Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: RxgJ1XcutcUt50OB5w2qi1637qii7Dx8Abp0khAAF7Q=
Subject key identifier: 15:70:C1:B5:B9:E4:50:0E:58:0E:E2:1C:A2:28:04:94:87:E0:4F:07
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 0198D583A228C114CEDFB205C8C671163EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0990
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: MDccEVMiqB/44/VfgzomsjEotM7rtcAm3y+YxvB5c0A=)
2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a2:28:c1:14:ce:df:b2:05:c8:c6:71:16:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=1570c1b5b9e4500e580ee21ca228049487e04f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:79:e8:59:4e:cc:8f:82:cd:c9:ab:13:bd:
43:5f:53:fd:d5:9c:5e:5d:f5:73:e8:e4:d5:33:3e:
f8:0d:d2:79:f6:0a:88:55:f7:66:38:01:f7:45:a6:
25:6f:43:96:80:b5:74:df:35:b2:13:80:e6:18:57:
45:ad:36:54:89:63:75:c4:ac:da:c8:d1:2d:cc:7c:
73:00:d0:7b:26:53:bb:79:7f:8a:f4:83:cb:b2:43:
93:e7:c8:c5:f3:9f:b8:fc:ef:fb:56:03:88:e5:1d:
91:d4:30:a0:35:21:4a:30:89:35:28:b9:23:dc:89:
cd:32:3a:26:9e:a1:5c:61:f0:90:28:20:25:cd:26:
e4:09:73:f2:83:22:7e:75:05:cf:c0:dc:56:72:a9:
86:79:89:1b:08:63:c0:85:3a:8f:d1:d6:6e:26:fb:
17:35:51:82:56:fd:d8:3e:34:6a:6c:8c:e1:87:63:
68:75:b2:13:e4:31:73:f1:f9:06:cb:f2:ee:8a:44:
83:11:68:28:d6:2a:60:b1:42:e7:19:3e:f3:48:fb:
47:3c:05:d3:b1:6e:7a:31:41:a7:a6:b8:aa:47:48:
83:47:ed:e9:d6:23:81:8c:21:8a:28:47:20:e7:ba:
61:03:17:04:d7:0f:02:ac:d3:74:95:d4:72:fc:7c:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:70:C1:B5:B9:E4:50:0E:58:0E:E2:1C:A2:28:04:94:87:E0:4F:07
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a9:0c:40:ce:d9:a4:60:cb:e0:d4:3d:9a:40:64:b1:a0:06:
dc:9c:6b:67:f6:cf:24:f4:1c:34:1e:c6:a5:4e:f5:82:33:9a:
13:25:bf:43:22:20:3f:7e:58:51:69:a7:61:1c:53:b1:82:d6:
b8:d1:83:db:36:58:ae:bf:4c:a4:3d:11:6b:bd:18:f5:1a:71:
97:4e:e0:c8:59:c2:20:da:1b:20:87:9b:3d:6a:38:22:87:d5:
b9:ab:26:a6:fe:3c:c9:fa:c8:be:bd:67:eb:61:1c:cd:50:3c:
1b:7f:79:bb:1e:ab:c1:3d:8d:3c:b6:7e:e8:11:c0:2b:48:e2:
ba:92:d5:d6:f5:01:1f:6e:c0:54:8a:21:51:cd:76:6f:39:d8:
ae:fc:d0:85:f8:44:aa:c0:fd:32:9c:16:1b:05:04:38:e0:0d:
0d:87:f8:10:fa:96:c2:35:d7:93:0c:0d:21:a1:43:95:3c:b4:
7b:b3:13:2b:44:28:8e:11:cd:59:be:77:a1:b3:7a:b6:32:17:
a1:10:3f:de:0f:23:18:2a:e4:3b:27:d7:2c:40:77:ca:50:80:
84:a3:dd:b4:93:6b:fc:a5:c1:c7:3d:f1:0b:b3:51:65:55:35:
57:13:4d:a8:0b:3e:5b:c2:99:99:a4:1d:77:1f:b0:3f:1c:7b:
a2:26:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:24 2025 by rpki-client