Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: k5a04gij49mrtv5ZVjTc0btR9Tcp/b+96x7UMCAt63A=
Subject key identifier: 0B:64:E5:0A:B9:13:51:A2:3D:84:A5:6C:03:B5:9F:9C:BB:7B:13:3B
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 019921B1C403AB0B10B1144479C5FDE1BBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 1132
Signing time: Sun 07 Sep 2025 01:02:01 +0000
Manifest this update: Sun 07 Sep 2025 01:02:01 +0000
Manifest next update: Mon 08 Sep 2025 01:02:01 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: s1dUbiLLH72QU4GhnNQjyd0pT1O6j6ZYuv8tdPPoNsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:c4:03:ab:0b:10:b1:14:44:79:c5:fd:e1:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Sep 7 01:02:01 2025 GMT
Not After : Sep 8 01:02:01 2025 GMT
Subject: CN=0b64e50ab91351a23d84a56c03b59f9cbb7b133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:ff:37:c7:18:a3:f2:5f:12:40:ec:a1:02:
b6:5b:48:77:40:0d:b3:b4:07:45:bd:ef:9e:88:98:
dd:58:6c:24:c9:05:c7:4a:dc:5c:f4:45:bf:0d:a9:
77:95:fa:fb:d2:fc:f7:a3:3e:0e:8d:d0:6f:35:19:
9c:61:8d:53:b5:63:c2:e9:db:cf:ad:4e:06:ff:7d:
af:89:8b:cf:f7:91:1f:d0:7c:8f:2e:1e:62:be:9f:
35:05:8b:ae:37:0b:7d:66:d6:39:af:ab:93:60:1b:
3a:91:af:9a:55:0c:89:ff:5c:e3:3c:e8:5e:31:a8:
25:40:0d:4b:4f:a9:72:ad:d1:4e:b1:70:18:c1:b6:
59:e5:59:4d:2e:c8:36:77:08:6f:23:57:d4:dc:78:
2f:79:37:60:37:c5:59:86:77:5a:65:54:51:30:83:
bc:61:e3:8d:ce:97:b0:bc:e5:f6:b8:d1:69:b5:76:
b0:83:0f:77:04:11:63:4b:ed:39:cb:6c:00:3d:66:
39:6b:cd:fd:53:00:77:67:26:ff:30:44:25:03:77:
59:ca:c2:19:31:1a:33:72:ab:9a:f7:48:01:ac:80:
9f:f4:ff:48:a0:19:58:b5:3d:70:a6:c7:a8:5e:e6:
ef:09:7f:a0:ac:25:04:40:f1:56:2e:21:db:2a:62:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:E5:0A:B9:13:51:A2:3D:84:A5:6C:03:B5:9F:9C:BB:7B:13:3B
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:ba:7c:56:2f:d8:e9:b9:d0:35:54:f3:e6:ed:a8:75:26:9f:
20:b3:e4:97:53:98:87:dc:e3:12:89:81:9a:ad:03:84:9a:93:
f6:15:f9:ac:18:ae:b0:53:72:f6:98:07:5b:f9:7c:62:02:c9:
37:b8:ab:7d:9b:cc:da:da:74:51:3c:13:57:6d:af:2d:41:99:
48:89:1c:50:52:24:38:10:a5:2b:9f:11:91:be:97:1b:d1:5f:
0e:01:bf:da:8a:0b:19:53:32:08:ce:ea:15:2d:7b:51:ed:5b:
1e:b5:b4:6d:29:c5:0e:e8:86:5e:f9:f6:79:fd:49:2a:05:6b:
03:08:6f:bc:09:78:a2:8a:eb:12:42:da:ab:d8:a1:b8:9a:47:
cb:03:82:86:d7:55:c1:91:65:99:3e:a0:3b:ef:84:d1:c0:90:
cb:1e:c4:4d:3d:57:39:f1:5a:66:5c:51:54:9b:04:b9:20:ff:
51:31:d9:76:ac:43:e4:10:7e:2b:dc:c0:10:c1:ba:01:ed:b8:
6d:35:2f:c5:40:58:99:76:32:97:63:7e:f4:3b:1d:a4:ea:d3:
da:00:85:15:7d:0f:06:fe:2b:11:48:31:b6:fd:2f:17:03:68:
6c:9f:38:71:14:51:e4:12:a2:2d:80:c1:cc:28:0d:dd:b1:96:
9d:64:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:13 2025 by rpki-client