Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
File: ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json)
Hash identifier: ikD2aO0U+gQuqxm2Yu4L+TnKTYch6gizcEgpTfNvzMo=
Subject key identifier: BD:66:EA:D5:46:02:D8:6F:03:9F:22:8C:D2:E4:99:1E:A6:7A:DB:6F
Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
Certificate issuer: /CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Certificate serial: 0198D65F55698232579FD74A67744FD9E237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
Manifest number: 13A1
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: 70qO22m7QIqqEfRx7f29dcZAQvghSfec5gtFZoBQ6nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:55:69:82:32:57:9f:d7:4a:67:74:4f:d9:e2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=bd66ead54602d86f039f228cd2e4991ea67adb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:8e:cc:ff:9e:a7:74:6f:f7:50:aa:35:f8:
81:f3:fa:2b:7e:37:2a:89:65:45:4d:ec:2c:0c:e2:
69:b1:25:5e:61:69:4f:b9:da:ca:ed:43:ed:95:10:
78:d9:cf:d4:c7:e5:65:0d:29:bf:a6:26:8f:c4:2a:
99:84:15:9f:3f:0e:95:55:f9:b0:42:68:93:c7:2c:
c9:e3:cf:0c:7d:89:4f:aa:ad:f4:7a:0c:0e:29:7e:
d8:4d:2a:1c:4e:68:8e:29:3f:c5:4f:a6:67:87:cd:
59:72:69:dc:2c:3c:55:22:01:4f:b1:d0:04:69:b9:
e0:cb:35:0f:01:b3:52:72:03:3e:d5:bc:fe:cb:cf:
c1:20:4e:fa:61:04:b8:b9:59:ad:0e:f5:ec:87:26:
10:4f:11:cb:c6:42:d1:7a:63:db:58:36:69:8a:c4:
e9:5b:7f:db:8d:c1:5c:97:68:4d:41:8b:38:f1:05:
e0:14:58:07:d0:e8:fd:28:58:77:6d:53:aa:5d:d7:
83:af:0a:bb:d1:09:6b:19:4b:3f:26:cd:4e:e3:df:
69:a2:0f:fa:2e:ba:9d:ee:75:a9:b2:e0:09:42:be:
9e:e4:06:04:22:75:c7:fc:95:2a:33:dc:80:53:92:
28:6c:d8:8a:12:49:c5:b6:e6:30:16:45:a2:46:47:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:EA:D5:46:02:D8:6F:03:9F:22:8C:D2:E4:99:1E:A6:7A:DB:6F
X509v3 Authority Key Identifier:
keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:f5:ef:8d:85:82:26:36:2a:42:f1:3c:55:4c:70:fb:af:
93:cc:cf:0a:12:5d:b7:70:9a:cb:80:3d:43:0c:5c:5e:8d:54:
8a:f2:ee:12:1a:9a:49:76:46:f8:b7:16:b2:a4:3c:aa:ac:ba:
d8:c3:2a:45:fe:f5:ff:c6:21:da:e4:46:73:6d:e2:89:a8:46:
ec:b2:56:ec:1a:b3:81:99:2f:3c:39:56:13:7a:6a:fc:8f:a1:
15:81:96:fd:3c:1a:4f:a3:71:94:8b:ab:a6:55:dd:e3:23:e0:
c0:80:29:58:4f:40:95:b5:3c:6a:66:7b:ca:a1:a4:a4:56:6d:
e9:78:4a:b2:df:d5:f8:d9:80:e3:c5:56:e8:8a:62:61:9d:58:
2a:12:82:4e:da:13:f9:da:c1:34:44:70:e9:dc:89:b1:15:08:
b9:f9:8f:a7:2d:5c:8e:0d:02:e1:f4:02:af:e9:8b:da:a2:c9:
67:e9:de:dc:b1:3a:6e:f7:12:d4:fa:cd:93:29:01:f2:79:55:
9a:43:8f:2a:ab:0a:cf:a0:83:65:b5:f8:42:69:3b:bf:3f:9b:
4b:76:77:c1:dc:3e:62:75:aa:fa:91:88:36:5c:8c:41:af:1f:
be:c7:eb:c2:a1:74:eb:27:63:52:34:ae:d6:92:db:b1:fd:fa:
02:f2:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:36 2025 by rpki-client