Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: KUU6NYhRMLTCzuM38Hin2T3/IVtYEbYektPel6hBttc=
Subject key identifier: EA:AD:FB:A8:6F:AC:48:E6:82:81:25:A0:4E:2A:DE:65:57:CA:EC:CE
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 0198D66040820107E34468C25D402D5C3DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: d/sZp2sYF00EtQdg+h9Ysno9s7ZwYFRA7Ikvva7hHh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:40:82:01:07:e3:44:68:c2:5d:40:2d:5c:3d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=eaadfba86fac48e6828125a04e2ade6557caecce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:7d:d7:dc:a3:e7:f4:a7:e3:fa:f7:26:a5:
c9:ba:41:4b:99:9c:0b:1e:c3:e3:cf:63:bd:6d:af:
35:9e:6d:98:e2:79:f3:cd:ff:36:c8:9d:23:e4:55:
ed:25:b2:4e:fc:d2:d2:70:fa:05:fb:07:71:38:6a:
81:82:bc:3f:b3:73:37:74:7b:b9:57:3a:b7:9f:ca:
b2:4f:c7:48:69:6a:32:2a:c1:53:e0:67:de:58:40:
50:af:ed:10:75:5b:f6:76:5f:6c:c0:f5:3b:4e:3f:
f4:87:57:61:4b:bc:b1:8e:64:62:8f:c3:97:8f:3e:
b6:36:2e:b7:c7:c8:93:cf:79:a7:cc:ea:a7:d7:c0:
11:46:fe:33:89:48:08:85:1a:c1:db:ee:a4:ab:ea:
44:fb:80:3a:39:79:60:d2:f2:40:94:41:b9:9e:7e:
c2:7d:63:17:c3:a6:de:46:77:72:e0:60:e6:4f:ed:
2d:cc:8e:1b:e4:08:ac:ff:5a:49:2d:04:34:73:f4:
63:47:22:42:49:8b:b2:0e:a7:96:b6:2d:f9:01:42:
d4:69:a1:10:b1:e4:4a:82:51:0c:a1:b3:88:1d:34:
b2:2c:8e:94:2b:4c:4f:6b:33:3b:e5:43:c8:93:57:
cc:b0:28:6b:ba:2e:0c:79:ba:6b:ed:93:7a:4a:85:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:FB:A8:6F:AC:48:E6:82:81:25:A0:4E:2A:DE:65:57:CA:EC:CE
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:ec:9b:a8:91:1c:e9:6a:15:91:47:da:b9:8f:39:a6:1c:
77:16:7a:6e:44:14:50:1f:22:58:77:dc:02:24:c3:7a:2d:45:
c1:94:69:64:a5:64:0e:7d:64:58:35:74:83:8e:5d:fc:7d:91:
12:9a:26:86:86:03:dc:bd:bf:34:d0:f9:38:ab:89:99:c5:d3:
e0:ea:55:3c:e8:02:77:93:d1:07:65:7d:80:96:74:c4:02:27:
6b:4a:a9:9f:66:3e:74:b4:91:89:c2:87:8c:03:fe:ff:8b:f8:
5f:8e:b2:57:e4:0f:87:a7:c9:80:77:70:d1:9a:a5:45:a5:93:
55:b8:17:5e:d7:63:e7:11:be:4e:2c:8e:56:e1:81:f8:da:29:
cd:fd:89:80:f5:e2:19:7a:8a:41:3d:dd:4c:55:eb:02:28:17:
b1:79:b6:6d:f0:7a:3f:86:6f:de:ff:60:2a:9a:87:4d:39:8b:
c7:1b:b5:5a:e4:0b:12:4f:1d:ae:65:6f:f9:40:ac:cc:fb:74:
8a:ea:14:80:d3:cc:49:73:b7:b3:00:d6:26:f9:85:ec:4f:6c:
82:f5:8f:13:71:3e:eb:46:b8:83:ef:f9:05:df:da:ef:66:7e:
80:6f:ef:5d:08:0a:aa:b2:a5:5a:16:cf:fe:8a:4c:aa:18:3d:
ec:eb:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:59 2025 by rpki-client