Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: 4ww+gcSiVCgjKpWlpnhOM4EBMIXL3i9jEJMzH3G6uuA=
Subject key identifier: 08:8C:6A:72:2C:71:E0:35:98:92:98:33:00:B7:82:B0:10:EC:42:95
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 0198D70630F3091A358C78214B1183E649D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 11F3
Signing time: Sat 23 Aug 2025 13:02:43 +0000
Manifest this update: Sat 23 Aug 2025 13:02:43 +0000
Manifest next update: Sun 24 Aug 2025 13:02:43 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: 8+M6WV38eGSSxTOwdzFhAyx1F5nX87Crtkz5dzsVl5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:30:f3:09:1a:35:8c:78:21:4b:11:83:e6:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Aug 23 13:02:43 2025 GMT
Not After : Aug 24 13:02:43 2025 GMT
Subject: CN=088c6a722c71e0359892983300b782b010ec4295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:99:0c:79:d4:91:6a:8e:33:7b:07:c2:c9:
11:6d:8f:18:be:4a:6a:a2:48:0d:0c:30:29:42:ba:
81:67:e3:96:48:8c:39:ba:ad:1e:18:ae:d0:d3:5b:
45:be:e7:e2:6c:b8:76:8d:77:b7:29:3c:fd:28:5f:
49:eb:56:92:e8:82:1c:c6:65:2c:3f:2f:a6:77:db:
64:93:15:c6:e6:b2:dc:b9:fc:2e:12:69:8b:02:af:
63:89:f2:9e:cf:e7:8e:d5:39:35:6b:7f:05:a2:ed:
ab:7d:5e:c3:7c:bb:84:01:cf:d1:e7:41:6b:0b:4c:
ad:cb:e9:91:80:2c:54:32:32:51:4e:34:98:d2:48:
88:c6:fa:20:b4:ac:03:ff:80:12:26:e8:5f:01:3c:
17:fa:98:8b:8c:fc:1f:97:3b:20:47:50:11:46:a7:
9a:95:4a:86:a8:03:6e:42:ee:be:cb:fc:f7:8e:6e:
3e:39:08:e5:8c:ce:ba:88:59:58:55:dc:b1:29:5c:
8c:ed:6b:17:27:1e:98:3e:2d:18:6a:01:c0:6f:2a:
a8:e8:f6:ba:ba:8c:79:d1:0b:67:8a:ab:8b:aa:02:
2b:90:f7:f5:dd:75:26:a3:6d:83:11:6a:ec:a0:0d:
ea:bc:6e:2f:7c:79:3c:fc:d4:98:ca:12:49:24:85:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:6A:72:2C:71:E0:35:98:92:98:33:00:B7:82:B0:10:EC:42:95
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:c1:67:4d:55:d8:2d:6d:7d:3b:ab:c7:da:f2:ae:5b:24:72:
93:f4:2d:5a:6b:fa:71:21:06:0a:af:02:e0:01:b9:f6:81:6a:
7e:dc:be:ab:69:bd:0d:a0:8e:21:9e:73:e0:5e:f0:e2:40:aa:
a4:00:12:bb:9e:dc:a5:8b:dd:0a:92:d9:e6:af:aa:d2:12:90:
80:85:63:18:a2:c3:8a:7b:2e:a2:3f:fe:77:27:c3:d8:f6:39:
c9:6c:c0:1a:f0:8e:7d:2d:3d:80:db:c5:d7:61:1b:83:c7:ef:
25:8c:88:94:86:27:9e:0f:39:e2:bf:54:a9:8c:7d:db:0d:15:
24:70:55:01:ab:52:80:20:09:f8:0a:a2:91:e1:ba:fe:08:a3:
63:5f:9a:89:62:50:00:5a:5e:0c:6f:8d:eb:71:bd:a5:bb:43:
bb:78:ea:11:3f:dc:6d:6c:dc:8f:d3:c8:00:ab:85:22:3b:e8:
55:85:0e:a9:93:be:38:40:eb:38:f1:db:96:2c:4c:40:a7:a3:
9c:b6:80:44:d1:c4:09:53:99:96:59:de:67:8a:1a:72:8f:52:
c9:1a:2f:99:5f:a1:93:2f:b4:08:a6:f6:68:c7:88:f6:33:68:
6f:87:95:c9:c9:8a:c7:4c:bf:c8:ba:f1:8e:0b:23:f4:2f:52:
5a:dd:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:28 2025 by rpki-client