Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: VASJ3HG0uaLbZC28rFby2jvHOsqUboDrOgYDknTOCfI=
Subject key identifier: A8:22:51:C2:60:B2:28:EA:3D:12:94:DC:53:88:A6:AA:32:2E:A1:A8
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 0197B6A1FA2D03EE372C71C2629DD253942D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: xMWQBh6GXQeGAHuYhDn/9YX4aXnn07hOq8rGmaHpWi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fa:2d:03:ee:37:2c:71:c2:62:9d:d2:53:94:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=a82251c260b228ea3d1294dc5388a6aa322ea1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:d9:16:d9:5e:76:69:a1:20:e9:96:36:40:
19:a4:c6:85:91:58:31:df:32:b0:63:6f:bc:e7:60:
38:17:01:21:f1:77:0b:59:2c:aa:6f:ba:2f:40:88:
a1:62:5d:aa:5d:25:22:fe:78:d4:89:e7:0f:fa:6d:
c3:37:d6:50:bd:43:70:53:62:8d:b1:aa:c0:75:8f:
2c:3d:13:58:a4:57:e5:b7:4c:f9:e6:49:c4:98:9a:
9f:2c:9c:0f:55:80:5e:4d:95:c6:ed:98:9a:fd:e1:
23:2e:69:cf:77:ee:02:10:5a:6a:86:28:1e:dc:50:
9f:fb:14:ce:85:2d:55:3e:eb:61:0e:6d:82:75:b9:
17:6f:13:da:1c:09:ac:25:7c:e4:47:e6:6c:f7:48:
3a:63:e2:be:b6:5f:d6:28:14:4b:5a:31:46:4e:b3:
47:38:02:40:7d:be:dc:cb:d9:01:84:7c:ca:80:8f:
34:fc:8b:be:3d:37:77:11:57:50:bb:e1:74:52:d4:
05:02:b0:5f:bf:16:9b:e9:89:4c:8c:db:1d:bb:09:
e1:66:01:77:cd:2c:a3:a3:6d:36:af:e4:d3:8d:ac:
13:30:04:34:85:17:3c:f8:4a:86:16:68:fd:bd:01:
5a:63:bd:55:0c:a4:e4:d9:9d:d6:a0:f2:e5:18:5b:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:51:C2:60:B2:28:EA:3D:12:94:DC:53:88:A6:AA:32:2E:A1:A8
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c1:d8:2b:3b:68:ca:68:07:86:53:45:40:1e:4f:37:ef:4f:
81:06:d7:9f:9e:93:e0:04:ac:ce:f3:62:ec:23:38:85:a3:c3:
3c:6f:61:08:e4:78:ae:ef:b5:86:2a:97:bd:66:07:7c:de:68:
56:20:25:57:8d:65:4c:6c:c8:b3:ab:38:f0:cc:45:78:4d:8d:
f6:70:61:52:0f:c5:40:58:bc:50:cc:ba:61:22:d9:0f:74:2c:
eb:78:51:eb:21:20:c9:b5:af:2b:db:dd:40:2e:ed:07:70:60:
0c:dc:0f:0d:f0:63:51:07:b8:5d:19:2a:7f:df:c9:93:1c:c9:
38:3a:d0:84:1f:96:ba:c4:a1:32:f5:a1:52:26:da:a8:e2:e6:
ba:5c:a5:dd:08:6e:57:26:c7:f7:0c:36:5c:c6:fd:92:da:45:
97:fe:58:b8:36:ba:d5:9a:01:4b:3d:2f:d7:3c:f9:e0:22:b5:
75:91:11:10:10:ff:e0:cf:6b:08:1c:bf:29:4c:3d:bc:d9:d8:
15:91:5b:b8:99:7f:db:02:3a:90:00:85:81:c1:c2:52:db:e2:
44:d3:4c:e2:c1:1d:1d:4f:60:62:36:66:8e:bb:e3:0f:04:9a:
e1:88:22:9f:77:e0:90:65:ec:53:51:48:1e:57:f4:4d:da:b7:
6e:fe:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:50 2025 by rpki-client