Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: BLOVoAl9Kiz82wTELfr5mEinZd2/gfz9KMfc8LDtLY0=
Subject key identifier: D4:85:5E:F4:2F:8D:14:E4:32:D4:0A:94:D9:09:AC:77:CC:01:45:57
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 019849661CDD78ABE75DA8AA2769728E2853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:25 +0000
Manifest this update: Sun 27 Jul 2025 01:01:25 +0000
Manifest next update: Mon 28 Jul 2025 01:01:25 +0000
Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: 72ArBiORiV7YonXsv99AD+mNZCNSJtlhIGgTQm4J80Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:1c:dd:78:ab:e7:5d:a8:aa:27:69:72:8e:28:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Jul 27 01:01:25 2025 GMT
Not After : Jul 28 01:01:25 2025 GMT
Subject: CN=d4855ef42f8d14e432d40a94d909ac77cc014557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:a9:ed:c1:59:fa:f5:5d:9f:a1:71:b0:54:
91:0b:24:a3:3a:23:bc:04:5c:d2:af:85:40:6f:01:
e4:da:a7:dc:d2:0f:d0:1a:38:e2:b4:08:4e:91:65:
14:5e:63:b8:9f:9f:ad:af:68:75:d9:38:d0:8f:25:
f7:7f:c5:4b:cc:99:7f:6b:27:5c:54:d8:e6:6d:df:
95:09:8a:fe:59:7b:2d:b9:56:09:1c:72:ab:94:33:
0a:c5:3f:93:61:c1:c6:4e:ea:70:aa:bb:3b:65:45:
fa:27:7a:87:ef:66:96:ce:26:88:44:dd:66:2c:1b:
87:40:5c:5c:52:b0:a4:6a:d8:51:45:d9:4f:cf:52:
ab:c8:1c:53:75:b2:01:72:d8:e2:a2:b1:58:b5:0d:
21:51:87:89:81:b8:56:d4:62:79:6b:f2:65:b5:4b:
a0:ca:c6:a9:94:c8:a1:c3:a2:a7:d6:e7:a1:19:fb:
44:6f:c8:bc:ba:55:c0:f5:87:80:17:cb:af:92:04:
97:f6:53:1b:a3:f7:30:cd:b2:cb:4f:27:ab:60:e5:
79:2a:f1:c2:63:b3:33:34:bf:2c:cf:e6:75:65:76:
11:f0:7f:9e:88:90:77:73:12:61:07:83:1f:39:dc:
6b:cc:f9:f2:39:cc:0c:c2:17:4e:ac:5f:78:3c:9d:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:5E:F4:2F:8D:14:E4:32:D4:0A:94:D9:09:AC:77:CC:01:45:57
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:06:18:d5:1a:cc:7b:4e:11:9d:4e:24:da:e0:70:2d:54:8d:
53:71:a3:31:87:5a:21:aa:de:82:ea:65:ef:4d:53:dd:9f:c9:
93:1e:b3:e5:cc:3b:9b:cb:8b:56:f5:c7:1d:f9:d6:50:dd:df:
21:ef:29:75:2e:be:5e:ab:e6:56:52:13:ea:b3:9f:b8:3c:43:
68:4a:84:2b:5b:2f:78:1b:57:4d:0c:8f:03:79:cd:99:d6:91:
67:82:8a:7a:6c:39:2e:77:d1:c0:f4:03:57:f6:6f:b7:a0:06:
02:ee:05:69:01:4b:78:ba:3a:0c:65:b9:ff:4c:70:e2:7c:2c:
1f:dd:49:86:c3:98:a0:8f:e0:97:19:57:42:01:50:26:16:3f:
b6:cf:12:fb:2d:fc:26:e5:24:31:1c:99:b7:c1:08:21:d1:7e:
2b:3c:0d:15:83:06:20:8e:72:19:05:a3:a7:45:fc:1c:97:26:
5a:dd:3a:dc:5f:56:36:e0:fd:33:a3:55:bf:87:7c:a5:d0:8a:
36:c1:51:ef:e1:d2:c6:f4:bb:46:f5:c4:c2:63:28:b5:7d:4f:
0f:b9:2a:61:b5:4b:2b:81:8c:96:6d:b0:1e:96:c0:98:6d:de:
9a:7b:13:d0:be:66:9d:a9:55:43:9c:fe:43:14:f5:da:59:c1:
31:14:55:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:18 2025 by rpki-client