Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: eHFaTItXfjbiWxIeWV3hPVl4Qb3qSbiIxEkhoOTjODU=
Subject key identifier: 97:65:E3:A7:17:CF:32:9A:D9:22:9C:A7:62:9D:17:34:4D:F0:C5:17
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 019842F5B0CF991BEB30D10445213A21C7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 1602
Signing time: Fri 25 Jul 2025 19:00:54 +0000
Manifest this update: Fri 25 Jul 2025 19:00:54 +0000
Manifest next update: Sat 26 Jul 2025 19:00:54 +0000
Files and hashes: 1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=)
2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: 3dCXCAe5GBdgnCe5aWmLjpKvu7R3gIdfmtCJzkCoBmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:b0:cf:99:1b:eb:30:d1:04:45:21:3a:21:c7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Jul 25 19:00:54 2025 GMT
Not After : Jul 26 19:00:54 2025 GMT
Subject: CN=9765e3a717cf329ad9229ca7629d17344df0c517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:75:26:f5:e8:cb:7b:1b:fd:35:bc:ef:5f:
9d:85:af:03:03:37:57:d3:61:12:a1:fd:a2:34:1f:
fa:0e:f3:d9:81:f5:20:b9:a4:dd:67:88:b1:36:54:
73:c7:ab:2b:f9:e1:06:bb:ee:79:2b:d3:f6:ff:45:
a6:c5:6d:9d:99:ab:5e:48:f1:da:8e:68:f4:88:cd:
d0:94:55:d1:46:2a:20:8a:b7:fb:20:5a:63:0c:fd:
25:b7:00:94:a8:e1:de:79:c8:6b:a6:07:7c:3c:fd:
a4:09:15:ba:87:51:bd:61:79:aa:23:13:d7:9b:7d:
6d:01:d4:bd:93:2f:cf:e0:18:9c:c6:80:8d:26:ef:
ad:b8:8d:5f:c6:e8:76:23:0c:63:7b:5b:53:21:8e:
17:88:f0:6a:06:06:7a:6c:92:ab:a3:90:7e:aa:c0:
33:50:52:4b:46:c1:76:33:86:7b:60:37:e2:22:02:
93:6d:11:24:58:d3:10:c9:95:74:db:b3:62:c0:2f:
14:86:c0:68:38:8c:57:a9:ad:84:55:1a:6f:cb:8a:
c3:ee:e1:c0:bc:da:3b:b4:45:d2:76:a2:98:58:35:
5f:fd:54:80:2c:41:a5:a8:29:6f:2a:b6:fa:6c:a4:
5b:20:ce:8a:35:21:2b:35:34:2a:e6:e5:28:47:f5:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:E3:A7:17:CF:32:9A:D9:22:9C:A7:62:9D:17:34:4D:F0:C5:17
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:42:09:c9:20:a8:72:d1:38:24:b8:4d:dc:9e:f4:23:16:da:
75:20:03:7b:cf:b7:29:5a:c5:07:2e:e4:4c:d8:86:cd:ef:17:
dd:bf:72:b1:49:eb:7e:51:ae:f4:72:1d:d5:62:4d:bc:e6:91:
93:b0:a4:e3:5f:56:4c:6e:80:52:5a:bf:b9:3d:f5:17:1e:66:
7b:30:dc:fc:10:1b:8b:f4:b9:30:29:44:1e:71:17:f9:e5:61:
07:c2:d5:62:3f:a8:03:18:b9:bf:77:51:ff:6e:8b:2f:05:fe:
fd:e5:a2:8c:c8:f0:d6:34:f3:c3:9e:23:c4:e5:c8:d3:4a:15:
fd:5a:a4:61:4f:83:15:f8:31:ef:3a:8c:b0:18:a8:96:ab:9d:
31:45:25:5b:3f:fa:6f:6f:c2:72:82:91:9d:c0:7b:da:35:5f:
83:c8:54:6e:9a:7a:6c:df:cd:29:69:25:63:37:50:07:65:e1:
33:e0:93:f4:2a:90:70:9f:9e:b7:c5:48:bf:ae:d9:82:1c:fe:
c0:b0:c5:22:e3:2a:b3:fc:4a:4b:92:45:03:48:9d:e6:c7:75:
15:98:34:45:90:f5:14:9f:b7:f9:ef:82:a1:36:8f:7d:dd:8c:
fe:4b:ea:7a:24:a2:94:98:d9:d0:a4:54:c3:90:41:e7:16:08:
95:f8:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 21:01:01 2025 by rpki-client