Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: AThbPdYwhGEWdebybfU99vOBWgeG7E+nQ5V9s2SDfOE=
Subject key identifier: 2F:F2:C5:F9:6E:92:C3:08:60:DE:0B:CF:04:BD:6E:9B:4F:AE:5C:EC
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 0198D7059CD905CF45E596ED48B1BCD3CB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: yCXGSzwd+I0ePkKDsCAiyJ4tB70siHvQRsnu0/0dnpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9c:d9:05:cf:45:e5:96:ed:48:b1:bc:d3:cb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=2ff2c5f96e92c30860de0bcf04bd6e9b4fae5cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:f3:f7:43:f8:5c:16:60:cb:c8:f9:2d:08:
1b:2f:c8:ac:0b:d0:10:ff:e2:10:5e:96:dd:ea:3f:
9a:38:7a:3e:39:87:e2:95:de:ad:80:b3:0c:6c:7a:
1a:10:68:07:61:53:cb:14:43:b4:db:bd:f2:dd:c6:
1b:be:e8:74:48:27:08:37:45:53:56:a7:bd:05:22:
aa:9c:3a:70:95:2d:04:d0:6b:10:29:35:45:9c:c0:
38:8b:0b:5f:0f:59:3c:d6:84:91:7d:56:ef:a6:fa:
67:c6:8b:df:61:69:ce:07:90:70:2b:e5:40:c9:d2:
e8:22:4b:e8:ae:b2:6d:6d:5b:e6:a8:0a:93:94:ac:
3a:87:9a:af:e4:b2:da:2c:f8:42:e5:69:67:24:80:
6c:31:94:9c:89:7a:f1:cc:16:52:4a:23:8a:b4:a9:
8f:fd:69:fb:85:77:ee:5f:3a:3c:25:9a:eb:98:0f:
57:44:29:ea:88:be:46:b7:53:aa:df:00:23:9d:f2:
f5:56:4a:b2:e1:a8:8f:3c:53:39:67:21:3f:02:a9:
64:1d:a8:e0:c5:18:7f:ea:76:01:ad:36:a1:e6:98:
df:70:6a:5b:9b:9d:ea:ae:2f:5f:4e:aa:0a:21:84:
3a:bc:c6:dd:83:58:9a:54:b2:b3:71:6a:17:16:e7:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:C5:F9:6E:92:C3:08:60:DE:0B:CF:04:BD:6E:9B:4F:AE:5C:EC
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:af:f8:38:e9:e4:e9:92:f3:72:05:38:71:1e:37:cc:d2:5b:
83:95:62:72:57:16:c1:28:6e:dd:6f:22:4c:c4:63:29:4c:4d:
db:48:de:74:17:33:7c:1d:c2:2d:91:50:66:76:62:a4:97:d8:
ca:f9:f2:58:b5:31:df:ab:4d:f3:0f:43:c2:81:18:34:c1:2c:
f2:8e:df:00:0e:43:d4:b2:7b:35:2d:c7:92:cb:c6:b1:67:1b:
bb:df:52:eb:4e:c4:2f:3a:72:41:3a:f6:bd:3e:6d:ba:14:b2:
4a:1a:f6:e1:f5:b0:d4:0b:8b:65:7e:84:71:e5:07:d9:de:fa:
62:d5:a4:31:88:81:6a:04:14:41:4a:4c:13:05:43:b2:4e:7f:
7a:2f:80:28:20:7d:9b:18:32:b5:5d:b1:7d:81:35:44:78:3a:
ee:0d:63:5d:f4:27:19:c4:38:d7:5f:c0:3d:c7:7c:f7:5c:a2:
3f:a5:03:e5:c1:76:6e:38:2d:7b:90:39:63:22:b9:9c:65:44:
a7:4b:56:54:b5:be:c3:8f:e8:7d:b9:e2:17:96:e8:5f:8c:1e:
8d:96:f5:fd:21:da:13:1b:17:db:6d:07:19:56:56:03:86:89:
36:b3:86:ba:8f:fb:e6:9f:5a:a1:c0:67:77:42:a6:0c:12:b9:
93:48:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:37 2025 by rpki-client