Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: c/Pu+mQ4gy2UH9RBmnMjQv3+95hzovtE7vis4GGSgsc=
Subject key identifier: FD:13:5B:9C:1A:7F:08:B6:36:69:EC:1C:A3:72:64:D4:7C:C2:2F:AA
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 0198D4E055D050A499787DD3785825D34D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: dnlnjDWosr8KNl3VDK/+GrGT8oqeThiOxZHLAsAWcOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:55:d0:50:a4:99:78:7d:d3:78:58:25:d3:4d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=fd135b9c1a7f08b63669ec1ca37264d47cc22faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:56:48:0e:40:30:7f:93:6e:a1:b7:91:c1:
16:45:d1:03:fa:4a:b7:b7:be:5c:9c:fd:23:6e:db:
2a:65:af:ce:79:9f:75:b0:e6:74:ef:a2:da:75:7a:
88:e0:98:c3:13:18:75:1a:05:cb:b6:91:d6:72:bd:
56:7f:6a:33:ac:0e:1b:53:89:e6:8f:25:9d:58:9e:
7c:0a:65:47:0b:66:e1:7f:1c:8a:ce:68:7b:36:85:
2a:54:01:67:52:8c:f3:be:3e:3e:af:ae:5f:68:a2:
b7:86:88:ba:14:60:91:d6:ec:f5:11:05:56:90:07:
c8:fb:69:21:2f:df:6a:84:d2:05:18:63:13:ea:9b:
65:ec:55:0f:e6:78:a7:3e:a4:d9:37:54:f5:a2:ae:
e5:09:fb:ec:02:fb:89:d0:fa:8e:61:80:1c:aa:16:
5b:ef:6a:11:dc:3b:4a:6c:d9:d7:8b:97:bf:68:5a:
a9:39:3f:ac:d1:5f:1b:04:37:a8:54:21:6d:39:a8:
9b:23:d3:49:28:d6:e1:8c:1c:d5:98:e0:de:aa:26:
71:cf:d7:ef:cc:ae:8b:f5:4c:dc:43:54:63:d1:9b:
88:43:91:19:f5:fe:4f:ef:f7:6c:b5:ff:84:0e:04:
2d:64:3d:a5:de:d2:16:d1:86:54:48:3a:64:de:93:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:13:5B:9C:1A:7F:08:B6:36:69:EC:1C:A3:72:64:D4:7C:C2:2F:AA
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:31:4d:75:2b:77:6f:c8:d1:38:ea:27:21:90:3b:ee:67:b8:
02:df:67:25:d9:f9:93:0c:37:07:bb:f5:d5:95:16:60:4d:94:
48:4e:0a:b0:6a:2a:48:b7:45:86:f8:5c:83:18:15:1b:69:66:
60:87:59:88:b7:8d:82:2c:a6:04:67:b1:3d:9e:59:29:8e:41:
3e:72:84:ce:e6:87:59:c9:34:d1:f8:d8:30:96:4a:34:a6:27:
38:8d:b3:ba:10:3e:e2:7b:25:3c:46:35:a3:3a:22:28:4b:44:
6f:7a:ec:1a:10:bd:fd:03:ea:93:57:13:1b:7e:4a:24:c8:da:
af:67:0e:c0:e9:fb:d2:26:47:cb:52:1f:ab:b5:84:c6:b0:91:
93:9d:b0:9a:bc:43:0d:9c:33:26:13:27:54:9a:3f:95:58:ba:
ed:93:e2:c9:16:ca:10:ad:03:c7:8e:d6:1b:93:a0:7e:7c:1e:
f3:91:15:af:5a:9b:aa:b5:a5:77:16:f4:37:8a:17:53:68:30:
94:40:71:db:cc:76:00:e5:a9:da:9d:74:c0:4a:d0:bd:a7:12:
44:99:15:91:6b:73:f2:f8:f4:17:ea:55:8a:69:f7:8c:68:6f:
41:2e:5e:08:fb:ba:04:bf:32:6f:09:45:31:f3:32:72:8a:af:
01:04:7c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:18 2025 by rpki-client