Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File: zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier: XFfGp52e9/xlQDdEWdG4wcII7wLTqu4Hg897MtmiskI=
Subject key identifier: 3A:E3:57:5F:ED:11:4E:1A:12:86:A2:17:EE:04:6F:E2:E7:5F:66:B6
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer: /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial: 0198D706186E5166C22F081C0A9BEC36CF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number: 0789
Signing time: Sat 23 Aug 2025 13:02:37 +0000
Manifest this update: Sat 23 Aug 2025 13:02:37 +0000
Manifest next update: Sun 24 Aug 2025 13:02:37 +0000
Files and hashes: 1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: bxNERW2oMzQUnO06XvgafG/KUOoo63BuQnuiWh4NcP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:18:6e:51:66:c2:2f:08:1c:0a:9b:ec:36:cf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Validity
Not Before: Aug 23 13:02:37 2025 GMT
Not After : Aug 24 13:02:37 2025 GMT
Subject: CN=3ae3575fed114e1a1286a217ee046fe2e75f66b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:c3:bd:58:33:d1:6a:26:dc:ed:ea:a4:44:
25:5e:c4:dc:98:a3:52:62:51:e1:03:dc:9b:68:41:
49:73:94:10:72:a8:c1:07:ca:bd:16:a5:b8:0e:a1:
ab:8c:f7:c9:f8:90:1a:af:c6:91:e2:1d:ce:77:89:
ea:9f:8a:71:4f:54:19:82:09:a5:08:c6:03:64:25:
61:2a:ad:49:78:1b:61:9b:7a:a8:60:aa:1c:16:5f:
3f:51:10:cd:43:3f:23:55:43:f8:ee:4e:e0:85:36:
58:ed:80:03:33:74:7c:43:a3:93:2b:66:2b:25:31:
09:bf:5d:ca:c2:26:4e:fc:b1:e0:82:e1:ab:0f:1c:
db:e2:9c:25:64:1c:00:19:1c:7a:c9:d1:cd:e1:31:
e8:ce:e7:27:f9:10:2b:f3:1f:16:00:15:7e:59:ff:
10:b9:bf:f8:03:e5:8c:5b:88:27:c0:bd:c6:b7:ca:
da:f6:fa:79:0a:75:7f:5f:f8:42:13:0c:7e:7f:0d:
ed:94:65:5c:67:0d:6b:7f:e2:88:18:13:1d:85:d0:
d6:5c:21:77:ce:ed:3e:4f:65:62:73:77:40:c8:d0:
d5:bc:a0:58:8d:79:5b:c7:77:86:16:cb:de:09:68:
52:07:ab:ac:22:f2:6d:a4:1d:be:6d:47:e2:31:c9:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:57:5F:ED:11:4E:1A:12:86:A2:17:EE:04:6F:E2:E7:5F:66:B6
X509v3 Authority Key Identifier:
keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:61:37:eb:6d:d7:c8:c5:9c:78:71:f5:d4:f6:31:43:ac:6b:
00:23:cf:d3:4c:4e:04:1e:4c:6c:be:fe:46:bc:ad:1d:5e:8f:
76:15:86:21:15:5a:7b:81:a8:5b:99:70:71:b7:21:e5:d8:a0:
0a:f0:ca:90:17:4c:04:cc:d0:ba:a0:f9:48:88:4d:63:bb:b1:
57:19:ea:63:65:8a:98:29:c9:16:5a:3b:13:74:bc:3b:90:21:
36:48:02:47:90:74:3f:30:a9:fc:98:df:2d:3d:af:0f:37:b4:
b6:42:5f:90:7b:6c:db:76:cf:78:0d:d1:d9:7e:f1:97:6a:ea:
87:ed:16:ab:d4:1c:11:14:51:f9:27:4a:a2:e3:ad:a3:c7:f4:
8c:4b:e3:51:23:04:a5:62:19:d3:c1:15:0d:87:67:2f:d6:51:
3b:51:59:a0:c3:2d:92:60:7f:fa:b4:7f:53:c9:e8:df:3e:62:
7c:bf:35:67:e7:d9:e5:35:51:27:c1:a5:b6:4e:74:a2:cf:e2:
1f:2e:55:60:ed:8a:39:82:30:7a:0e:e0:8c:2b:13:66:fd:d9:
27:26:9e:85:ea:52:38:72:86:84:8c:a8:51:48:57:18:00:98:
b5:7f:73:95:91:db:20:8a:32:b4:56:5f:04:41:1f:41:5f:09:
ce:bc:8c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:22 2025 by rpki-client