Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
File: ZLMdzWu1MIApxCcyMFFPcmsbhro.mft (raw, json)
Hash identifier: IVbJmUJHYA7sFS4yoyMAxOMhv5d7ehM9Z669oEO8eMo=
Subject key identifier: D5:01:E2:3A:BF:C8:1C:7B:6F:A9:D8:40:14:A6:E2:15:16:3B:CF:2C
Authority key identifier: 64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
Certificate issuer: /CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Certificate serial: 01987A1ADA3794AFC0FCE131DF4C003CA48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
Manifest number: 1530
Signing time: Tue 05 Aug 2025 12:00:36 +0000
Manifest this update: Tue 05 Aug 2025 12:00:36 +0000
Manifest next update: Wed 06 Aug 2025 12:00:36 +0000
Files and hashes: 1: ZLMdzWu1MIApxCcyMFFPcmsbhro.crl (hash: mHxkHvcOT9y0wBUtcryjw4psR0gI1eITYQb+Lg7sgp4=)
2: hgdnPYifylvEbRhPG5rcZMHgm-E.roa (hash: kVaA/BoHtOWfVS1UNUVlSYGZdZvXh/V05GtETEpyoE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1a:da:37:94:af:c0:fc:e1:31:df:4c:00:3c:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b31dcd6bb5308029c4273230514f726b1b86ba
Validity
Not Before: Aug 5 12:00:36 2025 GMT
Not After : Aug 6 12:00:36 2025 GMT
Subject: CN=d501e23abfc81c7b6fa9d84014a6e215163bcf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:b1:f7:d7:96:b6:32:2d:59:27:6c:af:c6:
f5:11:48:82:cf:62:73:68:f6:c1:56:e4:06:ee:4a:
93:7f:bb:09:ce:21:20:83:79:6f:3e:5e:9e:99:90:
0b:58:1f:f1:46:08:cc:b8:2c:da:f2:9e:0f:e7:23:
8c:80:27:2b:17:28:17:51:c4:c8:fc:4a:90:f0:81:
bc:04:f2:1d:52:59:0f:ed:03:64:c8:a9:ad:59:40:
a3:48:58:43:1e:b9:9d:dc:a3:90:13:e7:58:2d:3a:
cb:0e:29:e4:2b:c7:3f:09:72:57:49:c1:19:85:dd:
6d:78:6a:9a:39:d8:cc:5e:43:1e:30:a7:4c:bf:79:
a5:d2:11:5b:e6:52:1a:20:1c:51:91:a3:55:2e:05:
a2:5c:2e:23:a4:80:5d:9a:e4:a8:bd:c2:d3:7e:de:
2d:eb:77:15:a7:88:c9:b8:b2:7e:94:00:f8:e9:86:
a2:58:37:66:36:25:4a:11:99:fc:74:f3:ef:ae:b8:
e9:9d:44:1a:63:8f:e9:12:c2:bb:df:87:a0:9f:c4:
2d:e7:ec:56:8c:a5:04:f1:08:04:60:30:e4:3e:9f:
e1:9d:a6:d8:80:e5:dd:a0:f6:30:a5:dc:f2:8c:05:
16:a2:c0:4c:d3:92:02:f4:35:47:96:6f:6a:3a:03:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:01:E2:3A:BF:C8:1C:7B:6F:A9:D8:40:14:A6:E2:15:16:3B:CF:2C
X509v3 Authority Key Identifier:
keyid:64:B3:1D:CD:6B:B5:30:80:29:C4:27:32:30:51:4F:72:6B:1B:86:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLMdzWu1MIApxCcyMFFPcmsbhro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/980d6e-8a99-4260-8064-44ab689e1d4d/1/ZLMdzWu1MIApxCcyMFFPcmsbhro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bf:ca:46:62:0e:16:ef:36:38:07:74:76:df:45:93:d3:4a:
c1:4d:1d:ec:1c:28:80:af:fa:3d:82:0a:cb:9a:26:37:57:b8:
ea:3e:11:e1:c0:68:9c:94:fe:93:f9:b3:e4:6f:17:80:6a:4c:
99:e5:95:de:f1:02:16:ca:6a:43:d0:e8:93:11:32:83:01:7f:
8d:fa:bf:17:04:9c:81:0d:cb:5a:b0:88:8d:e9:1d:d2:53:b8:
8c:ba:1b:79:7d:ec:a2:cd:d9:e8:18:41:0c:47:92:2d:93:11:
61:20:d2:c1:db:8c:44:da:e3:95:a8:8b:70:53:8c:d4:62:89:
fd:3d:eb:76:00:90:1c:95:53:92:22:2b:ab:de:40:d9:54:31:
c2:47:33:67:db:39:b9:79:86:d3:e9:4c:75:0d:df:ba:bb:ed:
a3:7b:58:8b:c0:b2:ca:2f:d7:e5:9e:18:b0:7a:ee:38:2e:eb:
e5:d3:27:a1:cf:e7:29:d2:21:ae:5b:8f:b5:98:21:53:6c:88:
8a:d1:e6:9e:d0:44:87:a5:38:f0:15:53:94:3b:e2:fd:a5:92:
2e:92:c3:fe:6a:8b:f5:5b:90:e5:65:7b:69:da:4a:48:5a:ee:
a2:a9:8f:85:84:12:1b:48:ed:36:1f:7d:da:4c:67:1d:0c:b1:
be:1d:dc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:18:21 2025 by rpki-client