Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: FP9zYbUhcg9KUw0Hf69EI9C/huhNbv9Cm4yPtqZVE84=
Subject key identifier: 87:5D:27:19:3A:0F:0E:14:69:48:9D:6A:26:B0:CE:06:AB:B3:0E:1D
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 0198D4745E5CC123AC576E422E8C3B7D2BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0E65
Signing time: Sat 23 Aug 2025 01:04:12 +0000
Manifest this update: Sat 23 Aug 2025 01:04:12 +0000
Manifest next update: Sun 24 Aug 2025 01:04:12 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: HecHI0+lcFssGK7avd4Fp7zzUO/im3Y6WVvCqlPA5GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:5e:5c:c1:23:ac:57:6e:42:2e:8c:3b:7d:2b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Aug 23 01:04:12 2025 GMT
Not After : Aug 24 01:04:12 2025 GMT
Subject: CN=875d27193a0f0e1469489d6a26b0ce06abb30e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:0e:80:50:9b:d1:03:1c:08:9d:b2:e5:54:
96:2d:50:39:be:14:b1:13:b5:63:d8:46:d8:06:13:
a5:79:ba:99:bd:e3:cb:42:9d:13:0f:56:57:b3:a7:
09:48:84:1b:94:46:2e:38:17:7a:75:7c:00:d0:83:
20:5d:e2:ba:68:e2:de:67:14:37:d4:f9:6e:5f:5c:
be:8a:ac:35:23:fa:a3:29:a2:cc:1f:10:9f:83:a9:
83:d9:e8:a2:73:de:dd:c2:8d:99:b4:a3:1d:2d:f4:
93:d1:a8:1e:db:be:f8:85:7f:76:96:89:d8:58:51:
6a:8a:d7:e5:75:1c:13:de:ca:36:a4:18:c7:4d:31:
cb:74:78:b4:e1:6d:d4:d2:fa:32:14:30:f0:9b:51:
1e:13:90:5e:01:6d:3f:06:b0:ca:01:21:9c:b9:38:
f1:a1:21:15:ff:47:64:f4:e1:66:05:3f:91:48:45:
95:cb:99:b1:6c:03:ef:ac:fb:6a:1c:a0:0a:d2:da:
6b:53:b4:aa:cd:ea:52:25:8a:81:da:d2:7a:02:58:
c2:91:50:d7:a6:7f:ee:df:15:ec:85:96:56:b0:6c:
86:10:c4:16:51:a9:53:fb:61:77:d6:83:97:4c:7a:
9b:d1:b0:8c:a3:a7:e2:98:ac:b5:81:8d:29:97:73:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:27:19:3A:0F:0E:14:69:48:9D:6A:26:B0:CE:06:AB:B3:0E:1D
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a1:59:92:14:39:d1:f1:a1:c4:8c:96:a0:2e:20:82:dc:d6:
57:96:ce:84:a9:a0:76:22:02:4d:85:c4:1c:b2:1b:d8:a3:96:
8f:7b:c8:5c:d0:39:8e:bf:79:f3:db:ef:c4:6c:65:c3:db:ad:
42:1f:30:8c:42:72:75:a7:d6:60:62:9e:7d:14:94:c7:c9:5e:
2c:8e:0f:1b:45:80:18:72:c6:73:f1:8c:e4:51:8d:f7:c1:b5:
e5:ec:b0:e2:8b:d4:7d:16:d5:e2:ca:72:b6:25:bf:6c:a4:0e:
d3:f9:1d:29:77:34:2a:2d:1f:3a:47:f0:da:16:80:8d:52:64:
3d:57:38:7d:43:bd:4a:18:b1:54:86:6f:10:60:d5:39:d5:76:
9e:9a:ff:07:8b:2e:7c:1e:86:1d:13:c9:0c:37:20:74:b0:40:
51:11:5a:bd:77:5c:88:9f:56:5a:80:fa:4a:7d:68:40:db:d4:
10:a2:e3:55:d9:2c:26:da:44:38:fe:45:c8:c2:25:e4:9e:d0:
f7:73:a1:cc:ed:22:26:39:c0:9e:24:d4:ab:3c:54:7d:9c:36:
de:4c:1e:a3:8d:c4:a7:20:6c:13:10:79:c3:dc:fd:51:86:6b:
25:c4:fc:5e:19:2b:e7:96:f0:d0:8d:f2:9e:57:fb:74:d0:24:
a5:90:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:38 2025 by rpki-client