Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: szKGOv0NYAcDb7Ih02a0Us877Q1oitVQ5rbSFEY9neU=
Subject key identifier: FF:2E:78:7F:5E:71:1A:CA:94:FD:0A:35:B3:41:4A:12:B3:57:D0:A2
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 0198752B611B6FA11C6A1FE4B7FFBD44CDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 1435
Signing time: Mon 04 Aug 2025 13:00:33 +0000
Manifest this update: Mon 04 Aug 2025 13:00:33 +0000
Manifest next update: Tue 05 Aug 2025 13:00:33 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: jY7f3X2Iv162PwkAG7GgYo0a11aND9WIfA3Mt2KFORg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:61:1b:6f:a1:1c:6a:1f:e4:b7:ff:bd:44:cd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Aug 4 13:00:33 2025 GMT
Not After : Aug 5 13:00:33 2025 GMT
Subject: CN=ff2e787f5e711aca94fd0a35b3414a12b357d0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:51:2a:95:bb:46:03:b6:0f:9b:ce:42:05:
a9:15:7a:fe:c9:f3:7e:89:cf:7d:98:1e:a7:a4:87:
2c:b4:72:82:9b:83:f4:ec:e7:a8:92:b9:ef:0d:84:
8f:01:90:80:f3:32:c3:ff:11:52:14:31:76:7b:e4:
30:ba:c5:18:6d:49:7c:7a:4b:82:3d:09:fb:f2:b7:
55:7e:2e:61:2c:5d:51:c7:9b:84:58:66:02:d7:96:
ea:66:f2:3f:40:0c:19:bb:0e:ee:07:1c:4d:4f:54:
e4:7d:40:dc:cb:7e:28:85:b6:01:a6:f3:cf:e5:1a:
0f:36:9a:f9:44:9c:3a:68:e3:07:5f:21:2b:1a:38:
40:a2:f5:6d:7d:f6:9f:09:3d:82:b7:f6:3b:bc:89:
8a:c5:40:3d:1e:5f:6e:7e:8e:34:ee:df:44:fe:32:
ee:a4:26:95:b1:9a:a3:38:5e:45:20:ee:b1:8e:86:
b8:4e:a0:5e:a9:e0:5b:12:62:7a:5b:f8:94:7b:6c:
6d:cd:3c:03:b5:09:0d:f7:31:bf:e5:f0:75:de:e3:
21:f5:65:4c:f6:ee:04:3a:53:20:56:74:14:98:06:
78:2e:70:85:3f:c3:50:6d:ae:e1:0e:13:9b:f2:95:
3a:22:cb:76:11:e2:6c:0b:54:a8:97:14:30:2e:20:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2E:78:7F:5E:71:1A:CA:94:FD:0A:35:B3:41:4A:12:B3:57:D0:A2
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:85:bf:ab:50:55:58:95:77:5c:23:f1:35:7e:21:67:ac:49:
82:bc:f6:e9:92:68:a9:1a:47:0b:88:a5:05:94:a3:84:1e:8c:
32:c6:d7:eb:96:fe:50:1e:c8:49:f6:f2:4e:7c:2c:36:15:85:
8d:32:af:8d:fa:6a:44:20:35:72:bc:c8:9e:46:a1:88:79:fe:
09:47:d3:24:0a:dd:cd:07:2b:6d:82:30:a5:52:f5:fa:e9:a4:
76:5a:30:47:7a:c6:52:64:60:e3:08:29:b1:91:ef:87:70:af:
6a:ef:4f:fc:c3:5d:9e:6d:60:4e:e2:9b:85:0f:28:e7:bb:36:
7d:b9:97:a1:50:6c:6c:00:ec:16:67:fc:2c:ab:bf:b4:ce:0a:
7d:c2:7b:bd:20:67:4a:95:3c:98:97:78:21:8a:6f:43:16:50:
68:bf:59:b7:3f:cf:b2:a3:3c:c4:c9:52:f2:9a:7b:fd:39:4c:
c5:03:50:93:3a:5f:e2:68:b7:01:c1:3c:c3:5d:01:5a:69:1a:
5b:0f:7f:ed:9d:b7:2e:7e:12:f8:06:c1:2f:e6:a2:ae:2d:27:
91:91:16:19:fb:71:41:a2:e5:e6:c4:7c:86:95:41:45:9b:6b:
5f:e9:df:28:6f:68:09:66:c1:9b:33:01:df:c7:d4:f0:f2:30:
2f:fc:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:51 2025 by rpki-client