Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
File: zRvlrhITa5bNnXilwkykct6Ixlg.mft (raw, json)
Hash identifier: 6DapiYVKMFFnWG3yjDfPmwfShGbZfkHYHNPq65hk17w=
Subject key identifier: 36:7A:79:33:5C:9B:97:FA:B3:3B:B8:FE:7C:21:79:FE:A5:66:80:9D
Authority key identifier: CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
Certificate issuer: /CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Certificate serial: 0198D705D21D728914C8E3A4680A2F6A0FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
Manifest number: 087D
Signing time: Sat 23 Aug 2025 13:02:19 +0000
Manifest this update: Sat 23 Aug 2025 13:02:19 +0000
Manifest next update: Sun 24 Aug 2025 13:02:19 +0000
Files and hashes: 1: zRvlrhITa5bNnXilwkykct6Ixlg.crl (hash: HM9KoYLqQABl3gbKg1rFFFB8FueAIj17EHCtsqakRos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d2:1d:72:89:14:c8:e3:a4:68:0a:2f:6a:0f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Validity
Not Before: Aug 23 13:02:19 2025 GMT
Not After : Aug 24 13:02:19 2025 GMT
Subject: CN=367a79335c9b97fab33bb8fe7c2179fea566809d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:24:25:c7:95:da:5a:fc:ac:ca:6f:e4:e4:
a0:60:1c:d5:d0:03:00:89:1e:72:aa:67:7e:56:cf:
1b:b8:c3:b1:9d:c1:21:ff:95:de:af:06:c7:61:28:
05:b4:9d:13:64:dc:4c:9e:6e:b7:cb:f0:8a:4e:4e:
36:8b:a7:b8:23:0e:d3:87:49:7e:12:47:7d:b6:15:
4b:3e:cd:6d:76:e7:0b:91:37:2f:99:2f:ca:bf:10:
67:49:d8:8f:df:11:92:15:05:8b:24:a5:05:48:b3:
4f:d0:d7:30:d9:32:6e:18:cd:56:50:3d:0d:02:5c:
96:86:54:ad:ed:26:d4:5c:a5:ea:b5:b1:39:1e:e5:
e3:fb:57:59:c9:90:22:3c:1f:5e:a0:54:19:38:b8:
c1:fe:ab:41:b1:df:ee:ef:61:f4:7b:6e:ea:a0:af:
42:2e:a6:52:64:07:19:4e:45:e6:c7:d6:e3:c0:48:
5d:a8:2f:5c:1e:5a:aa:7c:6a:1b:4a:ac:2b:41:7a:
b2:c4:19:6e:78:d0:0e:db:20:74:b0:74:61:3c:6a:
80:65:d8:03:cb:dc:09:f1:68:18:ab:f6:77:1a:d1:
d8:3e:b5:51:68:0a:9e:da:80:01:bb:8b:ec:2b:2a:
f6:50:96:21:24:b4:ce:e0:79:a6:0f:a4:8a:01:04:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7A:79:33:5C:9B:97:FA:B3:3B:B8:FE:7C:21:79:FE:A5:66:80:9D
X509v3 Authority Key Identifier:
keyid:CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:38:78:ff:33:8a:c4:6e:98:9d:6f:f8:0d:c8:30:94:30:cd:
f5:86:91:57:9b:78:67:85:f1:88:a9:bb:07:9c:02:cc:68:73:
45:d0:f7:1b:c3:81:78:4a:b1:49:94:43:37:9c:6d:ff:2e:7a:
2d:9d:ed:fb:89:85:53:f9:94:28:5b:14:90:91:4d:03:98:13:
75:80:c8:5d:3e:2c:d4:69:e9:f8:50:19:e7:8d:6b:4d:fb:15:
16:7e:0f:a3:1d:55:86:8b:41:dc:01:1c:22:60:00:fa:78:74:
d1:c9:8e:03:df:26:38:ae:cb:4f:2f:e1:c5:ba:de:4a:2c:20:
3f:92:9c:29:71:2e:ae:8e:2b:06:a1:fd:ee:e3:67:a6:72:59:
49:c6:8c:0c:cd:76:ad:8d:8b:5e:12:49:71:aa:da:bd:d8:ea:
0e:37:1f:af:73:4b:3d:57:d2:41:6e:64:61:2b:8e:a2:33:5c:
da:7f:66:28:2b:12:2a:48:9d:c3:58:ea:cc:8e:4e:7a:26:c4:
b2:d3:f5:da:bd:f2:b9:26:cc:b8:1c:f4:4b:fe:dc:d4:fa:41:
92:a3:57:68:bf:b2:4d:33:88:1f:ca:2e:40:12:50:46:9d:f7:
e3:9a:79:33:3b:0a:74:25:66:5d:74:f3:35:2d:31:bd:5d:cd:
bb:64:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:48 2025 by rpki-client