Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
File: ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json)
Hash identifier: JueZm3ZvnjTuJKDph+4WFdIZBEpUoyq5BW7rbW0Vl5s=
Subject key identifier: D8:51:44:5C:D7:AB:09:45:69:12:71:9A:69:9D:B9:AC:4D:4B:4D:8B
Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Certificate issuer: /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Certificate serial: 0198D472B394FE682A5FB137AAF3CFC949C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
Manifest number: 05E3
Signing time: Sat 23 Aug 2025 01:02:23 +0000
Manifest this update: Sat 23 Aug 2025 01:02:23 +0000
Manifest next update: Sun 24 Aug 2025 01:02:23 +0000
Files and hashes: 1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: +zASkpEIG3XsiqO10EjXM/Ww1sS9rTTO+qXv7hFducE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b3:94:fe:68:2a:5f:b1:37:aa:f3:cf:c9:49:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Validity
Not Before: Aug 23 01:02:23 2025 GMT
Not After : Aug 24 01:02:23 2025 GMT
Subject: CN=d851445cd7ab09456912719a699db9ac4d4b4d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:4c:09:fd:63:9e:45:f2:d3:cc:9b:9e:c1:
66:99:30:11:9f:4b:9a:08:5e:03:71:4f:f5:6f:a8:
0c:cc:da:33:54:22:82:56:8d:52:07:38:84:28:1c:
66:4a:77:81:7f:7b:f6:b9:b5:f7:3c:6d:51:ad:97:
62:e0:1a:b0:aa:00:04:d5:49:3b:39:a4:96:df:7a:
9b:b1:99:4c:0d:d8:7f:26:04:95:6e:62:c8:d7:26:
e8:ef:a8:49:78:6b:46:e0:89:e9:95:51:98:83:0c:
8e:3b:55:6c:c6:6d:26:69:4e:2d:5f:da:22:43:2b:
67:65:2c:01:6f:01:df:80:20:17:fd:3d:ec:ec:8a:
58:dc:4e:a5:bd:d3:53:40:c0:ce:db:99:f9:83:bd:
28:01:a4:60:de:a3:74:6d:52:6b:ea:15:42:d9:8a:
77:81:82:87:66:12:31:0f:23:98:35:19:b0:d6:b9:
2b:34:bf:b5:8d:96:e8:09:85:39:47:0b:89:58:21:
70:f6:c5:32:be:7f:03:f1:1d:c4:1c:fe:51:90:e6:
9f:ef:72:d3:33:f4:70:8a:e9:4a:24:aa:4e:fd:9d:
d9:ec:3a:78:a8:64:4a:c4:2c:80:7f:df:f9:33:86:
c0:51:2c:ef:ba:e8:40:d0:c9:cd:8f:6b:d8:5c:18:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:44:5C:D7:AB:09:45:69:12:71:9A:69:9D:B9:AC:4D:4B:4D:8B
X509v3 Authority Key Identifier:
keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:22:56:09:1a:d9:45:08:89:5b:ea:3f:52:04:ca:1e:00:07:
4b:6a:3d:95:8a:db:67:11:9d:d6:58:bd:2b:9a:25:61:a8:e6:
2a:53:d3:bf:6c:dc:f2:35:48:fd:50:2f:c5:13:59:fb:eb:95:
2a:a5:5a:eb:88:c8:e5:c6:f7:91:19:ec:db:63:b9:91:79:3b:
05:a4:63:89:bf:e3:a7:0d:3a:6b:0c:cd:5c:8b:76:0f:b0:91:
b9:1c:85:ee:73:5e:bd:22:47:e7:d4:3c:f7:71:6b:f2:90:64:
b3:c6:71:b3:e5:8f:cb:d1:8a:72:0f:30:89:08:55:8d:40:1b:
6c:80:eb:b8:81:ff:09:a1:88:97:64:2a:68:84:cd:7f:9a:65:
da:e1:d7:dd:94:f5:df:31:25:01:24:c7:51:6c:c1:7f:03:45:
90:de:7e:98:b4:7b:15:1d:8c:63:59:2d:ca:28:53:35:18:84:
b6:d5:4f:49:61:43:15:59:46:84:fc:9b:7e:9f:a4:e1:4c:2a:
44:63:4f:ec:d8:98:14:de:c8:68:28:db:6f:41:07:b9:5b:cd:
37:c1:81:f1:81:f1:86:3d:00:04:62:60:86:77:07:6c:a4:0c:
df:90:b1:69:bf:e2:f1:11:77:0f:ba:c1:2a:6b:81:d7:5f:a2:
f0:34:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:19 2025 by rpki-client