Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier: prUqPw6rzYxEms/W+T0EqdkUUNiPHojlGTYkmq7cemw=
Subject key identifier: D6:81:A0:D4:C6:45:3C:EF:8D:03:A5:59:97:2A:F9:8E:27:FD:1E:0F
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial: 019849D3A020FD6C92F54D75EB5583336EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number: 06F5
Signing time: Sun 27 Jul 2025 03:01:02 +0000
Manifest this update: Sun 27 Jul 2025 03:01:02 +0000
Manifest next update: Mon 28 Jul 2025 03:01:02 +0000
Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: hupsWJGgFLN4tSv1kPWiOWJsC7xTiPLqNZ1+FRUbDG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:a0:20:fd:6c:92:f5:4d:75:eb:55:83:33:6e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Validity
Not Before: Jul 27 03:01:02 2025 GMT
Not After : Jul 28 03:01:02 2025 GMT
Subject: CN=d681a0d4c6453cef8d03a559972af98e27fd1e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:91:72:43:a0:1f:8b:12:82:30:cb:ac:6f:
b8:9d:8c:7d:02:8d:4b:86:f6:e7:98:9c:eb:9c:e3:
88:04:cd:40:cb:1a:32:0b:8d:24:87:da:48:c8:bb:
66:2c:53:a6:ff:ec:00:a7:26:ed:2a:13:61:2d:b5:
d3:37:4b:cb:fe:6c:4d:6e:d4:ec:0b:78:8b:22:1f:
85:2e:7e:04:c8:37:cd:2f:07:96:3d:11:64:33:fb:
26:09:fe:88:f6:1a:b2:9c:96:b3:26:43:db:a0:52:
e4:e0:95:a2:43:d7:78:97:6b:f0:4d:03:c7:ac:29:
c0:ec:50:4a:c1:a9:11:db:7a:e6:24:b2:cb:69:b0:
d0:6e:66:81:8f:d6:e2:92:03:0a:e5:00:f4:07:e6:
f3:d9:22:5e:fd:90:b0:70:b6:14:32:24:6c:f6:69:
89:7f:8f:82:e1:d9:31:e1:37:f6:98:4a:cf:2a:90:
03:7b:9c:17:da:01:4b:3f:2c:b9:92:c2:b9:41:02:
e0:72:b5:29:e9:a7:60:c9:70:72:db:dd:18:21:c2:
77:be:b8:79:9d:78:ca:e6:d6:11:33:70:01:e3:be:
2e:08:62:2b:ce:ee:6e:6d:34:d2:0b:e9:91:92:47:
5e:c9:42:6b:6a:60:10:b3:c8:e7:1d:0f:b8:b1:48:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:81:A0:D4:C6:45:3C:EF:8D:03:A5:59:97:2A:F9:8E:27:FD:1E:0F
X509v3 Authority Key Identifier:
keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e2:b6:8f:a8:d1:b3:74:ba:2f:37:f3:83:6e:8b:a0:02:07:
9b:0b:42:a1:89:e3:da:1d:f5:d8:fc:65:d8:c3:fd:0a:be:8e:
f4:aa:40:10:53:9f:00:a1:00:b4:73:81:8d:14:fd:a4:62:e3:
a9:af:a7:40:88:11:e2:63:ed:cd:d3:b8:e8:1f:4a:41:a3:85:
04:95:5f:ce:cf:c2:72:d0:2b:51:c7:90:4c:91:10:ea:49:0b:
dd:e6:c8:4a:b0:d9:d9:71:fb:20:6c:f7:b7:ac:89:82:05:e1:
16:5a:de:e2:6f:76:6e:81:a8:5e:21:e3:cb:0a:04:53:84:7c:
c9:a2:af:99:2a:18:8d:36:44:1f:80:40:ad:1f:a9:5a:26:5e:
b2:d1:82:af:79:28:a3:16:63:c0:e3:0a:67:72:a7:34:97:f1:
f7:84:e8:17:c2:76:09:da:d4:8a:dd:98:aa:9f:98:1f:18:e8:
5e:34:78:93:91:27:16:bc:91:dd:f3:34:ee:fe:18:c1:77:55:
17:2f:a6:5f:55:5c:45:f4:a1:fb:b3:a2:f2:0b:4d:1d:2f:fa:
1f:7c:4d:a6:eb:92:67:12:d1:98:2c:d9:d9:d8:d1:de:34:78:
24:67:8d:08:2c:6d:3a:77:9d:a6:60:f2:79:d1:13:ba:79:87:
19:dd:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:24:07 2025 by rpki-client