Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: 3R5G/SLlBLXxqI1S8FjxWq4gptdQ1/FaAnknZOx+1EA=
Subject key identifier: 6E:36:A4:5F:DC:48:B9:92:84:6E:D4:93:96:43:A2:30:DD:60:5B:FD
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 0198D4E04D626266D5BA699DA5DB23D55CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:06 +0000
Manifest this update: Sat 23 Aug 2025 03:02:06 +0000
Manifest next update: Sun 24 Aug 2025 03:02:06 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: m9s55W4F6r1BrubAGvQePtWvIzNhJKJprePCw+nICZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4d:62:62:66:d5:ba:69:9d:a5:db:23:d5:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Aug 23 03:02:06 2025 GMT
Not After : Aug 24 03:02:06 2025 GMT
Subject: CN=6e36a45fdc48b992846ed4939643a230dd605bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:a3:94:cf:e7:be:ca:66:30:63:8a:a4:d4:
dd:23:0f:6f:48:dc:7f:f8:a0:ae:ea:5b:1f:ae:67:
5d:24:79:b4:bd:98:fe:1b:8e:7d:0a:2d:96:4a:80:
44:db:cd:2a:29:bd:b0:5e:61:42:95:f6:45:f6:a2:
12:b7:cb:40:0d:26:d5:6b:f7:64:ae:ee:ab:69:e3:
53:03:61:4a:94:24:39:d9:ef:ca:78:17:9a:d6:e0:
28:56:ac:4a:28:5c:3b:03:a1:2b:61:3a:6d:80:f1:
fa:e9:b7:7a:34:93:b0:a8:e7:33:31:d1:31:a9:cb:
44:a4:80:30:2d:06:8a:20:d5:87:df:f7:cc:bc:69:
97:76:92:02:05:06:21:39:d8:10:24:da:a4:48:e8:
0f:47:db:e7:70:c2:52:7d:19:83:97:3d:5f:f6:74:
bb:d4:3f:05:57:a2:6a:00:d2:e6:d2:e2:28:35:11:
e5:22:6e:c2:47:d2:e1:8e:8d:ee:e3:ba:9a:b7:ac:
3b:14:45:98:61:e7:79:f2:04:96:3d:e7:2b:9b:0b:
02:7e:c2:ab:9c:9c:77:a2:5d:51:27:6e:66:4c:0c:
49:4b:f8:0a:f5:f1:4c:6d:22:c2:64:53:0f:eb:ff:
bd:6d:19:63:2f:a0:4b:7a:91:d6:3f:19:27:15:54:
6c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:36:A4:5F:DC:48:B9:92:84:6E:D4:93:96:43:A2:30:DD:60:5B:FD
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:dc:41:45:49:83:04:50:2b:8b:04:bb:f9:75:e0:bb:d4:
15:be:f7:1e:61:89:b9:2e:64:ff:50:69:f5:3b:7b:5c:55:80:
a6:7f:39:30:38:dd:91:40:e7:31:75:38:de:be:f7:be:87:43:
49:fe:3e:e8:8f:66:59:de:86:4f:e1:eb:4b:bc:3c:c8:07:eb:
01:63:63:fc:7f:3a:e9:a3:95:d4:e3:9b:07:d4:02:df:cd:2a:
d1:88:55:08:75:08:d6:55:a1:f3:2b:ae:11:2c:ea:ed:67:a0:
29:6a:b8:be:29:1a:ea:11:eb:96:75:4f:25:d1:56:fb:80:a0:
14:c5:8c:9e:fd:8f:a1:b2:4e:52:07:db:cd:4a:43:2c:dd:25:
19:ab:b3:3e:62:3e:38:cf:4e:3d:7a:02:ba:24:98:a1:cc:3e:
a8:0b:6f:2a:14:d4:a6:bf:90:cb:dc:9c:32:19:8d:e9:fb:1a:
cd:ff:a1:a0:44:64:4f:a3:08:2f:f1:97:98:3b:8a:72:59:3d:
70:d4:8c:a9:08:00:27:a4:97:68:ad:0a:87:dc:ff:74:a8:4a:
49:56:3a:b2:80:20:22:3f:e9:d5:38:b3:ae:bf:9a:ad:e2:96:
44:11:0f:63:91:e9:69:80:5c:94:4b:09:51:4b:43:c5:18:8c:
24:d6:64:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4E1iYmbVummdpdsj1VzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmVkZGI1YTllMmFiNTMzNDc0MTA4YjdjODAwZjgxMzJm
MTBlMjEwHhcNMjUwODIzMDMwMjA2WhcNMjUwODI0MDMwMjA2WjAzMTEwLwYDVQQD
Eyg2ZTM2YTQ1ZmRjNDhiOTkyODQ2ZWQ0OTM5NjQzYTIzMGRkNjA1YmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkijlM/nvspmMGOKpNTdIw9vSNx/
+KCu6lsfrmddJHm0vZj+G459Ci2WSoBE280qKb2wXmFClfZF9qISt8tADSbVa/dk
ru6raeNTA2FKlCQ52e/KeBea1uAoVqxKKFw7A6ErYTptgPH66bd6NJOwqOczMdEx
qctEpIAwLQaKINWH3/fMvGmXdpICBQYhOdgQJNqkSOgPR9vncMJSfRmDlz1f9nS7
1D8FV6JqANLm0uIoNRHlIm7CR9Lhjo3u47qat6w7FEWYYed58gSWPecrmwsCfsKr
nJx3ol1RJ25mTAxJS/gK9fFMbSLCZFMP6/+9bRljL6BLepHWPxknFVRsQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG42pF/cSLmShG7Uk5ZDojDdYFv9MB8GA1UdIwQY
MBaAFM2+3bWp4qtTNHQQi3yAD4Ey8Q4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQt
OWUxNDMzZjkzYjRlLzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQtOWUxNDMzZjkzYjRl
LzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQq7cQUVJ
gwRQK4sEu/l14LvUFb73HmGJuS5k/1Bp9Tt7XFWApn85MDjdkUDnMXU43r73vodD
Sf4+6I9mWd6GT+HrS7w8yAfrAWNj/H866aOV1OObB9QC380q0YhVCHUI1lWh8yuu
ESzq7WegKWq4vika6hHrlnVPJdFW+4CgFMWMnv2PobJOUgfbzUpDLN0lGauzPmI+
OM9OPXoCuiSYocw+qAtvKhTUpr+Qy9ycMhmN6fsazf+hoERkT6MIL/GXmDuKclk9
cNSMqQgAJ6SXaK0Kh9z/dKhKSVY6soAgIj/p1Tizrr+areKWRBEPY5HpaYBclEsJ
UUtDxRiMJNZkuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:08 2025 by rpki-client