Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File: ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier: 7mSKTkGMvcyBWZ9Ucqc7AE6DYHX1VjK9PUzznNtej40=
Subject key identifier: 03:4F:BA:CF:A6:E3:7E:F3:51:F6:13:CE:35:C9:7C:8C:4E:2A:DD:BA
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer: /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial: 0199221E9BA659686E2BCFEFB8810FDE20F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number: 087A
Signing time: Sun 07 Sep 2025 03:00:55 +0000
Manifest this update: Sun 07 Sep 2025 03:00:55 +0000
Manifest next update: Mon 08 Sep 2025 03:00:55 +0000
Files and hashes: 1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: LsV+REqe1D9CB9aWMEcYcGIhry+8LJbi6pTl+t9Nv4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9b:a6:59:68:6e:2b:cf:ef:b8:81:0f:de:20:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
Validity
Not Before: Sep 7 03:00:55 2025 GMT
Not After : Sep 8 03:00:55 2025 GMT
Subject: CN=034fbacfa6e37ef351f613ce35c97c8c4e2addba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:65:d6:0d:7c:5a:d3:6c:ca:e4:b1:7f:f2:
e6:7f:dc:f6:06:c1:0c:7e:30:ad:0c:3a:f4:e4:b0:
c1:d1:d2:3a:e9:58:75:ce:5c:40:47:1e:c9:d7:3c:
1d:69:6e:b3:9f:10:37:97:66:bc:cc:e2:fc:a5:07:
7a:2e:cb:5f:f6:45:08:39:d3:b5:80:e2:1c:d6:03:
88:41:0b:f6:c0:52:89:11:48:9c:49:5d:4c:c5:95:
0f:59:ce:0b:de:47:24:0e:01:4c:ca:4f:e4:84:bc:
7a:0e:82:15:1b:2a:a9:45:5d:e6:ce:8e:5d:a8:a5:
ab:aa:ef:73:ae:cd:60:59:4c:85:81:33:7c:01:f0:
6c:b4:07:bb:ce:f7:53:a4:ae:a1:5a:0a:0d:de:7d:
54:6c:43:93:f3:0b:ec:4c:ec:92:64:03:e3:f4:6d:
9e:4e:fe:d9:6e:39:2b:5f:c3:77:5b:61:74:7a:6b:
28:a2:7b:ff:90:ad:d8:e2:0b:b3:b6:8f:a5:d0:ec:
6b:b5:4d:a0:cf:57:16:73:73:49:3a:16:38:0e:59:
54:9e:48:e8:f5:f6:03:49:0f:1c:fa:46:a2:3e:6d:
5f:a3:d4:52:70:52:6b:eb:99:37:2c:11:67:a6:92:
bb:4b:64:0b:b4:7e:66:ea:77:13:df:a2:cb:60:89:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:BA:CF:A6:E3:7E:F3:51:F6:13:CE:35:C9:7C:8C:4E:2A:DD:BA
X509v3 Authority Key Identifier:
keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f8:d1:7a:be:a4:a3:3a:8f:4c:ec:17:da:34:64:18:4a:f3:
c2:5e:17:ed:f7:7c:2f:d7:36:30:50:95:11:1f:ed:8f:66:d2:
d6:15:92:99:09:c5:01:75:eb:d6:f1:ca:10:bb:25:c3:bf:b5:
4a:fc:42:c4:c1:f2:fc:82:83:ee:7e:3a:2c:e1:8d:58:9e:23:
82:8a:08:50:16:aa:34:09:6e:07:58:d0:77:c2:5a:03:e5:f4:
49:39:7c:da:13:86:21:74:a0:8c:e1:c8:3e:91:ca:7b:cb:06:
57:9d:a6:08:23:df:88:3a:0f:da:03:db:aa:6d:bd:ec:9c:c9:
72:d7:12:ba:94:4c:13:8e:00:63:08:ae:a3:88:7b:f5:e4:c1:
65:c6:f0:53:38:7c:de:c5:e9:d8:a7:a0:8d:74:2a:97:c5:47:
19:63:47:89:f3:cf:d1:95:28:ed:be:d0:f2:dc:d6:73:fc:5d:
60:df:bf:de:b8:24:8e:1e:aa:8e:b0:d4:fe:4b:57:3b:f1:7a:
7c:49:60:07:6e:0d:73:4a:73:bc:75:91:ec:d8:3e:3e:a0:4c:
ce:3b:ca:04:81:00:b5:00:95:41:61:f4:1c:04:41:19:2c:7f:
2a:c2:f7:0f:91:fb:64:26:a6:c6:a6:08:f4:47:8a:c4:64:46:
08:ee:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:21 2025 by rpki-client