Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: I5faUpLz3Eht4D+gJJ1sxxxdfwfeCJmu9p+PqYxqBqI=
Subject key identifier: F2:0A:23:E6:65:2A:69:E5:05:52:9D:B7:F7:72:FC:B1:0E:1F:C0:C9
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 0198D4E010B0347D1539B7767BD31C019DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: OnSKqWCJEmQi3p3rtqP18VMk3/viejCvVYvuthoGF6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:10:b0:34:7d:15:39:b7:76:7b:d3:1c:01:9d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=f20a23e6652a69e505529db7f772fcb10e1fc0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:97:59:b6:85:cb:f0:74:12:5a:31:74:69:
db:f3:89:d2:ce:05:e8:01:69:42:4d:b4:cd:5f:5f:
13:4c:05:a5:8a:16:fb:3d:29:23:d3:f0:20:a0:fb:
81:f9:62:2e:46:07:d0:84:5c:50:08:46:38:b4:3a:
f1:d4:d9:4c:15:d3:6b:e7:2c:86:c2:04:91:dd:ab:
6a:cb:ac:e7:9c:3d:77:a3:b9:f1:a6:78:8a:f9:5c:
92:57:30:4c:29:41:19:83:de:85:17:1d:af:d8:66:
c7:1c:39:5c:b0:8b:65:10:9c:01:b6:4b:38:ed:5a:
de:f5:57:a4:67:ec:3d:ad:d0:09:f7:2a:f8:fb:71:
52:0d:81:3f:55:b4:c7:2c:2e:bb:7e:c0:b6:fb:fe:
7d:1c:4f:4b:0d:bc:bc:74:da:f0:58:8d:2c:17:5e:
ba:f1:8d:c5:1c:90:a4:79:ea:0a:75:01:e6:bd:18:
91:21:e1:15:71:69:6c:95:6e:9a:cb:7d:42:61:d5:
a4:82:6b:13:31:7c:01:79:47:5e:b5:be:aa:97:bb:
29:77:f2:bb:55:f3:98:db:b7:62:83:df:0a:ae:70:
4c:35:9d:5f:19:f8:45:ec:23:da:2a:bb:27:d4:95:
64:26:0d:69:28:e3:81:b7:01:0b:6e:26:47:7f:00:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:23:E6:65:2A:69:E5:05:52:9D:B7:F7:72:FC:B1:0E:1F:C0:C9
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:07:9c:2c:76:1a:a7:b3:af:e2:01:db:1b:36:4a:da:b0:41:
0a:8c:c8:ae:0b:48:aa:97:12:fb:9c:88:e5:50:9b:32:6f:87:
ad:a9:a8:eb:86:f7:9b:3f:01:77:cc:72:66:23:cf:d9:75:ef:
8d:06:61:54:d2:b2:85:39:05:99:e3:e5:b6:2d:18:d6:9f:f5:
87:61:57:63:96:bf:84:6a:a7:f9:34:75:04:c1:48:fb:b7:82:
a5:cd:0c:8a:c4:93:e2:47:88:42:5c:38:53:ac:70:0a:85:67:
86:f9:43:40:53:0e:5b:7b:9a:58:93:c8:5d:57:6e:1a:f5:cc:
5e:f7:c2:9f:f1:cb:e1:11:1b:f2:97:bb:67:6e:03:e8:85:70:
df:ee:2e:50:34:58:bb:bd:c9:e2:2f:58:96:10:d0:a9:a7:57:
08:b9:11:d3:2e:69:39:22:22:4a:51:0b:a5:d0:30:cc:1e:2f:
76:0e:9a:29:8b:fa:d0:a1:58:88:18:07:f0:76:1e:56:16:2c:
72:6f:2a:62:d6:fc:62:77:7a:c7:e9:49:4f:e8:2f:e7:bd:00:
f3:b0:1d:ab:a2:09:5c:5f:74:d9:5a:84:74:60:e6:28:42:c1:
8b:7a:cc:83:cb:c6:32:61:2c:03:ce:23:15:05:ae:52:6c:9c:
d2:0d:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:00 2025 by rpki-client