Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: iadSrLfGWMJ9ZdteOMDpuopqr8peuoxXn8PPR3msYrc=
Subject key identifier: 82:29:D9:31:42:1B:C6:42:AE:3B:8D:98:CE:E1:51:C3:37:DA:60:87
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 0197C9F10DB1E6C1554FF4E45BCE820DFAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 1080
Signing time: Wed 02 Jul 2025 07:01:47 +0000
Manifest this update: Wed 02 Jul 2025 07:01:47 +0000
Manifest next update: Thu 03 Jul 2025 07:01:47 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: Z5WYPV4rqIJu+AUY9/BCYtVbj3Ijc/+WRcq27MCfe6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:0d:b1:e6:c1:55:4f:f4:e4:5b:ce:82:0d:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Jul 2 07:01:47 2025 GMT
Not After : Jul 3 07:01:47 2025 GMT
Subject: CN=8229d931421bc642ae3b8d98cee151c337da6087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:fc:26:3e:f3:99:f9:29:1a:3b:24:ea:e4:
8b:78:80:e9:e2:31:d3:35:2a:da:13:c7:da:1b:87:
5c:87:4d:d6:6d:60:9d:38:34:d7:6b:1b:d8:ff:79:
67:e0:06:b0:e6:fd:fc:e6:73:6d:99:99:d6:bb:f0:
63:0d:61:8a:a6:be:6f:02:05:50:cd:89:86:2a:da:
5c:65:8e:7a:76:7f:e4:bd:f2:3c:0a:03:4d:15:79:
29:40:b4:a9:0a:e8:7b:d4:f9:3c:cc:82:7e:f8:80:
94:e4:12:a8:ac:4e:8b:e9:9e:37:11:aa:e9:d1:8b:
1c:07:f2:89:a2:96:46:7f:d8:1b:d6:f4:ca:93:05:
a1:39:7c:c4:69:b4:21:5a:a0:0b:93:08:86:32:c7:
ea:3b:a7:96:50:62:b0:7c:a0:dc:86:d2:b6:a1:cd:
a5:52:18:74:f4:98:d7:89:08:e9:67:d7:0b:c7:be:
0b:9b:04:dd:e2:c4:40:dc:10:dd:18:6e:fd:1a:52:
26:59:b8:ac:9f:d1:2a:98:e3:26:65:c3:1d:c2:74:
22:89:c0:21:ae:f2:0f:59:09:5a:24:cc:a0:a4:5b:
80:08:74:21:43:e4:79:24:14:76:f7:66:b9:c7:c6:
5d:74:c5:e2:69:35:cf:63:2f:79:49:eb:42:43:08:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:29:D9:31:42:1B:C6:42:AE:3B:8D:98:CE:E1:51:C3:37:DA:60:87
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3f:86:92:fd:c2:9b:7c:fa:ac:3d:a4:17:cd:0c:a3:7d:5e:
44:a5:f3:0b:c1:cf:59:9b:99:24:b8:05:8e:32:0a:62:8a:8c:
8f:b2:86:ad:dd:d7:00:61:af:bc:7a:74:58:e7:68:7f:d6:73:
f4:d9:9a:28:99:55:24:7c:b2:49:02:2d:3a:21:28:cb:ec:0d:
d1:48:5a:eb:03:27:bc:43:e5:87:cd:cf:97:61:fa:9f:c0:65:
7f:be:27:42:78:50:a9:08:7a:12:f9:6c:f8:66:65:03:2e:38:
d9:d1:90:cd:79:83:34:fe:bc:36:25:71:a6:45:ed:ea:6b:da:
17:c0:4c:ea:ec:ff:f2:e0:53:a6:1e:a6:02:8b:2b:3d:8a:4c:
6a:17:aa:97:bb:d6:87:bb:55:03:2c:98:f0:45:c0:24:0d:37:
56:7a:4d:27:48:ab:19:bc:9b:1a:8d:1a:28:d9:9c:07:f0:42:
a8:37:9c:f5:68:9a:f9:29:31:0b:c0:93:30:8c:09:48:2e:6f:
6b:2e:00:2e:89:9b:af:60:21:26:04:d2:d9:78:83:d6:e0:b6:
54:0e:85:c2:bb:11:35:57:e5:59:8b:61:3c:04:f4:ac:40:4b:
9c:f8:a8:93:df:d5:e5:11:24:bb:c8:0c:8f:1a:b0:67:da:a3:
df:7b:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:12:21 2025 by rpki-client