Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
File: ZYzRSR-oTUghjThg8zI9ybhoV4w.mft (raw, json)
Hash identifier: QtuR/I03suAvyiSHTZ0tRzhode/EnmSeJaqsFfCLku0=
Subject key identifier: 3E:EC:CD:03:9C:5E:7A:E6:7F:8A:51:FF:70:02:C3:DC:43:AC:0D:5A
Authority key identifier: 65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
Certificate issuer: /CN=658cd1491fa84d48218d3860f3323dc9b868578c
Certificate serial: 019849666935B211FEABC81E6D7AE8A76F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
Manifest number: 0E69
Signing time: Sun 27 Jul 2025 01:01:44 +0000
Manifest this update: Sun 27 Jul 2025 01:01:44 +0000
Manifest next update: Mon 28 Jul 2025 01:01:44 +0000
Files and hashes: 1: ZYzRSR-oTUghjThg8zI9ybhoV4w.crl (hash: KDOZfViCFQWbzN5/n7Ir6Wj1Vn+l0T7Z93B4BU4pSgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:69:35:b2:11:fe:ab:c8:1e:6d:7a:e8:a7:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658cd1491fa84d48218d3860f3323dc9b868578c
Validity
Not Before: Jul 27 01:01:44 2025 GMT
Not After : Jul 28 01:01:44 2025 GMT
Subject: CN=3eeccd039c5e7ae67f8a51ff7002c3dc43ac0d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:f1:94:d9:1b:eb:af:a0:6a:f3:01:f2:87:
d6:93:39:41:9d:3d:23:74:69:f9:b7:c6:a4:82:51:
f0:76:ec:af:2c:cc:bf:43:15:69:d9:c5:79:8d:2a:
25:ba:b9:00:0c:8a:68:ed:e6:97:41:2c:a2:44:31:
c5:d4:eb:03:eb:51:8c:b0:43:9a:5b:43:97:14:8d:
3f:96:6f:6b:f1:8a:1e:c1:87:31:f2:71:53:32:8e:
22:6d:5b:de:df:6a:9c:f6:87:42:ff:02:21:40:e2:
a2:55:66:98:20:18:87:09:3d:79:23:8f:6d:a1:1f:
0f:d3:f0:8d:c7:63:84:e6:13:cb:27:1a:d2:17:cb:
af:66:ec:d0:00:f2:f3:0d:90:8b:52:cb:22:f4:bc:
54:f5:01:ca:41:c2:06:92:bd:19:38:9d:8d:e5:e8:
ad:32:fe:a7:39:12:65:8d:de:8f:86:0d:17:ff:59:
b6:9e:9d:f5:5c:9a:37:fe:4c:b5:9d:ae:33:64:f3:
9e:d8:6a:59:27:55:61:d7:ff:50:e8:c1:83:9c:b6:
e9:36:f4:7e:2c:2c:93:6f:8f:ee:12:9e:f5:d1:1d:
98:58:3f:57:a9:fd:1c:0d:d7:d8:bb:b1:40:44:f3:
6f:8d:5b:e4:26:a2:1e:e7:22:33:13:8e:7b:8d:c9:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:CD:03:9C:5E:7A:E6:7F:8A:51:FF:70:02:C3:DC:43:AC:0D:5A
X509v3 Authority Key Identifier:
keyid:65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:dc:e5:2c:d5:97:ba:f0:be:a2:cd:d2:b2:96:6e:78:b6:37:
b3:6c:0e:77:18:70:34:55:40:f2:b7:e8:ce:a1:b6:41:84:ab:
35:a0:db:dd:47:a6:0c:49:2b:ba:31:6b:9e:a3:bf:68:9a:96:
a9:f2:21:72:a6:99:e8:b1:16:26:4e:02:40:00:dc:9a:e3:ef:
b5:22:2b:9f:6c:2e:5d:1a:0f:b5:a9:86:80:c9:e5:8b:ca:84:
27:2e:5e:7e:66:a9:9c:16:b9:bb:4b:be:35:97:75:16:91:2b:
85:b0:55:2c:3b:6e:27:61:73:ca:bb:3c:98:6e:54:ee:f6:6c:
cc:af:20:2f:69:7d:7f:07:d7:3d:a6:44:c8:64:e9:1a:27:8a:
35:b5:a6:cc:cd:ab:a8:16:fc:17:67:65:2b:da:7f:12:c7:c5:
d9:66:3a:c4:d7:53:2e:ce:ac:38:39:9d:2d:6b:15:7b:c1:e3:
20:78:f4:08:9d:9a:c0:7e:5f:6c:1a:b0:31:ff:30:cc:03:65:
93:f8:0d:85:7c:e4:27:73:44:d1:98:e3:c7:51:6d:0c:e6:f7:
f3:b8:7f:bd:a2:41:1f:e3:78:a7:b4:a7:e1:7a:cb:b9:e5:f5:
96:15:13:a4:05:87:5e:a5:48:00:04:ce:ad:e7:8a:74:3c:73:
9b:d3:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:04 2025 by rpki-client