Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: DLDw4+cwVqYAK/09PFkdRXn7G9zzazS46L8+cXg+n6o=
Subject key identifier: 75:A0:48:67:C3:C6:67:49:41:AC:09:D6:F1:BF:3F:F2:6B:FC:89:1C
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 0197C8A7353D3AB9F02A9BA2136D2056C2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 15BA
Signing time: Wed 02 Jul 2025 01:01:30 +0000
Manifest this update: Wed 02 Jul 2025 01:01:30 +0000
Manifest next update: Thu 03 Jul 2025 01:01:30 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: d4NLza6dAvsxk5wwW9E52VvET/g/motRnxqBYSWBEw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:a7:35:3d:3a:b9:f0:2a:9b:a2:13:6d:20:56:c2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: Jul 2 01:01:30 2025 GMT
Not After : Jul 3 01:01:30 2025 GMT
Subject: CN=75a04867c3c6674941ac09d6f1bf3ff26bfc891c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:e9:d8:6b:00:7c:dc:89:8b:09:9c:16:4f:
ba:75:bb:bf:09:97:ff:17:99:3e:b2:64:8d:4d:7b:
06:d8:c6:49:0f:c1:6f:60:51:d6:f1:8a:12:86:0e:
88:9d:08:bf:5e:dd:0a:7d:f2:b9:c5:13:c7:9c:31:
a0:74:a7:0e:74:ed:03:55:41:a3:ac:ef:81:be:31:
26:f7:e2:06:2d:63:3d:4e:e0:81:a8:89:9d:9a:0a:
37:04:ac:2a:59:ec:dc:0c:90:95:6f:61:f0:c4:64:
e9:90:63:75:29:b3:96:1e:9b:3b:8d:b8:ab:1d:d4:
32:8a:46:00:50:9c:68:95:aa:23:6a:61:fb:36:58:
8a:79:00:c9:ff:85:63:6d:4f:7f:01:16:ae:54:e2:
2a:47:3d:71:ca:e8:b6:1d:d6:30:3d:af:e7:d0:81:
37:28:82:4e:2b:d5:7c:f4:7f:51:e7:60:3c:9e:42:
9b:67:5d:f3:e2:8b:b5:53:c4:51:19:43:9f:2d:41:
47:0f:f3:d5:6f:7e:81:3a:1f:40:42:95:c5:20:05:
81:d6:b7:0f:3f:9d:f0:c7:e0:54:ef:60:21:c7:3e:
45:e2:fc:46:aa:52:da:a2:4a:48:b6:93:a2:5c:f7:
ea:01:4a:0d:89:2a:cc:39:1b:32:67:9b:9a:7b:9e:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A0:48:67:C3:C6:67:49:41:AC:09:D6:F1:BF:3F:F2:6B:FC:89:1C
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:17:52:d0:94:d7:82:51:f3:6e:db:04:f6:48:8a:22:5e:16:
87:34:49:d4:65:d5:b1:e4:fa:40:b3:73:0c:88:1b:e4:11:ab:
c7:80:9a:2f:40:c7:b1:c7:d3:ff:8e:7f:e9:62:ed:bf:6d:be:
43:06:a3:58:63:ee:71:b4:5f:31:7a:70:e9:05:29:a0:b3:71:
16:f5:82:9e:fa:e5:45:3f:af:8c:c9:c3:a6:ed:f5:16:15:27:
c6:47:93:87:71:72:d4:9c:ac:cc:f9:f6:4d:11:07:62:2c:93:
02:f0:f4:c9:0e:a4:c2:2e:8c:dd:e6:fd:c0:09:cf:f7:54:78:
b3:b7:27:e5:7c:11:eb:80:6e:e8:68:31:c2:b2:fd:72:55:f8:
81:c0:0a:fc:58:8b:46:0c:19:ff:15:7a:d4:41:50:4e:52:8e:
8d:a7:87:8a:b8:27:61:7d:7e:bd:e3:cd:99:fc:bf:a5:3e:b1:
cc:34:9f:86:d6:a4:e8:fe:54:22:22:10:11:ea:20:ef:eb:42:
32:b4:c1:b1:d9:8f:69:c1:ea:09:07:91:d3:d7:42:b3:cb:24:
6e:53:c4:b4:e6:e4:18:e1:f0:74:02:19:40:01:28:f9:50:73:
2a:b6:06:4c:5b:c0:87:81:26:36:e7:61:6c:d9:9c:37:bb:1d:
b4:83:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:17:34 2025 by rpki-client