Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: VHJj66pu6bRJ3cIEoaCrUdsmbFrKNz/3Np/BWflj0jk=
Subject key identifier: 17:D8:F0:5F:4D:34:5E:AC:3A:79:98:93:BE:4C:E1:39:AA:E0:D9:49
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 0198D70606CEAC486579811C7A14826A988D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 118C
Signing time: Sat 23 Aug 2025 13:02:33 +0000
Manifest this update: Sat 23 Aug 2025 13:02:33 +0000
Manifest next update: Sun 24 Aug 2025 13:02:33 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: 1PsqjmJCcy4/An/rEETkFvnJnSBm6FlB569L+UcUGhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:06:ce:ac:48:65:79:81:1c:7a:14:82:6a:98:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Aug 23 13:02:33 2025 GMT
Not After : Aug 24 13:02:33 2025 GMT
Subject: CN=17d8f05f4d345eac3a799893be4ce139aae0d949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:fc:65:77:59:10:fb:d2:c6:ad:86:3f:19:
6f:b2:02:d0:12:c4:33:0b:32:ca:b3:99:b9:4b:01:
21:8c:6d:67:26:3f:25:a6:28:cf:52:00:e5:33:60:
b8:7c:cd:f0:f1:25:2d:e7:32:e3:fa:33:60:29:f6:
e4:8c:c9:e7:02:49:b7:12:3c:44:8d:2f:f9:65:8e:
05:7e:c7:d6:88:68:90:10:b0:3c:1e:6b:34:21:5c:
e9:a9:4a:ca:b0:c8:68:74:03:40:8a:12:0c:1d:f8:
fc:f0:ef:e2:76:0c:6f:f6:91:0e:e0:95:fd:1c:d1:
91:d4:dd:09:ac:be:40:6f:fc:6a:2d:c6:ef:f4:7b:
54:20:58:6b:e0:62:72:6b:b5:63:89:e3:e4:88:64:
5d:85:05:eb:31:8f:40:4c:6d:b7:3a:48:63:a5:92:
3b:88:a6:2e:4b:a2:ab:a0:58:79:9b:1c:62:06:67:
5d:f0:44:a0:10:3e:d3:2f:82:b6:9a:92:39:32:f8:
25:59:19:65:de:fc:93:7f:69:39:ae:bc:7b:c4:4a:
b0:09:97:9e:52:96:8b:46:35:75:13:ea:88:77:a3:
3e:4c:e8:ea:eb:b8:61:8a:6a:35:8e:05:70:e9:01:
ac:33:b1:98:17:39:58:ba:ce:a4:cb:53:08:bc:12:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D8:F0:5F:4D:34:5E:AC:3A:79:98:93:BE:4C:E1:39:AA:E0:D9:49
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7e:85:99:5a:47:29:b3:81:ba:3e:7b:b5:bb:87:5b:bd:a2:
d1:7a:69:52:e2:12:b7:bf:39:15:6b:18:e7:39:de:bb:30:84:
57:64:b8:b5:5b:91:dc:2e:cc:13:63:f2:ad:3b:fe:4d:86:7f:
63:7e:f3:ac:6c:45:c1:c2:08:2d:7f:6d:f2:a0:32:54:78:1d:
1b:79:fb:2d:c8:01:0d:2b:44:1a:52:65:9c:d1:f6:10:ec:fb:
ce:ce:e2:d4:d0:3f:84:18:5b:d5:de:2b:01:d7:a9:f2:ef:9b:
a4:cb:d4:64:4a:66:ac:b8:5b:50:af:c8:8f:6a:a1:06:24:a2:
2f:0d:5a:fe:9a:b3:cd:70:8e:39:f0:84:7e:d2:a6:5b:65:27:
d7:70:90:af:c5:be:db:17:76:e9:d5:7a:95:e9:9c:14:5b:1f:
9d:d9:e8:0e:f2:2f:78:fc:22:de:c6:89:4c:58:05:82:b1:db:
a3:ac:c2:51:ed:b9:66:6d:93:7e:e2:20:42:66:8b:93:b3:74:
af:2f:14:b8:28:e3:12:f0:61:bb:0f:99:60:43:8f:21:09:ce:
bb:8b:1f:81:24:3c:ae:73:e6:3f:82:4d:1d:5c:ed:e7:6e:d0:
eb:7e:56:c2:5c:88:b5:d0:aa:0c:a0:fe:e3:c1:0d:33:8a:89:
8e:e9:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:21:01 2025 by rpki-client