Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: s+MrOuABmNm925TazeHy5Gr63V8a46907izEOeU0CY8=
Subject key identifier: DA:20:BB:47:F5:F6:08:B6:C8:78:3A:5C:C0:FB:0D:F9:91:23:A4:89
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 0199228C281AE0F13B8291EF17D97DB2C69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 0F45
Signing time: Sun 07 Sep 2025 05:00:34 +0000
Manifest this update: Sun 07 Sep 2025 05:00:34 +0000
Manifest next update: Mon 08 Sep 2025 05:00:34 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: N7tO/XjWkXHPgPvlAnloiD/gH667/6etuj6dN11YGgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:28:1a:e0:f1:3b:82:91:ef:17:d9:7d:b2:c6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Sep 7 05:00:34 2025 GMT
Not After : Sep 8 05:00:34 2025 GMT
Subject: CN=da20bb47f5f608b6c8783a5cc0fb0df99123a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:9e:4e:61:b3:c3:00:6a:53:02:b8:88:24:
28:a3:8c:f6:24:9a:6c:95:6f:d8:eb:6d:9d:ed:ed:
68:36:1a:d1:49:73:79:84:0d:9b:5d:cf:da:c4:9f:
0c:0e:3c:65:c0:0f:68:e1:0b:12:b6:74:8b:1c:3e:
d2:8f:c5:d3:71:b5:87:19:34:a0:13:76:c1:f9:e0:
ef:90:f3:0b:8f:4b:8a:60:83:7f:9a:1b:d2:a1:e6:
ed:65:7e:8d:ff:bd:69:64:14:91:08:0b:bf:5c:ff:
63:1e:69:7e:8a:9a:84:76:85:7f:d1:c9:b3:75:f6:
92:4c:cd:02:15:a1:1e:02:ee:18:1b:9e:fa:6e:f2:
dc:f1:5c:e2:34:83:22:f4:35:83:0b:f5:01:01:80:
8e:34:17:65:cd:2e:20:ad:e5:29:64:b5:ae:a7:70:
e1:8d:39:72:ac:fa:7a:ef:bc:21:10:8d:34:75:cc:
5a:4a:db:df:ab:63:be:12:ad:80:15:5e:e2:4e:95:
b7:63:cb:33:76:fe:53:54:69:ba:94:88:a5:5c:e7:
e5:31:e5:ea:83:53:9b:93:e8:0b:68:fd:4c:09:08:
2c:a1:6c:c2:4b:27:ec:16:d8:50:50:30:7f:2a:2d:
0d:e5:be:13:2e:f3:e7:75:68:34:bc:88:48:3c:c9:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:20:BB:47:F5:F6:08:B6:C8:78:3A:5C:C0:FB:0D:F9:91:23:A4:89
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:c8:a4:75:40:ac:a8:44:8e:a6:a2:42:8e:b7:cb:c3:24:
6a:9a:05:64:70:3f:02:2b:0d:e4:cf:c8:2f:63:84:ad:30:ca:
f4:04:47:b9:42:11:b6:33:c5:06:6f:32:b2:56:5c:19:fa:28:
48:38:03:54:00:c8:f9:59:c5:a4:d2:84:45:ea:0c:41:40:ae:
f6:66:30:fd:f9:f3:77:14:78:b6:8f:65:43:1d:f3:3e:ab:11:
1c:2d:a5:7f:13:a9:62:55:59:e9:70:f8:b4:d6:e2:3e:69:fe:
71:98:1b:f6:0f:15:0c:2b:2a:12:5e:2a:ba:c9:09:fd:90:29:
9e:7b:06:be:85:a9:ac:b8:71:ab:a1:45:9b:0a:e9:05:61:80:
33:c3:05:6e:b0:b8:e4:7d:13:b4:80:9d:fd:c0:95:2a:00:aa:
53:fd:19:07:bd:06:19:68:66:4d:63:99:5d:1b:4a:86:48:b1:
ea:eb:88:5f:30:02:fb:2a:80:05:01:0b:76:f3:10:ac:93:79:
d4:b3:30:34:3d:00:00:11:25:9a:63:c3:5d:6d:65:5f:00:48:
10:90:ab:81:0b:e8:05:50:f6:48:ec:b7:5c:5e:a3:9c:05:2f:
67:22:8b:87:17:27:f2:d3:7f:bd:1b:38:0d:42:0d:3a:f3:66:
18:6b:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:38 2025 by rpki-client