Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
File: ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft (raw, json)
Hash identifier: 7Dj3azFgJDq4Au8FQJIxu0NQoJGmyI52jrelj9N13gw=
Subject key identifier: F4:18:0C:25:87:8A:8B:EF:A3:FD:67:3D:1A:0A:3B:86:36:0A:45:39
Authority key identifier: 64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
Certificate issuer: /CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Certificate serial: 01984966ABAC1EF2F2C990A0ED83B08EE6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
Manifest number: 158F
Signing time: Sun 27 Jul 2025 01:02:02 +0000
Manifest this update: Sun 27 Jul 2025 01:02:02 +0000
Manifest next update: Mon 28 Jul 2025 01:02:02 +0000
Files and hashes: 1: ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl (hash: BFTmxeqqpESWPYpsQrH0WNh9GJGhCRmpQHuE78I4cf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ab:ac:1e:f2:f2:c9:90:a0:ed:83:b0:8e:e6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Validity
Not Before: Jul 27 01:02:02 2025 GMT
Not After : Jul 28 01:02:02 2025 GMT
Subject: CN=f4180c25878a8befa3fd673d1a0a3b86360a4539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:d7:fe:46:ea:15:cb:28:b4:90:d0:00:0c:
68:77:88:fd:40:a4:a1:54:34:29:bb:77:f4:c9:66:
9c:13:6e:10:78:4b:b4:99:79:a8:af:7b:76:47:94:
26:06:dc:14:0b:93:92:3b:af:68:c7:8e:67:e2:90:
d8:75:c0:b9:66:60:64:e2:cd:d2:ec:bf:0e:12:f5:
8a:44:de:a4:36:f1:6d:d0:4d:a7:53:7d:e5:56:07:
59:37:c6:9c:51:d8:b8:7a:f8:cc:b2:be:43:8f:ae:
88:c0:57:ed:67:40:78:d2:0a:cd:c8:98:93:84:6c:
77:21:01:02:52:fc:63:47:b3:68:eb:6f:28:76:27:
8a:1b:f9:2c:56:d0:91:17:7b:dc:15:ae:3f:ac:1d:
e0:4e:13:ea:96:0d:ee:a6:67:51:b0:2f:93:15:59:
0e:a5:a4:72:0f:29:82:ad:9f:e5:ab:74:27:d8:15:
54:b9:33:6f:47:e2:5b:fc:57:80:b4:3f:ee:0d:ec:
41:79:0c:cc:e8:5e:23:ad:fd:a4:c5:af:25:d2:f2:
c8:5e:5e:11:24:fb:af:81:97:a8:45:1b:31:7b:56:
f9:7a:d7:2e:0a:64:12:20:2e:ee:24:ac:24:c2:cb:
1e:a2:a1:e7:26:d1:f9:d5:91:3e:68:e1:5d:b6:83:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:18:0C:25:87:8A:8B:EF:A3:FD:67:3D:1A:0A:3B:86:36:0A:45:39
X509v3 Authority Key Identifier:
keyid:64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:af:a2:da:15:a7:27:8e:d1:97:14:d0:39:dd:24:98:aa:
a0:aa:55:9d:82:4e:81:c5:85:72:06:64:1b:47:3e:b7:45:92:
59:32:e5:f5:89:2c:82:a5:a4:9f:df:67:ce:ef:fc:bd:8b:3b:
f8:64:ab:66:fe:3b:d6:a4:32:39:f9:75:f1:84:de:ec:ab:93:
f5:49:e8:c7:f1:a6:f0:d8:a1:25:42:4d:a5:b3:d8:ba:5b:46:
08:bf:12:e6:c6:ab:b4:b8:2e:d3:98:f7:b9:6b:47:2a:b4:5c:
b9:43:24:70:50:85:5d:29:18:50:33:0f:58:b3:fa:aa:4c:a7:
c0:c1:a5:9a:9c:ce:2d:52:e2:7a:24:28:da:24:5b:7c:ea:ec:
1a:09:6a:df:3d:3e:8b:b4:5e:1b:6e:21:1f:42:2e:e8:d1:20:
4f:00:51:d7:fd:c1:6d:13:ee:c0:43:ce:53:07:00:01:e4:6d:
38:af:a7:ad:bf:6a:c0:e6:5a:25:cf:78:45:0b:a2:4b:f1:df:
44:e8:26:80:c5:eb:58:ff:ee:e1:13:93:67:81:cb:b6:f0:8b:
77:8c:73:fd:29:c8:89:ad:ee:89:db:08:15:1e:e8:68:bb:64:
e0:67:42:a4:a5:9e:ef:62:13:21:83:2a:0d:ff:fe:07:70:e3:
f9:78:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:40 2025 by rpki-client