Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: 09OimxdaPiNgSwovrHs71ToOSkrVA89UioDIvdnvKgY=
Subject key identifier: BB:D4:97:46:62:CC:A1:59:F4:1C:91:70:AE:C7:1A:14:F2:8E:74:77
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 0198D73BD6612EC74E3C4B398FD968EF6E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 0F1E
Signing time: Sat 23 Aug 2025 14:01:19 +0000
Manifest this update: Sat 23 Aug 2025 14:01:19 +0000
Manifest next update: Sun 24 Aug 2025 14:01:19 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: 7d6W8aqrAxVPfEftxbt1iKdDVWIKUnXZn+xk4iUIgkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d6:61:2e:c7:4e:3c:4b:39:8f:d9:68:ef:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Aug 23 14:01:19 2025 GMT
Not After : Aug 24 14:01:19 2025 GMT
Subject: CN=bbd4974662cca159f41c9170aec71a14f28e7477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:b3:30:6c:8f:4e:e7:5c:e1:42:48:9a:cb:
4e:2a:ed:16:c9:ea:3e:62:c6:79:c3:28:99:e5:32:
c7:c9:d1:bc:33:60:3a:ba:4c:52:96:0c:1c:d9:0d:
3a:d7:6e:91:fb:af:8e:17:ae:b2:08:1b:73:19:9a:
ad:c7:3c:d6:52:7d:59:f5:4d:3b:85:f8:bc:43:c6:
ca:ad:e0:af:11:09:b2:a9:e8:ed:ee:e7:6a:88:28:
0f:81:df:10:36:b3:a9:44:06:6f:21:bb:93:0f:bc:
36:12:1c:73:6b:6a:ee:86:12:99:bb:0d:6c:5d:51:
37:7a:a7:34:af:0a:36:a8:e4:2b:67:27:60:05:03:
f4:e9:b8:d8:67:57:5e:57:4a:82:e1:52:3a:54:63:
8a:0a:17:95:31:ce:68:31:b0:82:14:a6:9b:3b:6b:
b0:ca:b0:a5:13:48:a1:a2:74:0b:a4:4c:71:0b:8c:
2a:55:0d:6d:09:09:87:b9:de:de:0f:28:e4:e1:56:
70:44:c0:28:37:e2:4e:a2:10:9c:80:82:38:44:0e:
38:bb:8c:6a:02:cd:84:1f:36:b3:66:d0:03:7a:7b:
c5:d6:aa:9a:32:0b:30:c9:97:a3:a5:e4:2f:71:e1:
d5:74:57:40:b7:a4:09:7a:2c:3a:8a:d3:13:ef:d3:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:97:46:62:CC:A1:59:F4:1C:91:70:AE:C7:1A:14:F2:8E:74:77
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f0:9b:1b:f4:bd:c0:cf:f0:e1:9c:a5:c7:ca:74:86:c6:7e:
9e:1a:aa:73:18:5f:41:55:3c:8c:da:da:84:78:76:d0:8a:12:
b8:0a:ce:31:ae:26:1a:28:65:05:04:74:95:e1:68:c0:42:3b:
06:29:3a:8d:75:2c:6a:32:04:b8:c9:56:42:f9:a6:bc:89:32:
d1:41:17:20:d6:36:a9:49:f8:3b:29:db:86:2b:4f:73:52:1f:
0c:de:eb:8e:08:09:ba:30:32:29:9b:ac:f2:ea:c8:f8:05:65:
59:93:14:89:95:cb:1b:d1:57:3d:55:49:d3:10:e0:5b:d5:03:
8a:6f:19:3f:8f:b7:81:23:85:bd:e7:63:06:1d:e7:f5:17:a1:
98:32:7f:56:b9:6b:1b:6c:e1:6c:06:2a:16:74:a6:9c:6d:30:
01:b4:8d:6c:36:8e:e4:46:6c:14:95:d0:bf:b4:13:30:82:21:
8c:3e:b4:04:55:a0:99:85:9c:f3:77:d9:86:7c:d6:6d:16:94:
d5:5a:d4:25:50:b1:7e:32:89:03:cd:85:09:9a:37:4c:11:d9:
14:ba:e8:c4:b9:38:d6:bf:72:81:2d:3a:08:c3:78:b4:97:ae:
88:14:1f:c1:4f:d5:ae:64:2e:ea:4f:12:87:17:ea:0e:e3:5a:
19:12:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:31 2025 by rpki-client