Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
File: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft (raw, json)
Hash identifier: D1KEBGSDz0CwgTKtmkXvWE41t+tAGagDAPzxwRbFKbQ=
Subject key identifier: A2:B4:76:6A:49:BD:3D:66:5E:5D:A5:68:5F:E7:9C:1D:61:26:42:E1
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 01984B5381350BA355B9C39CB3500F3FC65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
Manifest number: 0EC7
Signing time: Sun 27 Jul 2025 10:00:20 +0000
Manifest this update: Sun 27 Jul 2025 10:00:20 +0000
Manifest next update: Mon 28 Jul 2025 10:00:20 +0000
Files and hashes: 1: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl (hash: ALgDPz4zQxQOj0iH8eRCROnnK+lzCePDzJ4iORHFeuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:81:35:0b:a3:55:b9:c3:9c:b3:50:0f:3f:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Jul 27 10:00:20 2025 GMT
Not After : Jul 28 10:00:20 2025 GMT
Subject: CN=a2b4766a49bd3d665e5da5685fe79c1d612642e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:ec:10:32:83:5e:f6:43:cc:18:50:77:2b:
7a:02:f4:f9:99:c9:db:a7:90:3f:cb:a0:f0:f6:f1:
a3:19:2a:72:36:c4:f4:59:ac:56:4a:7e:55:24:a9:
ad:28:f6:00:5f:18:72:cf:c7:52:2c:e6:41:6d:e1:
05:a4:b6:27:01:fa:0c:71:38:5b:39:24:cc:0e:8f:
45:a5:37:87:cc:f7:05:f4:e3:88:44:e8:1c:0f:f4:
bb:f2:26:23:ef:42:0c:5b:8a:67:66:32:97:0c:a3:
d1:f8:75:a8:c2:f9:b9:a6:7b:ad:74:c6:f6:ea:55:
96:ae:e3:ea:21:50:bf:f0:43:45:e0:18:0c:61:fd:
7b:75:a4:7a:60:19:d0:2c:ae:39:02:bc:22:46:b1:
6d:50:fd:59:d1:f1:00:99:74:23:6d:50:17:b1:63:
c7:42:a6:a6:a6:01:90:a6:9b:43:b3:a4:cb:4c:e3:
bb:62:2f:ac:73:b2:b0:cf:04:29:87:cf:8d:d1:32:
f4:f2:b1:25:19:b9:ed:89:80:66:9f:5b:7e:39:0a:
a5:a2:28:25:42:43:07:00:d7:54:39:6f:b9:0a:b2:
d5:4d:24:cc:96:e1:ff:a8:c7:a0:78:73:9b:f3:c9:
c2:d7:8e:55:55:3f:20:0b:df:90:7f:fa:2d:3f:89:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B4:76:6A:49:BD:3D:66:5E:5D:A5:68:5F:E7:9C:1D:61:26:42:E1
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:04:f5:02:3b:64:c1:31:ae:56:e6:04:c2:c5:15:14:18:38:
f8:4e:06:78:c7:32:b9:f4:5f:1f:8e:8f:ab:17:e8:d8:c4:4b:
fe:bb:14:5a:37:12:51:3b:19:41:8a:ff:13:0a:6d:2e:cd:57:
ec:84:ed:1e:d3:53:08:7a:00:86:ca:eb:f6:3e:4a:40:fd:a8:
32:d5:06:e7:37:30:de:c9:9e:9a:6e:5f:be:21:69:e2:df:1c:
66:17:a1:e1:6f:74:0c:8c:27:b7:a5:39:18:cb:ec:27:0c:88:
30:33:14:27:cd:73:5d:0b:bb:80:45:3b:f2:0f:ac:d9:9c:92:
a4:32:32:70:af:35:29:60:8a:83:29:2d:bc:16:e0:7f:35:06:
7a:14:14:8e:87:a1:56:0c:08:6b:4a:a0:ab:7f:1b:ff:d4:0c:
7a:f1:a9:4f:89:60:93:e3:4f:50:34:18:4c:6d:48:be:99:ce:
59:6f:ec:1e:fd:70:3f:41:17:87:ea:0e:c3:0c:0d:76:b6:ba:
f7:29:d7:12:ca:b4:4d:5c:fa:df:9a:80:62:ab:4e:0e:fe:6b:
4a:6b:b6:de:f2:39:95:9b:47:e1:2f:90:f0:89:85:e4:5b:ea:
35:15:d1:b6:6e:fc:08:62:eb:3e:3e:e9:93:02:d9:3a:cc:df:
64:f9:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:35 2025 by rpki-client