Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File: ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier: SvRoh/jm2whFIjKPLmb5M0yo8eYAy7O4tnYsfEy3iq0=
Subject key identifier: 0C:F6:E5:BC:C2:E8:AE:14:BF:01:F7:41:16:76:E4:78:3D:B3:9C:38
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer: /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial: 0198D6CD9484CDD867CB1A0E244F5EAF01CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number: 0853
Signing time: Sat 23 Aug 2025 12:00:53 +0000
Manifest this update: Sat 23 Aug 2025 12:00:53 +0000
Manifest next update: Sun 24 Aug 2025 12:00:53 +0000
Files and hashes: 1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: OKi8cmiwszowz01FekkR6EMM+NnlkaxH8ue5e5dB+Ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:94:84:cd:d8:67:cb:1a:0e:24:4f:5e:af:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
Validity
Not Before: Aug 23 12:00:53 2025 GMT
Not After : Aug 24 12:00:53 2025 GMT
Subject: CN=0cf6e5bcc2e8ae14bf01f7411676e4783db39c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:ea:ba:1b:86:74:b0:ab:7b:24:cf:32:43:
cc:c7:51:f5:c5:54:7c:f3:ce:49:7c:70:6e:b5:dc:
72:af:01:e4:72:3e:9b:69:05:0d:5b:3b:17:2f:d5:
58:30:c9:fc:52:f1:32:1d:ed:d8:a9:13:8b:66:b3:
b1:6a:7a:9e:80:00:8b:d4:49:3d:e8:77:6d:78:50:
b5:5e:0a:3b:ec:c9:a7:84:a0:13:4b:86:8f:7d:68:
08:c7:69:f2:26:09:6c:cc:f3:fc:08:5a:f5:a1:54:
94:51:30:fd:91:86:4f:d1:44:87:6d:5d:19:bf:e0:
1c:8f:8d:68:bc:80:d9:a4:67:7c:26:d2:e8:5c:d8:
f0:b0:6b:30:8e:45:ee:34:4e:65:80:0f:1f:7c:d3:
3e:13:dc:b2:c0:60:1a:fb:e1:e1:34:30:f4:f4:b1:
b1:46:c8:45:09:32:f1:41:eb:16:19:6f:3d:1c:d1:
aa:9c:06:f8:8b:6c:2f:81:3b:b7:10:9b:f1:19:1a:
e0:48:ab:04:85:2c:3b:d8:f3:c2:99:12:ba:cf:fb:
42:ae:84:ea:ce:39:7e:df:fe:84:6e:57:47:00:57:
f0:61:2b:c7:67:00:16:c8:01:1b:1b:17:94:cf:9c:
0d:48:e1:e0:a8:9c:07:ae:34:74:84:8e:1e:61:e3:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:E5:BC:C2:E8:AE:14:BF:01:F7:41:16:76:E4:78:3D:B3:9C:38
X509v3 Authority Key Identifier:
keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:20:d5:1a:78:b9:ec:22:43:5a:d1:22:e5:d7:ed:ef:44:7b:
6e:19:69:33:30:a3:c5:76:96:c3:e1:28:03:d6:45:68:7d:e3:
c2:3c:69:25:84:e6:18:be:b3:f9:1f:49:fb:6d:b0:bb:1b:34:
fb:c8:1e:d6:79:13:79:04:75:72:f1:a6:03:bc:32:ef:91:29:
b7:73:0d:85:b0:e7:b6:d6:5f:05:81:df:fe:eb:56:51:4f:b9:
33:50:b3:84:1d:4a:e3:bf:e2:94:da:e1:07:7f:2d:bc:61:93:
02:c5:62:4b:04:f0:f5:39:b9:27:df:14:8b:f2:ad:6b:c3:d2:
b0:8b:92:35:92:53:e5:8f:c5:bf:83:8c:7b:da:6a:89:4a:37:
dd:e6:de:25:60:ac:8c:3f:30:ab:11:ea:11:64:99:fe:9d:93:
f6:88:9d:74:a9:56:d7:89:dc:9b:1f:6b:11:06:9f:5c:cb:ad:
0f:8e:90:9e:26:12:54:e5:e1:84:11:0e:10:91:4f:64:c7:16:
41:5d:72:c2:63:d5:7c:36:75:a8:05:c0:ac:5f:0d:73:79:29:
89:2a:1b:1e:6d:6b:5e:3f:3d:70:41:10:36:e8:ce:af:d9:e0:
6a:32:ba:a7:19:2a:a3:25:6c:16:b1:0d:a7:f2:24:88:7b:75:
ff:8a:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:32 2025 by rpki-client