Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json)
Hash identifier: ZZ98N6e5vG0tCKT7Uha6kbUMiJBpvGObqpW7tfr2tpM=
Subject key identifier: DA:4F:F4:F9:9B:50:C8:3E:46:76:98:E6:A8:A9:85:C8:2C:51:76:DD
Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d
Certificate serial: 019922FAD6E692C32A963015EECE1E3BB8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: 6dsNOEZ5Wc1TFxUndW/16RPn8BijNlacTcrUO01FWIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d6:e6:92:c3:2a:96:30:15:ee:ce:1e:3b:b8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=da4ff4f99b50c83e467698e6a8a985c82c5176dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:e9:ea:c6:8d:0d:a5:bd:0a:5b:a0:50:d2:
35:fb:d6:a4:aa:46:3c:78:39:0b:a6:c2:a4:c3:b2:
c1:91:4f:5c:54:82:dc:f2:fc:34:94:41:2c:71:72:
2d:0c:91:6c:fd:cf:ff:24:55:68:27:80:1d:9b:da:
02:d9:82:06:a8:49:93:31:ae:3d:31:ce:98:e2:3c:
f1:d0:32:5b:10:5d:66:e8:c6:f2:9d:32:5f:16:ac:
1c:71:9e:e9:a8:d4:11:2a:ba:c9:28:f7:ee:ec:51:
2a:73:6c:0a:26:1e:fb:55:d4:d5:44:71:98:97:d6:
4c:cc:5c:55:88:68:86:3c:ca:b2:85:07:9d:22:e8:
7c:8a:3c:b7:04:a2:8c:8b:ec:e4:83:85:e5:26:5f:
16:f6:ea:51:e5:0f:17:ee:72:c8:6e:bb:fc:b6:e9:
f3:58:4c:9b:dc:8c:5e:7c:53:ca:73:58:d4:a0:30:
97:20:a5:e0:98:ac:42:7c:31:48:34:97:0c:e8:41:
c7:ae:63:0c:11:94:26:a3:32:06:ef:22:5c:ef:28:
be:2e:9a:ce:37:c9:fd:47:7e:41:84:c0:5a:27:0a:
50:f4:2b:08:9b:0d:66:19:e2:05:ac:24:89:b2:1b:
1c:f4:f0:30:f4:bf:64:fe:96:ce:05:91:8f:82:f7:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:F4:F9:9B:50:C8:3E:46:76:98:E6:A8:A9:85:C8:2C:51:76:DD
X509v3 Authority Key Identifier:
keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a3:13:f6:a7:2a:76:6e:05:f3:fd:b7:bd:56:15:fd:de:8c:
da:b4:d8:d5:72:a1:54:09:c5:c3:4a:ee:67:d1:80:09:9f:5a:
f1:ea:cd:d8:22:a3:b9:26:e8:ea:da:58:8c:04:c8:32:0f:38:
5d:4d:6c:60:1e:c0:36:ab:dd:04:08:45:3b:ff:bb:db:8f:7c:
1d:1f:71:76:d5:58:cb:b4:59:f9:d1:a1:24:0c:38:f4:ee:fb:
e1:19:dc:9a:9c:d3:81:dc:ff:83:5a:e2:2e:ad:af:20:27:cf:
ee:4f:ff:5c:ea:b8:04:3a:b7:d9:30:7a:79:19:4d:41:ae:f9:
db:fe:16:35:92:58:cb:a4:19:20:9f:d8:2d:f4:33:80:f7:f2:
f0:2c:30:35:fd:97:7f:2f:f2:fb:6a:9e:c6:ee:f6:51:43:33:
99:7f:68:a0:37:26:de:1a:12:b2:4b:e0:58:b9:8c:f1:ea:86:
49:26:57:6d:02:0f:aa:3f:43:04:de:19:6d:03:9f:b2:91:52:
aa:78:b0:ae:d4:76:de:bb:43:f6:3e:37:a4:1a:fe:11:55:6f:
a6:8a:19:f6:c5:9b:57:48:1c:1a:e5:7b:b4:08:ff:5b:1e:e8:
11:4b:04:94:62:49:fb:ba:2a:a6:88:e7:02:7d:b0:a8:bc:46:
ce:38:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:45 2025 by rpki-client