9d:75:
8a:b0:33:2e:8d:19:f8:d6:2b:aa:4e:69:3d:90:1b:
0f:60:1c:0b:db:fe:58:1f:a2:1a:7e:6c:61:e6:63:
f5:92:a9:5c:39:20:e7:d0:64:a1:dc:40:33:49:03:
d2:3a:3a:3c:20:11:3d:4f:54:ca:47:99:00:5f:60:
88:97:e7:64:c9:3e:ab:9e:66:1b:fb:0e:16:1f:87:
b9:45:54:15:12:af:76:66:d6:3a:3e:a5:20:67:02:
f7:55:f4:ab:6b:50:28:d3:a1:85:3a:e0:42:59:08:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:46:86:FB:47:FA:7C:04:39:0C:DB:15:D0:2B:C6:87:97:74:11:3D
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:30:aa:7b:c2:5c:ca:a7:94:e7:66:5f:26:e0:50:3b:91:d9:
32:0a:5b:3e:80:06:ec:1f:f3:63:87:11:fd:a6:3e:61:d8:d4:
6e:16:9d:07:8d:8b:31:7c:cd:ad:17:55:bb:ac:ad:b9:9a:23:
cd:04:ab:20:df:ea:f9:d4:69:ae:6d:be:85:a3:9c:6a:ca:cb:
75:65:48:3a:52:99:dc:94:ed:01:9d:62:2a:7c:a4:1f:68:b9:
a4:4c:43:24:06:3d:5e:60:a4:bc:9e:1d:a1:9b:23:ec:62:e1:
37:97:96:2e:7d:7d:28:80:bc:dc:1a:6d:ed:aa:5d:88:91:9e:
90:8a:58:47:92:73:33:fd:cd:c9:e7:ab:99:e9:cc:b6:38:cf:
b6:7c:10:bd:60:8b:17:7a:55:14:da:f8:c5:90:ea:24:61:4e:
86:81:a5:89:2f:64:da:de:8d:e8:de:5a:2b:b7:a9:82:cd:15:
57:ba:e5:29:c9:06:ec:aa:a5:29:a5:b0:62:2f:d4:2b:fb:f3:
ea:08:c8:9f:c7:b4:5e:44:c8:1e:49:65:65:07:76:a7:0b:a4:
63:3a:9c:0c:21:c5:f6:dc:14:75:de:7a:e8:45:87:79:4a:28:
8f:81:9a:86:26:14:3c:a3:17:ac:2b:90:4c:b6:56:aa:6c:cd:
44:8d:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:22:39 2025 by rpki-client