Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: PnhxQyPT/gRJcS6AtwWZqqN/P2cKKb1w6MU916KKBZc=
Subject key identifier: 51:DF:E9:55:FA:E6:00:3B:A3:49:94:E7:19:9C:B8:C8:8C:60:1D:96
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 019851C3737041D8D503E053B0C510CA00A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 1147
Signing time: Mon 28 Jul 2025 16:00:20 +0000
Manifest this update: Mon 28 Jul 2025 16:00:20 +0000
Manifest next update: Tue 29 Jul 2025 16:00:20 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: XQ0HWEAUaShdwQExn1EanLGoLoPP6n2j+c44bhn8+wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:73:70:41:d8:d5:03:e0:53:b0:c5:10:ca:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Jul 28 16:00:20 2025 GMT
Not After : Jul 29 16:00:20 2025 GMT
Subject: CN=51dfe955fae6003ba34994e7199cb8c88c601d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6a:28:c2:4b:7f:d7:95:13:4e:ae:58:e0:8b:
5a:ee:89:b6:69:1d:fd:29:85:ec:bd:d8:21:4f:c6:
26:48:62:b4:5d:42:ca:0d:90:11:5f:9e:09:fa:27:
92:26:26:ce:c1:9f:a4:59:8e:3f:4c:29:e2:b7:97:
57:7e:8f:b4:ee:b0:98:a4:df:00:6b:8e:9e:a0:bd:
ea:c7:03:5e:82:9f:f3:1e:a5:0c:08:53:f3:43:c4:
d4:80:18:1f:48:1b:68:df:a1:0c:e8:74:6d:3a:42:
7f:a5:9b:ac:50:c8:d6:ba:ec:29:d7:ec:71:84:62:
5e:cd:24:c3:89:6a:de:09:08:ac:0e:f3:02:5e:a4:
19:8a:0b:e0:9d:20:f7:82:cd:60:a9:8f:ac:b6:a4:
74:46:61:25:ce:b4:90:8f:34:f1:65:d4:b8:f2:2e:
5a:9f:86:9e:be:34:d5:c5:73:48:57:09:39:b1:49:
45:d4:d1:18:5a:c0:40:81:2a:e3:cc:34:ac:db:fb:
f9:05:10:e2:50:ed:25:06:3b:47:be:71:f9:53:c6:
4b:f0:85:87:e6:a1:20:9d:ba:32:94:6c:41:e1:d8:
fe:6d:5c:e0:12:b6:f7:94:6c:bc:22:76:c7:55:b2:
60:aa:b6:5c:7d:69:6c:f1:70:18:af:e3:19:7d:89:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:E9:55:FA:E6:00:3B:A3:49:94:E7:19:9C:B8:C8:8C:60:1D:96
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:40:e4:c1:9d:48:d8:14:2e:70:04:5a:e9:69:04:ac:e4:
e4:c3:55:d8:56:d6:2d:f8:2c:8b:d8:5a:3b:32:89:dc:19:18:
84:5b:9c:47:98:4d:5a:06:58:4b:ee:62:23:14:c0:8f:8b:4f:
47:09:7d:39:88:4f:53:71:4f:3e:74:6b:25:15:9a:16:d0:7d:
83:6b:30:c5:6f:0c:52:ca:b3:c8:3c:a8:87:16:97:19:f0:de:
3a:b7:3b:3d:45:71:49:38:da:11:ec:bb:f8:01:68:66:ec:7f:
70:10:f7:af:c9:22:32:6e:f6:46:13:b9:d4:cc:3f:88:b0:17:
52:11:83:e2:3d:ea:25:a4:d6:7a:fb:d1:2a:c2:1f:bf:fc:a5:
97:ee:f4:64:77:2d:f6:b7:0e:d2:23:51:bb:05:61:71:e2:0a:
4f:63:8e:93:45:8e:62:90:40:76:f5:47:a9:a7:20:ae:3c:e9:
4b:69:37:df:9f:69:8a:ac:f4:b3:4d:39:44:1f:56:52:d5:9a:
02:c0:fb:cd:d9:55:f4:d9:d6:0a:78:db:17:28:f5:94:48:27:
4e:1d:f5:5b:20:23:a9:62:d2:15:d9:71:67:a0:92:77:6a:da:
d5:6d:6c:51:af:c8:5e:a7:f4:43:b9:a1:12:d1:36:6e:0a:ee:
93:b0:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:00:58 2025 by rpki-client