Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: KWk5G05hOgVM2+COn8FAINY9Y0hmHAgX30bNoME1i0s=
Subject key identifier: E2:55:46:B7:7D:73:37:3D:0B:AC:68:58:EE:9E:38:84:52:4A:60:BF
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 0197B8FDA2851070E6710045BD4D08E974C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 15B1
Signing time: Sun 29 Jun 2025 00:01:59 +0000
Manifest this update: Sun 29 Jun 2025 00:01:59 +0000
Manifest next update: Mon 30 Jun 2025 00:01:59 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: RGIZIwIaItW/TbrfR4+hBqKM86JqOuKrVRCyE5/ilrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:a2:85:10:70:e6:71:00:45:bd:4d:08:e9:74:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Jun 29 00:01:59 2025 GMT
Not After : Jun 30 00:01:59 2025 GMT
Subject: CN=e25546b77d73373d0bac6858ee9e3884524a60bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:c4:33:6c:da:8a:2d:66:c8:d2:ce:e0:98:
b5:28:2a:1c:57:c5:91:bd:1f:e1:15:ca:23:2f:53:
e0:1c:fb:8d:96:20:55:7a:fa:9e:d9:9d:97:ff:70:
60:dc:63:39:af:a4:47:d1:28:25:75:1a:c4:b5:e5:
38:11:47:5f:e5:20:24:ac:9c:a4:b0:87:0b:ca:c7:
69:c8:f9:d6:e3:ed:e5:73:e4:8e:35:d1:9c:f1:7b:
7b:48:de:ce:e0:0c:a7:d3:f8:69:c2:d2:76:d1:86:
6a:54:84:d1:1b:bf:55:a9:71:42:20:85:a8:32:f0:
91:a4:e1:63:cf:f9:41:72:f4:ac:2e:76:38:5c:d6:
2d:ab:fc:e6:43:e4:a8:d0:98:f3:61:ed:49:f7:16:
69:88:0e:d3:3d:8e:83:93:07:3d:0a:67:0c:b6:ec:
b1:50:25:f6:25:d6:51:ab:3c:5e:cd:0e:a1:db:ca:
02:f1:e5:78:e3:71:d1:b7:0e:9c:31:84:d6:f3:97:
63:20:5d:ca:a4:5f:26:73:96:33:55:38:9c:e8:c6:
3c:ab:7c:46:ad:3f:52:65:74:c3:76:39:19:cc:c2:
5f:fd:47:13:e2:a3:b2:bd:f1:75:27:ec:a3:5a:95:
3b:7c:65:0e:a0:3e:a2:46:19:63:40:b4:3c:13:eb:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:55:46:B7:7D:73:37:3D:0B:AC:68:58:EE:9E:38:84:52:4A:60:BF
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:56:05:c0:92:d2:de:f1:a0:9e:d5:2b:d0:a8:41:3b:a6:69:
d5:10:3d:8e:3b:f1:ac:27:69:3b:a6:9e:87:87:72:9d:1a:fd:
fe:8c:bc:02:0f:1b:c5:77:93:09:d3:4a:ec:a0:66:02:22:79:
2b:b2:9f:db:4f:f7:f1:2f:df:bc:4b:9e:3c:34:fc:0b:a0:f8:
0f:5f:e6:4b:41:33:3a:4c:5b:b9:33:6b:ed:ea:02:f7:1f:98:
1a:24:6b:11:43:a2:e5:ee:0c:78:ac:23:f3:ae:e1:b9:21:c6:
86:2e:7c:ad:4b:aa:c9:d5:94:b1:00:71:a7:0f:27:aa:83:f9:
f0:e1:c4:2c:5d:95:cc:03:47:d4:f7:45:fb:f2:b7:d2:a2:93:
74:8e:ad:8b:a8:19:14:53:90:8e:c1:7e:2b:7b:86:f3:d1:96:
da:d8:16:45:38:92:7d:01:1c:6a:ee:26:6d:89:fd:9a:37:f5:
fa:b3:38:ae:08:34:1f:e6:1c:f1:89:1c:41:69:cc:1c:19:43:
81:cb:ac:61:ca:69:3a:4c:74:a8:e4:63:0b:d4:ca:11:f4:b7:
a2:7c:5d:d2:21:f6:5c:0b:94:4f:6e:c1:4a:f7:d8:12:d3:44:
5c:a1:1d:a8:34:4b:9b:c1:dd:11:04:f0:0c:e9:c1:ae:06:fe:
45:de:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:57 2025 by rpki-client