Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: XG/g2QBPkSxwSLgCe6FdYf4lw7dz9fF26tpnSbZoyHs=
Subject key identifier: FF:C4:70:AF:6F:1D:E6:CE:77:55:10:11:9D:60:F1:BA:D0:DB:B0:73
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 0198D66045310F1C2A4B0BF3CED58B744CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 110B
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: iSIHEWbwa7dIx22cOppvezqEV5nileNMbb2Iiu52jDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:45:31:0f:1c:2a:4b:0b:f3:ce:d5:8b:74:4c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=ffc470af6f1de6ce775510119d60f1bad0dbb073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:82:8c:eb:7b:60:91:84:07:e5:99:4b:b4:
26:d5:b8:1b:e5:56:bc:f9:59:66:5d:13:55:d5:96:
52:f2:ed:f8:33:d5:e6:21:b8:a6:1c:b8:ea:31:99:
10:3c:85:38:55:24:66:81:8f:c1:5a:50:1f:e4:46:
43:9e:e2:29:71:06:ac:e9:50:c6:c6:1c:9a:35:9c:
5c:ac:f7:d3:54:69:43:2e:bc:bd:4c:1f:f3:6b:80:
f4:d3:a2:c2:7a:6a:27:8f:31:c2:5f:44:c4:9e:af:
22:f0:a9:30:11:62:73:d2:67:e3:57:eb:e6:12:68:
1c:7b:e8:67:f5:d0:52:3b:fe:6c:c8:43:c3:f2:7d:
50:be:97:19:de:24:33:99:f3:a5:9d:e8:6a:8b:97:
4e:b7:5d:11:09:2b:41:24:d6:8f:fb:fd:2d:74:cc:
15:bf:17:50:92:6b:e6:34:fd:47:96:8a:b9:03:e9:
6b:4d:3a:f4:16:9d:9f:91:8f:61:a8:ad:f2:96:dc:
aa:9a:4d:a8:8a:f9:21:33:4d:3c:2a:db:8e:d3:3e:
09:57:5e:71:6b:1b:5d:1d:cd:b4:05:0a:f3:22:75:
ea:03:c9:3e:ff:09:55:16:cf:6c:3a:76:f8:22:bd:
a8:70:b7:49:db:3c:88:82:8e:57:c3:c0:f9:82:ac:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C4:70:AF:6F:1D:E6:CE:77:55:10:11:9D:60:F1:BA:D0:DB:B0:73
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8f:04:40:a0:d4:42:c6:e7:02:32:31:46:77:aa:55:5c:6b:
18:5e:b3:09:3e:49:e9:08:a7:77:6e:2b:59:de:67:5b:71:2b:
2b:e8:52:46:c1:c6:af:79:72:82:09:e2:5d:21:b5:3b:e3:a1:
95:3e:80:01:16:d1:93:1d:75:d5:70:ad:5e:09:c7:16:e0:3f:
fc:23:f1:b3:fc:e2:5d:be:fd:50:13:a6:e1:6d:0c:c2:91:75:
9b:c5:db:65:49:79:b6:a9:a2:b7:d4:09:96:e0:9c:17:7b:d2:
50:76:87:08:3c:85:15:89:96:c2:89:32:b9:12:32:3a:75:c2:
27:50:c9:5f:9f:72:cb:d1:78:e5:f5:56:b0:bd:be:18:fc:4d:
f3:5f:d6:5b:22:93:03:b3:56:8e:9f:21:2b:ef:b0:06:d8:84:
55:77:1d:64:1a:bb:8d:f1:d1:1a:14:a4:67:67:60:83:e6:3c:
ea:42:ce:c0:aa:11:28:10:da:96:57:f5:c4:06:3f:4c:6b:38:
c7:a1:3a:34:93:2f:01:23:a0:a1:78:ee:a2:bb:f0:55:a1:20:
51:c3:3a:a4:66:aa:8c:39:6c:dc:1e:5c:bf:b2:93:6d:f0:a1:
86:64:0e:e8:68:81:25:e3:31:8e:d5:bc:9f:05:12:d6:21:73:
e5:a1:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:21 2025 by rpki-client