Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: Kyi4mIfhw1jObJVs7+p6c/ziBCzmGudV3690+p96fHo=
Subject key identifier: E0:76:24:F0:28:4B:A6:7E:4A:3F:74:B0:1D:AE:78:B0:07:D5:06:8E
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 01987C09B8E13DD2735AD64F85CA61BB8F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 21:01:08 +0000
Manifest this update: Tue 05 Aug 2025 21:01:08 +0000
Manifest next update: Wed 06 Aug 2025 21:01:08 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: LqTBUKYA6/EszeffqL78GEdVQn8GMFmfZ7gosjL5Q8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:b8:e1:3d:d2:73:5a:d6:4f:85:ca:61:bb:8f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Aug 5 21:01:08 2025 GMT
Not After : Aug 6 21:01:08 2025 GMT
Subject: CN=e07624f0284ba67e4a3f74b01dae78b007d5068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:cf:32:08:fa:ca:7f:c8:49:fb:03:cc:04:
db:13:8d:f7:94:b1:ed:69:59:1a:f3:88:dd:82:9e:
b5:6d:06:60:e7:5c:c3:60:99:9b:81:7e:6e:a6:7f:
a8:2c:3d:79:0a:e8:47:0b:87:f0:c3:7d:0e:40:5b:
29:39:8f:51:a4:a2:51:d0:a2:79:9d:b2:34:c8:2b:
e0:c3:56:d7:31:3c:8d:ff:3e:01:7c:af:34:a0:24:
d0:16:45:82:82:8f:5b:15:e7:27:2f:a4:92:f9:21:
6f:c5:08:33:c1:1c:de:f8:86:44:c0:f9:08:ff:04:
09:a4:e9:be:ea:f9:8e:fd:11:65:bd:f4:b9:f4:10:
be:8f:77:0e:ff:da:7f:9d:87:d3:eb:c5:bf:6f:fa:
4b:f0:b5:4b:11:60:fb:d7:0c:44:69:bc:88:a8:04:
7b:d7:2f:a6:3b:98:54:e7:f1:ad:ee:d5:27:e1:f8:
fd:4a:0f:1e:74:0e:0d:6d:59:e3:11:85:41:a2:e1:
91:49:e1:fe:b8:b0:95:81:a3:68:d4:29:8d:5c:31:
f6:bb:20:df:46:39:4f:5a:cf:a9:d5:18:c3:91:f5:
0a:e4:f7:4e:ff:51:a9:a7:b4:5a:0b:7b:09:c6:c4:
00:23:43:0b:57:36:bd:b1:6b:46:e5:24:42:68:43:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:24:F0:28:4B:A6:7E:4A:3F:74:B0:1D:AE:78:B0:07:D5:06:8E
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:63:7f:c7:31:11:aa:8b:45:cc:9f:88:42:50:8c:eb:13:21:
1e:1e:2c:1a:bf:49:cb:24:63:9c:4a:ae:83:55:36:b3:aa:a8:
0c:ad:7a:49:c6:1c:6d:6d:de:df:04:60:cb:1e:c9:26:09:cf:
84:47:93:7d:c6:43:30:a2:f0:a9:11:37:c1:14:53:cf:1d:e0:
ac:4d:d5:66:19:88:e8:78:73:ee:a5:14:43:3e:a0:63:65:6d:
6c:17:fd:3f:de:3a:c3:34:f6:10:cb:09:af:70:05:cb:13:8b:
fd:df:58:40:79:1f:05:85:c6:b5:21:52:05:dd:48:7d:c0:fc:
b7:26:36:fb:ac:86:d9:24:d4:a6:04:8f:77:d8:94:2d:e6:f5:
c4:ac:fe:09:d2:34:65:2c:30:45:5b:5c:53:92:86:a1:9d:3c:
14:57:ef:cc:4f:3b:9b:36:45:2c:ef:3d:10:43:e8:74:c8:ed:
ed:d6:f7:35:64:bd:f8:e9:74:88:43:8b:a0:99:05:1b:9c:02:
a4:a2:c0:c6:e2:d9:69:31:00:14:0f:3f:76:e8:87:9b:45:6a:
73:6a:7c:4e:24:0a:55:1c:4c:7b:6a:ea:14:06:08:bf:ab:d5:
34:df:c1:df:3b:7c:31:96:cc:52:3c:9d:ab:07:85:c9:9f:3e:
43:b7:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:05 2025 by rpki-client