
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: EsHKg5i6TJzEuMhqkuNM902e+mo/xlGZh9bRk4+++xw=
Subject key identifier: 7C:E2:8F:EB:D1:B3:68:4B:A1:D6:73:F3:65:7E:B5:1D:E9:8E:FB:2F
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 019849D31F94832CA022DCF03D6D7403C2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 0F76
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: qj6a8Tsbk06/dd7rPH23udLgzeqj4V09ThrE6j/G8Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1f:94:83:2c:a0:22:dc:f0:3d:6d:74:03:c2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=7ce28febd1b3684ba1d673f3657eb51de98efb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:c9:eb:7e:b8:b5:3e:f7:5a:a5:1f:54:46:
ad:85:cb:13:0c:72:b7:73:5f:96:d4:6b:9f:07:cc:
cd:c8:0b:32:47:b7:69:89:3d:e4:f9:f1:b6:29:a1:
d6:9a:88:85:cd:64:9a:de:03:7c:b7:12:57:ba:63:
34:dc:25:7d:9e:38:54:f0:61:80:c1:fe:30:57:76:
90:70:ad:cc:87:61:84:bb:6c:6e:61:ec:c0:19:0f:
da:37:7b:04:76:5b:cc:a8:64:4e:3c:0f:bb:41:e1:
6a:9d:a1:cd:76:57:ae:ee:21:d9:35:07:53:ef:bc:
9d:e6:dc:66:3b:02:ca:76:e5:aa:e8:a1:48:92:2c:
92:e3:3b:ee:44:49:77:bb:47:1a:0f:c8:d4:8b:ed:
f2:52:ff:1f:2a:e6:8c:92:d0:8e:48:ff:5f:77:bd:
58:01:ad:ec:97:19:a8:38:2a:82:07:e2:d6:e6:15:
ea:5d:a1:4c:3c:4a:1a:6b:39:b9:ae:ad:9b:5b:3e:
49:a0:85:e8:c0:bc:a1:11:c0:c7:9b:f7:62:dc:75:
a8:01:89:58:1a:4b:4a:81:e1:40:31:4e:dc:66:1e:
17:11:94:a2:31:04:e9:c4:a0:8c:e7:a8:8c:ba:8a:
2f:8a:c5:1e:44:90:74:e3:25:e8:6d:6f:91:f6:51:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:8F:EB:D1:B3:68:4B:A1:D6:73:F3:65:7E:B5:1D:E9:8E:FB:2F
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5a:18:77:52:4f:77:f3:6d:49:6d:f3:91:99:65:b1:bc:47:
57:54:64:b7:ed:38:1d:4d:09:a1:7a:6a:a1:69:b7:a1:34:d0:
fe:50:4c:d6:01:67:38:b2:3e:df:61:9e:3b:da:1e:d8:64:84:
fa:b4:16:bf:ec:9e:07:a4:54:89:6c:a5:3f:bd:19:3d:b7:c6:
4c:bd:f9:aa:02:b9:23:4a:05:01:5f:48:9b:86:a1:6f:0c:88:
3c:35:19:0a:23:20:9a:dd:55:03:d5:e1:cb:0a:fb:e8:09:bc:
f8:f4:11:99:61:18:b8:c5:27:71:2c:e7:23:b7:14:5d:13:7b:
26:0b:48:68:e3:9b:b5:b1:e1:c1:a1:8a:50:8c:99:15:08:12:
3d:58:4e:58:69:a3:d6:e8:59:1a:cf:d0:a1:31:18:7f:0c:53:
80:43:61:20:13:ba:45:2e:55:7b:27:0a:fa:77:e4:79:01:31:
50:53:10:a4:c7:5b:59:2a:59:b3:5b:47:c3:fa:5a:0a:32:78:
c9:96:b0:a8:26:a3:8d:6f:69:91:9a:a8:d6:53:66:c8:b5:41:
87:d6:cd:4d:cb:c9:de:5c:ab:9e:79:ec:81:6e:eb:21:54:9a:
61:6d:13:c3:1c:19:4a:ba:23:72:c7:a8:60:3f:a4:6d:92:71:
2b:40:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:11 2025 by rpki-client