
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: m1Dog/TxvXeAYV93sUkhq7swq5M9i9DojnPwMNCDviI=
Subject key identifier: C3:CD:F9:E1:80:93:8F:F3:2D:8B:73:B5:15:9F:F2:1B:5D:CD:53:BA
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 01987B9B8A56CDC27BE4A8A794E2B5904CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 075A
Signing time: Tue 05 Aug 2025 19:00:47 +0000
Manifest this update: Tue 05 Aug 2025 19:00:47 +0000
Manifest next update: Wed 06 Aug 2025 19:00:47 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: VoT3APgcbWT0Ft/e94eUmdu6CGtopjlYdZGeMFSuSvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:8a:56:cd:c2:7b:e4:a8:a7:94:e2:b5:90:4c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Aug 5 19:00:47 2025 GMT
Not After : Aug 6 19:00:47 2025 GMT
Subject: CN=c3cdf9e180938ff32d8b73b5159ff21b5dcd53ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:41:60:40:87:bc:ac:41:07:10:60:89:82:
d4:f3:80:0d:c8:dc:c2:57:95:8d:31:5d:cd:db:8e:
8b:c8:41:dc:e8:5f:44:78:f3:6f:b1:0f:53:0c:5c:
14:d2:41:ed:07:38:c6:4d:39:d4:9b:76:7e:8b:2d:
39:30:bc:e0:21:d8:e0:aa:7e:84:12:b9:6f:ac:ec:
53:81:28:ce:04:37:7e:ce:6d:74:1c:af:1f:bd:a9:
d1:b6:56:2e:04:3d:e3:97:e6:78:9f:c7:6d:8d:34:
c0:b5:8a:30:f3:22:a1:2b:1f:0e:5b:7e:9d:c9:5c:
50:a4:5f:eb:ee:7a:f0:f5:1f:9e:46:d2:68:c1:64:
6f:3f:55:3b:8f:66:c5:79:8d:b9:70:49:27:69:eb:
2d:9e:cc:6d:87:48:f5:4a:5f:32:2a:48:a5:9f:c5:
1c:a6:bd:c9:2f:9b:36:49:16:89:ce:f4:1e:bc:f1:
26:f6:fa:ba:ad:fc:de:d9:2b:89:7a:e5:be:e0:75:
5b:29:e3:d5:ad:59:f9:ae:67:61:b8:1e:52:fe:bf:
c4:5c:43:bc:03:a6:e9:47:5d:58:04:32:6c:64:80:
e1:c8:51:25:07:df:71:e3:6c:8c:ed:3a:5f:b4:c7:
49:42:8f:81:0d:77:aa:1b:03:de:d4:50:ab:d0:cf:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:F9:E1:80:93:8F:F3:2D:8B:73:B5:15:9F:F2:1B:5D:CD:53:BA
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:17:df:da:78:0f:ee:10:04:93:97:35:d1:1a:38:61:43:
7c:ca:c4:11:56:68:33:17:07:24:75:66:87:a0:a9:8e:e7:d0:
5c:4e:73:68:8e:fe:6f:11:5f:2b:5e:f2:44:7f:4d:24:80:ae:
e0:56:18:0d:0f:53:23:72:e5:bb:9f:34:ef:55:9d:4d:1f:ce:
f8:6e:38:7f:3e:76:4e:92:c7:3a:e4:bc:2a:a2:f4:4e:4f:64:
31:ae:70:aa:b2:85:4b:49:a5:98:48:c4:31:35:e5:8d:0a:82:
3a:7c:38:f8:52:ff:db:75:45:15:a5:c3:06:6f:af:7b:99:a2:
25:c3:a5:2b:48:24:42:1b:6d:17:20:6e:1e:1d:99:9b:a2:d7:
e7:16:9c:53:73:3c:f0:c7:7b:95:36:35:a3:ec:7e:bf:2b:4e:
24:11:89:1c:f8:ac:3b:de:00:70:a8:42:56:1b:62:cc:ce:7d:
9d:e0:cb:3b:ba:e1:d3:d2:a8:34:14:ae:05:89:d8:aa:0c:96:
fc:56:33:f8:96:eb:b7:c7:77:4e:51:f4:95:9f:46:9a:0c:1c:
18:af:39:4b:3d:93:f8:38:c6:49:5e:76:f7:21:54:4a:9b:82:
8a:d3:d2:b9:de:a0:f3:54:5a:5f:db:64:09:b8:e2:b8:54:3b:
b2:c3:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:57:34 2025 by rpki-client