Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: MbpkR2Jp7L+kqnFr5w82hK/mfEO4JdeOQZMefNE/mZw=
Subject key identifier: B3:39:BC:14:8F:EA:7B:8C:E0:15:DD:15:D8:C1:60:B5:12:C7:F7:7E
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 0198D65FDB7818D1B1FA8CA2D38658C32637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 0443
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: nfieFtZ8JpthM7w+m6VGXzd0MUmp60DuJxfsc43MjP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:db:78:18:d1:b1:fa:8c:a2:d3:86:58:c3:26:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=b339bc148fea7b8ce015dd15d8c160b512c7f77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:f1:98:b2:eb:ec:c5:54:7d:29:70:27:7d:
db:f2:03:b6:0a:e0:1a:28:ad:e6:ff:40:88:ce:14:
6d:e1:cd:89:d4:9f:cf:a3:b4:fe:a8:37:dc:02:85:
1e:64:a7:3c:87:69:ef:f3:3b:2b:b8:94:3f:2a:1c:
0f:5d:6a:f2:d2:06:db:e2:dc:b7:df:e6:2e:4d:b5:
49:45:65:95:d2:d9:cd:b7:e2:7c:d2:86:35:d4:28:
ed:e8:e3:3b:0d:6b:f2:53:8a:7b:5d:d4:96:aa:d5:
05:01:50:2e:ff:08:20:67:33:8f:ab:ff:8f:90:e7:
e8:a9:f4:d1:8e:ab:29:61:24:f5:11:ff:50:59:4c:
e9:b4:44:32:b6:b3:0f:1a:57:e3:f6:16:0c:23:46:
95:0e:a1:d3:55:c2:60:46:4b:9f:4f:44:d0:6d:51:
36:39:d1:b4:c6:a8:11:ea:73:f0:b0:c2:1d:5f:b0:
a8:5c:73:12:8d:92:01:b7:52:de:39:d9:cc:db:15:
31:9d:d3:f3:c9:ea:7c:94:19:dd:ba:11:a5:36:43:
c4:df:25:a2:0b:ff:ea:a3:b5:33:11:1e:01:bb:69:
cd:d6:81:1e:a9:b4:2a:00:6b:d3:92:e1:7b:2e:29:
db:81:67:58:bc:dd:2f:21:d2:2f:df:2b:43:fc:10:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:BC:14:8F:EA:7B:8C:E0:15:DD:15:D8:C1:60:B5:12:C7:F7:7E
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ef:29:4d:d5:6c:02:9d:7a:c9:ce:f0:1e:39:0d:0e:bf:c7:
a5:99:8f:97:dc:ae:bb:72:dc:e8:6c:34:d6:28:ab:bb:64:1b:
b0:0c:28:87:b6:69:4e:e7:cf:53:5f:5b:b0:de:0b:85:0b:c4:
10:4d:f8:9e:83:2b:d1:1c:e0:86:fb:c4:b9:ec:51:b5:1e:21:
46:3e:86:99:97:7e:16:90:6f:30:48:65:bf:a9:39:b2:47:78:
1a:6e:fc:26:a8:60:41:84:c1:45:52:7b:40:c7:58:4d:52:dd:
ba:c0:60:0c:63:89:82:a1:92:3c:40:d2:07:67:c5:9e:bd:17:
3a:bc:f7:3e:88:56:c0:35:45:98:81:db:07:a3:16:56:1c:c3:
d9:d7:9f:2b:0d:48:5c:4a:8a:76:19:9c:a4:44:d1:98:f8:ac:
3b:fc:44:b8:4c:7e:60:14:61:a2:89:fd:b0:0c:99:1c:e9:99:
95:fe:6c:51:ba:7d:60:06:90:46:70:a1:ae:52:98:d9:6b:e1:
3f:28:a7:2d:a7:dc:f7:92:a8:cb:e7:99:d6:8d:89:fe:c5:1a:
ef:64:2f:3f:35:17:fe:79:bd:c2:a7:f3:3d:d2:a9:be:ed:0a:
2f:d8:d3:85:77:c7:12:49:65:35:d5:32:b2:c2:0a:ad:80:99:
11:20:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:13 2025 by rpki-client