Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: XS7trPhbEJCjjdNkcATTE4qE5ykIbm8NifV8v/bj1BA=
Subject key identifier: 6B:5E:D1:17:FB:82:44:8F:66:B6:B9:A7:28:C3:0A:91:80:F9:ED:9E
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 0198D472DC53664DF4D3FFA222D8BEC644AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 036A
Signing time: Sat 23 Aug 2025 01:02:33 +0000
Manifest this update: Sat 23 Aug 2025 01:02:33 +0000
Manifest next update: Sun 24 Aug 2025 01:02:33 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: pzuZYD3opfwGGSNFsgEECYpwJRTJ/UL9lbXysOdSMIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:dc:53:66:4d:f4:d3:ff:a2:22:d8:be:c6:44:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Aug 23 01:02:33 2025 GMT
Not After : Aug 24 01:02:33 2025 GMT
Subject: CN=6b5ed117fb82448f66b6b9a728c30a9180f9ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:3d:bf:35:b1:37:6f:ac:2e:f6:21:73:1c:
81:5c:48:ff:37:15:6c:b5:4b:3b:05:94:04:a0:7c:
0e:04:fb:d3:eb:30:73:ea:f7:96:ed:c2:74:37:54:
c3:8e:84:21:ad:eb:b9:2b:98:d0:c6:a1:4a:da:9a:
02:2f:a3:23:e0:1b:22:77:71:06:d0:20:d3:b6:9d:
27:ce:51:b9:fb:7f:fb:f2:7b:b6:2e:65:45:ee:3a:
0a:48:97:44:3e:d2:9b:58:a9:e4:f2:93:2e:db:ae:
e8:20:a9:62:88:10:a4:af:7b:3f:11:f2:12:87:40:
07:a3:69:08:c5:ca:89:2a:6e:9a:63:53:c9:b5:91:
e8:82:5a:02:99:51:18:6c:02:a9:0a:b1:d1:aa:c6:
c7:7e:2d:68:4b:6f:06:59:78:c8:24:71:82:57:c2:
33:ad:92:71:ec:d0:43:2a:71:c6:5e:8e:13:2c:70:
eb:8d:76:da:34:d1:01:76:c8:de:bc:96:e6:83:6c:
c4:49:61:c4:89:d0:76:9f:16:7d:2a:b5:60:87:60:
b5:e2:cc:cf:eb:aa:51:ba:97:f1:fd:17:ab:78:72:
6e:aa:68:cc:57:3c:c1:bc:d0:8c:10:c7:f7:e1:c5:
47:5c:7a:1a:d9:c5:84:0b:08:8a:2b:a3:5f:80:e6:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:D1:17:FB:82:44:8F:66:B6:B9:A7:28:C3:0A:91:80:F9:ED:9E
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5c:8d:17:4b:00:45:64:d2:f7:cc:bb:23:d0:d9:66:5b:01:
16:38:8c:2b:5f:5f:71:d5:38:2c:0b:22:11:fb:a1:df:ec:0e:
b6:07:2c:1d:77:6f:93:63:69:1d:f7:70:75:7b:2b:c8:18:0a:
75:3b:cc:49:3a:03:e6:19:37:0d:01:31:a0:ad:86:74:96:b9:
cc:0f:b9:2d:77:81:49:27:77:e8:a2:4c:f1:3f:5d:86:85:ab:
c6:2c:5a:8a:48:93:90:0a:73:df:6e:34:2b:76:41:ed:ff:57:
20:42:e7:9f:23:f0:d8:27:5f:d0:61:33:e6:c4:50:22:17:fd:
df:69:d0:e5:b4:0f:f3:0f:8a:04:a7:d6:d7:c5:1e:df:46:f2:
f5:d5:a7:d9:b6:1e:0f:e7:a3:2a:59:3e:8d:5f:71:5c:60:d1:
7b:d0:a2:d3:13:07:08:43:0e:a8:02:7a:9d:3f:b1:d9:4b:19:
1d:ce:4c:96:60:d0:76:d5:8c:8d:e8:3d:0f:bc:71:92:26:8f:
05:97:22:00:b5:18:7f:f6:7d:b8:2e:5d:ce:22:d7:83:c0:22:
63:3c:a7:03:17:56:d3:24:36:0a:95:c8:74:d3:f8:dc:2b:82:
16:c5:19:35:51:f8:7b:8d:d1:67:75:8e:c1:6f:79:76:ed:d1:
e3:d3:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:14 2025 by rpki-client