Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File: mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier: I7aRbDZXAnGNMhMJgv3sYUHexR1AJAHZ97y5HKOand4=
Subject key identifier: DC:D0:A3:8D:2C:D4:0D:09:8D:AE:F9:4E:CF:90:87:29:87:88:13:29
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer: /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial: 0198D4E0BE29BD7148F75B2D388BFD12E07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:35 +0000
Manifest this update: Sat 23 Aug 2025 03:02:35 +0000
Manifest next update: Sun 24 Aug 2025 03:02:35 +0000
Files and hashes: 1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: Is1L31/0C3MICEFdoZNC73WfUMOcuprFLNnpBsD0x7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:be:29:bd:71:48:f7:5b:2d:38:8b:fd:12:e0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Validity
Not Before: Aug 23 03:02:35 2025 GMT
Not After : Aug 24 03:02:35 2025 GMT
Subject: CN=dcd0a38d2cd40d098daef94ecf90872987881329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:5e:f7:ba:76:54:61:73:c0:02:b5:6f:94:
f8:b3:cd:f8:6a:84:8c:e0:c9:a0:82:a2:30:a2:79:
20:04:c9:8d:96:91:85:6b:c8:4d:ea:d4:b9:9c:74:
56:30:bc:50:16:4f:30:8a:1d:d5:f9:8e:9d:3f:c3:
54:7e:27:f4:51:67:bb:fa:c2:ba:24:e6:1f:29:28:
f6:49:aa:b5:a4:90:16:ac:7d:0b:03:69:16:cd:87:
a5:be:f6:28:a5:ac:03:63:2a:6d:a0:45:99:7e:36:
cf:e6:90:53:66:bb:f8:b9:30:07:83:9e:cb:90:e6:
47:8e:15:00:7e:30:c3:e0:e2:a3:04:fb:ec:7a:b7:
aa:3e:36:1e:f1:85:6f:d4:e0:9b:9e:50:a3:85:76:
78:75:1b:72:c9:31:85:98:83:f6:36:99:79:69:d0:
88:15:d8:7e:50:c3:0d:76:cc:ee:7a:1f:fc:22:d4:
ef:31:6e:d6:35:69:1b:3b:3e:23:06:bb:05:84:89:
01:3c:11:a9:80:e5:56:c9:03:4d:c2:50:61:9f:22:
bc:98:c0:ac:8a:28:f4:1f:84:0b:e1:6f:f7:53:05:
01:1f:7f:5c:8e:89:06:ea:f0:87:92:43:59:14:f1:
a6:5d:fb:73:12:7e:73:56:bb:7b:17:1b:d2:3e:e4:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:A3:8D:2C:D4:0D:09:8D:AE:F9:4E:CF:90:87:29:87:88:13:29
X509v3 Authority Key Identifier:
keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:26:14:d5:60:bd:08:88:4f:0f:47:d9:64:94:77:80:eb:
f5:bc:72:ca:ef:57:27:73:7b:0d:79:7b:64:52:5c:87:a8:b4:
ff:9e:e9:fc:04:56:cd:62:8d:f4:04:b0:dd:3e:4b:e0:ba:36:
3c:c7:04:5b:01:13:b8:00:ac:27:06:4c:4d:4f:29:a9:d0:68:
d6:c7:f5:6f:d1:84:64:07:40:27:69:1e:f9:6a:f0:a9:bc:88:
7b:bb:fb:31:6c:fb:25:3f:9d:95:63:d5:5b:22:de:e5:2b:32:
62:2a:76:fb:cb:76:7c:3d:35:99:9e:a7:83:76:0d:af:7d:4d:
bb:bd:e4:13:24:d9:df:80:5b:88:31:b0:3e:8f:a8:1e:4b:8b:
0c:95:3d:b6:72:1a:d3:c3:54:99:b8:15:4e:83:59:ae:b7:ff:
80:94:93:ac:d1:c5:fd:a5:e3:cc:69:2d:60:7d:2a:f6:98:04:
09:ad:f6:66:89:c4:50:64:1a:c3:87:5c:aa:e0:7b:57:70:be:
0c:29:f2:dd:6e:a3:ea:d8:51:a2:93:54:19:d3:3f:9b:0c:a8:
c8:5f:1c:ba:2f:d7:38:97:b1:73:65:c4:55:78:20:96:e1:9c:
81:f8:1b:fd:3c:ff:88:07:0a:94:3c:4d:8f:00:38:a8:c5:8e:
f4:f8:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:23 2025 by rpki-client