Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File: KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier: biljs/4F31GXFMlr9SozAv0ol7rGvoooMZOflozSepY=
Subject key identifier: 49:75:7C:65:F7:E9:A7:97:27:0A:35:F4:14:47:DE:59:F0:1E:11:B6
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer: /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial: 0198D5BBF2201AB8054D9B6C467FE20C1A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number: 0A04
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: VvTp7HesO+Ir6TgmmvxZbfo+9aEAxcsTtKzeZy476z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f2:20:1a:b8:05:4d:9b:6c:46:7f:e2:0c:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=49757c65f7e9a797270a35f41447de59f01e11b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:db:95:1a:ad:ea:74:6d:48:00:de:e2:04:
4d:f8:73:8d:af:0e:5b:d2:d7:41:8f:92:0c:16:4c:
39:cc:8b:f3:e0:2a:9b:1d:4a:59:fc:93:5f:cb:52:
f3:a6:ec:cc:f6:86:44:6c:f2:53:b8:b9:11:04:6d:
0d:50:6b:f0:3c:16:df:14:3c:c2:7a:09:b7:66:81:
51:50:40:0e:94:a3:ba:55:2e:96:fc:e5:4b:4e:9a:
ae:7f:10:20:9f:18:b3:31:3d:a4:30:ba:f5:a5:6a:
0c:0b:f3:10:7d:87:16:1e:a5:6c:25:2e:fc:25:eb:
73:20:35:6e:0d:0e:62:05:db:05:f1:99:63:3f:96:
08:da:f5:79:d9:7d:48:2d:9c:f0:23:20:0e:7d:59:
6f:cb:f8:a7:cd:97:66:69:be:1c:d1:e8:c8:fd:4c:
e4:2f:c3:c1:ea:ca:98:f6:3b:bc:7e:fb:b5:69:5c:
9d:36:ab:95:af:00:69:28:49:d6:0f:85:58:0d:e6:
34:22:f8:2a:77:67:a7:27:96:dd:1e:d1:0c:21:09:
f4:57:82:a8:c3:2a:53:3f:b9:8f:ee:24:72:a6:6b:
26:c5:70:f6:5f:d6:5d:25:52:cb:a3:67:79:95:27:
f2:ea:48:cd:f2:36:4b:7c:15:47:84:82:98:db:fd:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:7C:65:F7:E9:A7:97:27:0A:35:F4:14:47:DE:59:F0:1E:11:B6
X509v3 Authority Key Identifier:
keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:34:01:a9:50:bc:82:87:6a:ed:8b:f3:fd:7b:d1:c8:b9:
0d:ff:4e:f8:c2:d9:63:2f:f0:19:ae:6f:00:2e:b2:2d:12:0f:
d8:7d:fc:7f:12:55:76:a2:7a:e1:f0:82:69:db:e5:8a:1c:98:
d7:ec:68:b7:a7:fa:af:17:4c:7c:d8:98:ab:2a:94:49:1b:a4:
8c:70:3c:90:36:10:c0:5f:95:6a:4b:05:fc:90:e5:ab:d8:48:
79:62:a0:50:06:75:ca:2f:98:5c:de:d1:56:1b:73:9b:1f:43:
0c:56:cc:0a:7a:97:66:ea:63:b9:0b:a9:01:45:29:27:fe:1a:
d2:a0:9a:0b:c2:d4:03:e7:2c:97:5c:59:b3:5f:4d:fc:13:2c:
e3:7a:a1:ff:3e:94:e9:e0:7c:33:24:4a:f8:c6:5b:f9:3a:b6:
23:c6:4e:c5:67:86:95:a8:1f:fb:27:b9:9b:bf:d3:3f:46:ee:
a7:f7:48:3e:0d:5b:81:88:84:a0:40:08:d4:65:fa:c2:59:f5:
9e:55:28:ec:7d:61:94:fd:88:37:74:6f:fb:19:34:37:27:03:
1f:24:36:8b:ab:3e:ce:9d:dd:e8:c4:88:2f:3c:84:f8:14:f7:
ac:df:45:3f:b8:8d:71:f6:85:d0:95:13:4c:31:a1:d8:84:6b:
42:47:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:29 2025 by rpki-client