Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: RepbCtMVhU25oUlcDv6xskbsKZ4W2dFa4CBnbpFTcYE=
Subject key identifier: 8B:98:6D:98:95:5E:CD:C6:C7:69:12:78:41:04:22:47:94:D9:67:30
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 01984966718F3CC5CBA0752C2AD04287A963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 068B
Signing time: Sun 27 Jul 2025 01:01:47 +0000
Manifest this update: Sun 27 Jul 2025 01:01:47 +0000
Manifest next update: Mon 28 Jul 2025 01:01:47 +0000
Files and hashes: 1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: eCKS35dQ46vzuU8H8/naPxi2zQduL+d0LY0sg2cHa14=)
2: b1zoobQuYRirw6zOe3ZiWtlB_Fs.roa (hash: yoTkr3Ydr4cxPjwyqyjdE6QfCIuZ05Im31loM47LoN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:71:8f:3c:c5:cb:a0:75:2c:2a:d0:42:87:a9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Jul 27 01:01:47 2025 GMT
Not After : Jul 28 01:01:47 2025 GMT
Subject: CN=8b986d98955ecdc6c76912784104224794d96730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:17:2e:d8:f9:0a:5d:54:43:39:e9:63:78:
ff:eb:fc:13:dc:dc:f9:bc:73:9d:38:ab:23:c4:de:
cd:d4:ef:17:cc:f0:0e:01:af:b4:b3:41:7d:4f:87:
6e:3f:d4:d6:7a:38:8d:fb:c7:82:f5:16:9a:24:4c:
96:92:e5:f5:ec:13:db:69:12:5a:77:3e:94:3e:45:
2b:76:11:ed:24:90:3f:cd:0f:21:de:de:02:fc:2a:
20:f5:f9:5c:8a:a5:cf:05:87:72:cc:b5:9e:75:ce:
e0:f0:ba:d7:b4:4b:98:c3:42:72:50:18:9b:3f:a6:
be:41:e9:93:87:ab:5f:41:1f:77:4c:b7:ea:1e:bf:
97:63:ba:1e:90:72:bf:80:d1:ff:0e:46:83:f7:64:
23:81:f1:5f:93:48:08:c1:1b:33:bd:50:90:79:f6:
03:23:c5:cf:ac:0b:44:9e:7b:ef:d7:15:cb:65:68:
cf:23:71:d0:ff:c4:60:87:4a:9e:ff:8a:7d:cf:c8:
02:f3:b3:41:f5:71:bb:09:37:dd:f8:a6:7b:38:65:
28:3f:91:1a:64:52:d7:aa:f0:06:f1:ae:ef:5b:a0:
76:0e:69:c6:41:e8:ae:f7:b2:2a:ae:09:17:dd:18:
d3:49:bd:8d:fa:63:a4:bc:48:64:bd:58:f6:c6:72:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:98:6D:98:95:5E:CD:C6:C7:69:12:78:41:04:22:47:94:D9:67:30
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:27:f5:69:70:d7:8d:92:e7:e4:b1:90:2d:e4:cb:61:b5:
be:63:bf:67:74:55:f6:7a:2f:08:09:34:b4:00:6e:9f:0d:75:
7c:db:8d:93:c5:2d:38:22:50:07:05:07:fd:51:8e:97:da:bc:
95:9e:75:50:97:c9:77:f1:cd:b5:02:49:86:7f:6b:f1:3f:64:
13:1c:09:b3:7b:da:96:29:2c:30:5e:d0:90:5d:4c:d0:6c:af:
49:ed:9f:a3:41:43:f9:6c:18:2d:96:ce:4e:42:4a:44:7e:9d:
5c:9c:72:f5:e6:3b:f3:a5:b0:44:a2:77:20:b8:1b:31:9b:9d:
7a:7f:a0:12:1f:2a:dc:3a:97:86:a3:2a:96:36:7f:a7:9c:da:
0f:b8:cf:23:7c:c8:35:27:5a:64:38:70:28:2d:61:4e:ee:48:
7c:b9:50:ff:dc:06:51:8d:28:e6:4c:dd:58:29:e0:5b:66:e6:
6b:75:71:70:2f:16:52:6a:79:eb:4a:18:5f:63:d4:54:30:03:
f6:39:c7:83:8e:56:8f:28:88:c3:a2:65:f6:2d:96:d0:1e:60:
a2:4c:51:71:4f:b5:bf:cf:8f:99:fa:be:8b:ec:e8:f3:f3:ae:
cd:3c:c4:61:42:58:e1:99:f0:55:ce:41:79:45:95:54:b2:05:
d6:9b:ec:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:35 2025 by rpki-client