Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: ++jlEK/rGDGqrxjTDnhIH5ngB8jh90i29564MdVhjXo=
Subject key identifier: 77:38:88:65:3F:A9:EA:51:17:9D:4D:44:61:70:C6:55:E6:A2:1F:B0
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 0198499C63757DD0B7A79E4CEA084244317B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 1595
Signing time: Sun 27 Jul 2025 02:00:42 +0000
Manifest this update: Sun 27 Jul 2025 02:00:42 +0000
Manifest next update: Mon 28 Jul 2025 02:00:42 +0000
Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: /JJMEgOjrJTWqkgfg0TxxjoS4cddBMV8S0bskFeaJRU=)
2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:63:75:7d:d0:b7:a7:9e:4c:ea:08:42:44:31:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Jul 27 02:00:42 2025 GMT
Not After : Jul 28 02:00:42 2025 GMT
Subject: CN=773888653fa9ea51179d4d446170c655e6a21fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:84:89:74:a3:e9:22:67:93:07:d4:3c:33:
81:2b:01:f0:3d:58:d7:fe:72:2e:f0:65:88:02:4b:
ad:ee:cd:a6:19:6b:03:3e:28:e1:f3:5b:88:94:36:
38:be:4d:66:ea:37:c3:b7:48:df:4a:73:d5:53:b3:
dc:1c:b0:ff:98:b0:47:5d:29:cd:ee:e1:58:9a:db:
8b:bb:c2:1c:c6:8c:b0:3e:29:51:f8:15:ce:2d:fc:
08:75:af:72:f4:5a:ac:d4:75:af:8c:77:c6:d8:03:
10:93:ea:4c:62:4b:32:ce:b9:2d:30:9a:58:9c:d9:
36:25:95:3a:1a:d6:30:29:f6:2d:f2:89:a1:73:2d:
e3:27:82:0e:11:e4:d7:c0:5c:96:e9:b8:d2:36:f9:
54:3c:ff:d8:04:03:1a:5a:e5:27:c8:dc:12:a9:e7:
10:62:8c:74:3b:a1:25:9d:11:08:b0:bd:35:22:a4:
14:1a:40:f1:21:54:ff:02:35:ed:a5:17:b7:e2:9f:
b8:a8:30:85:e8:f1:03:fb:ec:a9:42:a3:88:fe:75:
1e:45:9a:28:93:cf:47:f3:1e:06:0b:b3:f2:a1:b0:
38:bc:3a:52:bc:9e:d4:ea:a4:5e:fe:c2:72:6a:7b:
4c:5a:10:e1:29:97:89:4c:d5:3f:5f:e8:fc:29:08:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:38:88:65:3F:A9:EA:51:17:9D:4D:44:61:70:C6:55:E6:A2:1F:B0
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fb:24:4a:3f:1f:d2:8c:e5:0c:3c:3f:33:0f:bd:84:47:e0:
eb:a6:16:b5:66:bd:d9:d6:d3:05:88:df:79:e4:64:21:2a:de:
ce:ea:d9:08:c5:e2:ac:e5:0b:a0:5c:62:75:e1:a7:c0:ad:f9:
f2:bb:99:19:77:0f:db:5b:b9:04:f0:03:4f:66:3b:57:1e:9a:
11:f5:bb:87:51:17:85:5d:79:ab:9d:a3:93:5d:8d:fa:4a:43:
c2:38:12:c1:7d:7c:1d:ec:35:18:70:f4:f4:cd:e6:27:fb:91:
26:ca:37:b6:fc:7a:13:18:97:a6:ea:47:8f:91:bc:c1:1d:5a:
a1:f3:1e:40:5b:af:45:55:85:73:85:3a:b2:96:5d:f8:ad:88:
65:af:eb:0b:81:b7:37:2b:22:ec:97:3d:1e:72:eb:7e:1b:ca:
35:c2:04:c0:0a:41:48:1f:97:52:5f:0c:f6:24:94:e1:70:c5:
91:33:88:9d:0b:49:4a:7b:5b:d3:9f:b6:f1:28:43:19:ab:9a:
9e:5c:2c:c5:ea:aa:d2:f6:3b:2e:92:21:bd:a6:9a:1c:6f:5a:
5b:3e:aa:3b:26:b5:52:45:07:1b:53:22:db:23:07:27:b1:7c:
2c:3b:be:a5:d8:46:8f:a8:12:d8:8f:80:68:49:d8:32:46:16:
4c:cd:02:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:38:35 2025 by rpki-client