Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: GxddvlOcFKFhdp42H+p/ufThMSCWXGB6RLoqspx7tVw=
Subject key identifier: 4E:BF:C0:29:F4:92:A7:AB:13:51:2F:2F:59:FF:0B:C0:76:7C:FB:18
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 019849D3664707EC66E6239B01CC552562FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:47 +0000
Manifest this update: Sun 27 Jul 2025 03:00:47 +0000
Manifest next update: Mon 28 Jul 2025 03:00:47 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: L5hPJ7G5IDdVxbbfO+OBVQNCKIunCJm13tE9RSrDwRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:66:47:07:ec:66:e6:23:9b:01:cc:55:25:62:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Jul 27 03:00:47 2025 GMT
Not After : Jul 28 03:00:47 2025 GMT
Subject: CN=4ebfc029f492a7ab13512f2f59ff0bc0767cfb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:f9:d7:6d:c7:3e:6b:32:cd:82:6b:45:5b:
6c:13:64:b1:41:94:b6:7a:9c:eb:c1:65:1a:35:8c:
dd:da:0f:5e:f3:5d:8d:70:71:69:51:28:7b:0e:dc:
90:76:73:1d:46:93:e1:d3:5f:19:bd:8d:d9:6f:bb:
76:2a:a3:86:a2:66:62:27:64:06:30:9b:e3:76:25:
ad:5f:5e:0d:a7:49:e0:45:ca:fb:22:c8:52:d6:dd:
ca:92:b8:d3:49:cf:20:7e:6f:58:e4:3d:53:dc:dd:
c6:84:e4:ee:bf:5e:f0:1e:e5:79:ff:0a:27:42:9e:
8a:87:ca:7d:c4:0a:50:29:cf:9b:27:93:ba:79:23:
d9:b1:74:02:c1:1f:a5:0c:f6:ba:90:5b:6c:71:96:
4e:7b:d0:ad:25:9a:40:2b:42:94:28:25:ee:13:8c:
3d:3f:71:14:50:cc:32:5f:4a:9a:ef:c2:36:62:1c:
b7:15:b1:b6:4a:f7:9e:3d:ea:cb:a2:16:ae:97:fb:
bd:e6:38:10:8e:01:10:e8:61:96:50:bf:46:85:9c:
e3:1e:65:e8:05:05:44:51:16:e4:5d:96:11:c1:62:
c5:d6:bb:87:30:3b:4c:9e:34:a5:5e:e8:63:82:14:
4e:c6:ed:59:b6:30:1f:3e:6b:49:f1:79:bb:dc:d3:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:C0:29:F4:92:A7:AB:13:51:2F:2F:59:FF:0B:C0:76:7C:FB:18
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ff:82:64:c2:b8:83:62:d0:df:fd:0f:bb:a4:16:df:01:5f:
b6:87:56:16:97:c9:97:c1:6f:6c:5c:8c:07:ac:22:13:2a:e7:
06:43:bd:e1:a5:e6:d7:fe:55:38:7c:4d:1d:be:d1:1f:e8:dd:
f9:e7:bf:6a:fd:b5:bd:40:16:3d:a2:28:ce:9f:6a:32:da:6a:
6a:3a:08:d7:e0:ef:34:11:6b:20:57:a8:d9:da:ee:f6:03:c5:
4c:2d:47:f5:f6:10:0b:1e:89:11:13:c9:1d:77:8f:43:90:c5:
1c:9c:be:a4:ef:29:89:8f:c5:38:c3:13:59:57:ef:ee:18:19:
fd:30:08:52:63:e3:85:46:c4:79:82:d1:ae:27:ca:65:d1:70:
d7:04:eb:4d:4d:88:99:ad:39:a9:c0:21:cc:53:88:5a:63:fd:
dc:ca:d2:7d:14:c4:45:29:06:41:0f:98:70:09:89:74:d8:5c:
07:2e:2e:49:9d:ac:bc:c0:9d:d8:ec:3f:52:f6:5b:ce:7e:b5:
c2:3b:5f:b1:bd:8f:90:e4:b0:76:c5:8b:14:2f:95:f3:4c:cc:
54:8e:9e:1b:2d:09:2b:fd:f5:89:e1:1d:d1:46:c4:fc:25:73:
39:73:21:4e:a1:8d:bd:c5:0a:be:9b:6f:3e:87:eb:27:10:fd:
90:2d:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:07:56 2025 by rpki-client