Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: OpwQ7fLyjw7Lufwe/XZu3N4PJ9SfPe2A/zckdzHDq/I=
Subject key identifier: 67:7F:32:D5:12:4E:A4:03:66:C8:26:E4:36:5F:D3:49:2B:7D:67:98
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 0198D6CCE7B81C565F8809FD963DDFB9FCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 0628
Signing time: Sat 23 Aug 2025 12:00:09 +0000
Manifest this update: Sat 23 Aug 2025 12:00:09 +0000
Manifest next update: Sun 24 Aug 2025 12:00:09 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: 2epmHB0U+tWk3QjCx8D/RV2YnZ2ZbURRqwMM1iIFViM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e7:b8:1c:56:5f:88:09:fd:96:3d:df:b9:fc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Aug 23 12:00:09 2025 GMT
Not After : Aug 24 12:00:09 2025 GMT
Subject: CN=677f32d5124ea40366c826e4365fd3492b7d6798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:26:d6:da:3e:2d:f5:5e:e9:8e:06:52:b4:
9a:1c:40:60:1a:ec:a6:b6:1a:e2:da:8d:06:5c:c4:
e8:4f:b6:4d:b7:1c:21:64:6f:93:b4:f7:de:4b:d6:
2a:e2:43:1a:0c:94:0c:1f:c2:7f:65:a7:5c:88:0b:
32:fc:b2:c6:f1:21:02:9a:b7:76:4b:9b:5f:a6:9b:
be:63:36:88:0e:52:12:d5:54:d4:02:d3:b6:b6:d4:
64:9f:81:65:2e:98:08:ab:83:32:87:ed:87:96:31:
9f:64:10:7f:76:52:36:c3:eb:41:1c:88:c2:f5:a1:
9c:63:25:7b:78:f0:54:33:55:45:40:41:54:9c:71:
39:dd:5b:df:09:8d:11:44:3f:79:98:f4:c8:23:20:
6f:62:32:6a:fc:4b:29:9c:09:33:07:04:e2:99:95:
b1:ab:01:9b:67:e4:bf:c6:a1:c1:6b:50:bf:ca:1d:
f5:7d:e5:de:dc:01:e9:09:c2:aa:bc:9e:ec:d9:99:
a4:ac:e9:b9:13:8d:64:86:da:b3:81:5a:67:2f:3d:
c8:6b:79:29:3b:5e:ba:b4:b0:41:41:79:2e:10:0e:
39:75:63:73:20:13:b4:7d:7a:f3:27:73:66:bf:12:
a0:9c:b3:bf:6e:11:ad:87:c3:75:81:23:9f:f1:b3:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:32:D5:12:4E:A4:03:66:C8:26:E4:36:5F:D3:49:2B:7D:67:98
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cc:d0:b3:74:ad:55:ac:2b:5c:67:f4:f4:f8:b3:e0:a1:10:
9a:be:85:a1:ef:3a:be:88:07:ce:b4:80:43:1a:ff:f5:74:9f:
a8:df:e3:25:d5:5a:57:c3:cb:d1:73:64:65:17:b3:e2:50:f8:
d5:ed:b1:13:2c:11:ac:95:9f:f2:b7:3f:c9:95:6a:2a:87:cc:
e0:77:df:d7:5b:07:02:ad:57:e9:8a:84:af:d2:b3:15:b2:79:
99:18:a2:e8:dc:c4:5a:e8:90:bb:95:40:58:0a:39:f3:93:91:
26:c5:dc:50:33:86:b3:59:19:e7:a5:5d:f6:f7:70:4b:db:0a:
1c:e6:8d:7a:5d:41:46:ee:07:33:87:96:fd:b7:e1:c4:7d:ae:
52:f2:ed:2c:2a:e7:01:4d:fd:36:1e:79:05:09:30:9f:32:a7:
12:a5:3b:91:87:74:11:18:b5:18:8a:55:42:83:2e:f1:66:dd:
f1:c6:b1:c3:c5:4c:6c:42:53:31:3e:10:75:87:d6:1f:df:d6:
62:f9:62:37:bb:b7:fa:37:cc:83:d1:a5:c0:10:20:26:5e:a4:
5c:0b:34:f5:81:da:c0:66:36:1b:2c:44:00:18:f2:d9:6c:48:
75:98:a5:84:fe:25:cd:aa:40:14:f0:e2:9b:bf:ca:4d:f6:89:
44:6d:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:21 2025 by rpki-client