Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
File: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json)
Hash identifier: QeMT8DfWMys2ASftN4wCy3dwky9kvWXjEDrDoQcyLaA=
Subject key identifier: C7:51:E7:4F:62:6B:17:2A:C0:CD:8B:83:63:5B:88:90:EC:E1:41:0B
Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
Certificate issuer: /CN=65a07d492468228aa306a66b056a0228c552ec5c
Certificate serial: 01984777735E938C8163E0E5CE12EDC63947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
Manifest number: 0D15
Signing time: Sat 26 Jul 2025 16:01:07 +0000
Manifest this update: Sat 26 Jul 2025 16:01:07 +0000
Manifest next update: Sun 27 Jul 2025 16:01:07 +0000
Files and hashes: 1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: Eg8IfMpjrFIlzmHNVUQudm5yUOtQ49DHX3cEFbkhsxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:73:5e:93:8c:81:63:e0:e5:ce:12:ed:c6:39:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c
Validity
Not Before: Jul 26 16:01:07 2025 GMT
Not After : Jul 27 16:01:07 2025 GMT
Subject: CN=c751e74f626b172ac0cd8b83635b8890ece1410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:f6:82:05:0c:a0:13:98:e3:78:28:da:9e:
fb:d0:f8:f5:12:c5:d7:82:00:b4:15:fb:6a:4c:d3:
05:31:9f:04:07:00:7d:51:7c:96:95:30:8a:96:9d:
a6:35:01:ff:b1:8b:e1:77:99:55:54:d9:a4:c4:da:
7e:e4:76:78:6b:c4:7e:68:42:e5:7b:fd:d3:ad:f5:
1d:07:15:45:05:e8:ac:29:a4:b1:a6:69:3e:bc:18:
15:4e:06:89:35:29:b2:6d:1f:e1:f0:27:82:f0:9b:
7c:0d:92:95:59:f9:92:7d:f9:ff:3b:33:65:0e:62:
c9:13:3c:b1:8d:bf:90:c3:47:3f:2f:ba:b5:4c:44:
01:2a:71:0f:a2:e0:d3:e7:e1:1c:69:8d:e0:ee:e8:
39:f0:e7:ab:ea:b9:97:4b:01:7f:9b:8f:9f:6d:e9:
1c:47:20:53:cc:84:77:3e:81:d5:0d:85:07:7a:86:
ea:b2:f4:79:08:df:d4:1c:5d:a7:eb:12:cf:84:13:
7e:cd:be:9f:cc:d7:0c:1f:f0:04:db:bd:46:e0:1e:
4d:73:f3:d1:aa:28:de:fe:7c:7f:f7:05:bd:c9:56:
71:e1:c2:4d:c1:cf:7b:9e:a6:73:6d:51:b5:a8:50:
f4:7b:55:de:50:1c:0b:98:c2:49:85:20:f0:b5:0a:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:51:E7:4F:62:6B:17:2A:C0:CD:8B:83:63:5B:88:90:EC:E1:41:0B
X509v3 Authority Key Identifier:
keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:30:22:79:f7:c9:37:76:57:25:a0:a8:0a:82:2c:1e:ca:c8:
d1:2c:0d:d4:e2:81:29:f7:6f:aa:d1:a3:61:b1:18:7c:78:19:
67:8e:de:05:02:11:ed:9a:7b:df:97:14:d6:e3:75:fa:7f:7a:
cf:f8:38:6b:eb:45:7f:3a:31:af:af:20:99:cc:af:49:cf:9e:
c7:35:e7:ee:ef:60:6e:01:af:9d:f2:1f:53:e2:cf:33:38:0d:
12:37:2d:12:b7:08:05:69:ff:2b:e0:76:aa:ff:19:dc:31:90:
83:70:76:ab:ff:13:20:c2:9a:55:b4:fa:7b:6e:8c:c5:36:e1:
1d:05:b7:df:d8:8d:91:05:c9:43:27:d8:69:6b:5b:83:aa:7b:
ca:47:fe:80:1e:a7:04:31:3c:d4:9e:08:a3:71:75:ef:72:0b:
99:ac:c0:f9:10:96:0e:c7:95:a5:ea:e2:d1:89:8f:c2:db:b0:
2d:b9:c4:2a:14:5f:c3:53:a6:11:66:02:c8:d6:28:71:6b:68:
d3:b1:1d:ce:53:17:c6:39:6c:ae:36:97:94:90:db:f0:a9:dd:
14:f3:ed:d9:41:67:72:fc:8d:80:d3:14:ac:4f:f0:7f:e8:b2:
d8:16:87:5f:56:21:17:cf:b7:bf:4d:90:8d:b7:95:8c:7f:68:
bb:cf:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:14 2025 by rpki-client