
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: zPEMT/kaypyQVTxvRaN5W8P60vcqSR2soyDuvrdIVhE=
Subject key identifier: 54:59:E5:70:6D:BA:17:21:7B:F8:3F:B1:BE:38:5B:B4:17:E5:22:FF
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019921B1F70FA295F3FBEBD90ABCDD597AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:02:15 +0000
Manifest this update: Sun 07 Sep 2025 01:02:15 +0000
Manifest next update: Mon 08 Sep 2025 01:02:15 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: Bloq8EUWAq8IgJf8pv5KBH3H0MUYCJGWGUhL4IE22gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:f7:0f:a2:95:f3:fb:eb:d9:0a:bc:dd:59:7a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Sep 7 01:02:15 2025 GMT
Not After : Sep 8 01:02:15 2025 GMT
Subject: CN=5459e5706dba17217bf83fb1be385bb417e522ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:ec:e4:75:97:c8:09:4e:cb:41:6a:22:6e:
27:da:7d:38:b2:b0:ab:a3:67:43:4b:f6:cb:7c:4d:
37:11:d3:85:17:5b:8a:b9:12:e6:8f:6b:48:30:9a:
34:99:a8:8c:55:de:d8:42:6e:ab:dc:20:3d:4e:ad:
88:94:98:37:5e:4a:23:33:05:f1:75:86:1e:2a:f2:
3b:3c:67:c6:d2:49:35:0f:6d:c9:f7:c4:89:b9:70:
69:11:dd:72:31:d7:6d:5c:20:fc:09:5f:ad:44:f8:
6e:86:21:71:b9:a1:fa:aa:8d:05:d5:cf:7b:f9:a0:
7f:16:f5:a7:b2:e3:ba:e2:ae:49:a1:46:cc:ee:97:
cd:fa:b3:77:cf:b8:20:8d:4a:8b:5e:6c:71:fa:b9:
4b:c6:ef:c2:70:a2:d4:cc:1d:dc:33:17:7a:75:9c:
cf:b6:d3:5f:45:de:81:0e:af:70:ac:44:03:23:2d:
15:b2:27:24:a9:89:41:6a:fd:4e:34:a9:70:6b:4d:
80:8b:d7:c2:bc:12:39:6f:31:37:92:95:47:7a:db:
11:14:ef:71:c5:94:b9:19:4c:cb:f0:af:d8:9c:47:
12:81:4b:dd:ad:9f:d2:9b:62:70:b4:33:fd:f1:39:
db:9d:3d:14:0d:1d:13:a6:1c:02:ba:24:ae:5b:29:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:59:E5:70:6D:BA:17:21:7B:F8:3F:B1:BE:38:5B:B4:17:E5:22:FF
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6a:dc:09:80:b5:19:da:47:2f:18:24:01:da:2a:fe:40:7e:
97:c8:3a:05:c1:7f:9b:b1:35:5b:a3:d6:71:c1:8b:a0:00:bc:
0a:1a:e0:84:42:a7:14:a0:4b:1c:f4:64:99:ca:67:f3:8d:9b:
ba:70:94:45:62:48:4e:95:77:6a:82:aa:8f:30:53:11:41:a8:
ab:f5:1f:68:28:97:6d:1d:79:43:99:83:18:96:3c:bf:65:ea:
f5:dd:9f:97:5e:30:a5:c3:fb:cf:49:bd:f2:52:d4:11:15:cc:
9c:9c:f5:43:b6:e7:3f:37:ab:de:af:56:95:45:d2:8e:bd:59:
24:f0:38:a5:33:ca:12:ae:86:b5:aa:36:8d:d5:8a:ae:e3:77:
68:4c:d4:20:bd:2e:25:25:01:d2:6e:90:d8:bd:ea:9d:fe:05:
65:41:8f:ff:49:13:39:57:ce:c3:60:78:d0:71:93:bd:02:a6:
5a:6e:2d:a5:c8:4c:81:92:95:50:54:f3:d7:13:ca:b6:a6:ae:
af:16:89:99:38:d5:fb:53:a9:c9:33:e2:07:1c:80:d2:1c:6f:
04:52:64:f6:80:61:0e:66:42:4d:dd:5f:34:59:70:42:af:a7:
fd:b6:61:d6:ba:db:94:87:66:e6:cf:e1:9e:4d:61:c1:e3:41:
13:13:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:20 2025 by rpki-client