Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: IcM5bv9o/Z5hjtAW7rurNlLCSXS5qv6J4XCzCcvQnNk=
Subject key identifier: 9B:BB:07:44:81:AA:4B:C7:D1:55:1A:B9:37:73:AF:1A:D1:6F:98:F0
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 01987C0A47AE1EE386F8DB14B7D8AC93CF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 09DE
Signing time: Tue 05 Aug 2025 21:01:45 +0000
Manifest this update: Tue 05 Aug 2025 21:01:45 +0000
Manifest next update: Wed 06 Aug 2025 21:01:45 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: lMV6h3fxvNI+jcTmgsTI5Mob3qEzx+SyD3lWkbP2XYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:47:ae:1e:e3:86:f8:db:14:b7:d8:ac:93:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Aug 5 21:01:45 2025 GMT
Not After : Aug 6 21:01:45 2025 GMT
Subject: CN=9bbb074481aa4bc7d1551ab93773af1ad16f98f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:8f:78:9c:52:10:6b:73:78:bb:9d:2f:3b:
63:a1:23:c7:ae:d2:ad:63:9d:72:ec:4e:0d:cb:3c:
39:2b:35:06:db:5a:eb:2c:4e:69:88:35:e0:be:9a:
77:de:55:57:97:a4:0d:7b:af:89:9e:a5:d2:91:16:
2c:d0:59:c4:e1:59:c7:3c:d6:02:44:2d:8d:b8:74:
78:b6:43:61:1f:0a:bd:3f:be:72:82:d1:7a:bf:ad:
ee:ca:91:bc:2b:d5:51:dc:3d:5b:bf:e6:e6:f2:3f:
aa:d7:42:18:ab:7e:30:e9:d3:d2:04:4b:e4:c1:9d:
61:f6:a9:fc:aa:d6:da:3a:dd:19:2c:c7:48:58:c7:
31:6e:d3:ab:cb:c1:b9:8d:62:b8:90:47:4c:d7:9a:
07:5d:8a:73:f8:c3:55:e4:d7:8f:b2:08:24:1b:1c:
c8:1f:2b:e3:a6:0e:d9:70:18:24:79:fa:68:66:b6:
28:da:2e:f4:77:44:e3:fd:8b:c2:aa:05:c5:73:8d:
c5:2a:1c:9b:43:8e:88:2f:c9:44:26:7c:74:b2:59:
f6:d3:c6:c3:50:c6:44:6f:dd:8a:a6:73:10:97:7c:
92:5e:50:5f:56:e1:82:c3:18:5c:e0:6c:03:da:65:
dd:4a:27:30:35:6b:f8:08:41:32:23:5e:e1:84:cf:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BB:07:44:81:AA:4B:C7:D1:55:1A:B9:37:73:AF:1A:D1:6F:98:F0
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bd:b8:a8:93:79:fa:63:93:e9:0d:39:66:ab:32:30:fa:5c:
e5:64:0d:22:51:db:27:e2:89:6e:58:35:b3:ac:d5:28:f4:4c:
5b:5d:ff:be:d4:e0:66:5f:7c:39:8f:b2:80:f0:0a:1d:37:57:
f1:40:3d:d3:df:c8:ec:cd:16:ab:e8:f3:d8:fd:c2:d8:77:97:
1f:d6:c8:e1:79:6d:ae:17:81:4a:bb:1e:b3:a7:d0:0a:0a:f5:
2c:df:e6:d6:67:f3:be:19:2e:37:5a:4f:5e:47:11:26:58:2c:
d8:68:1c:9c:f1:9f:84:41:41:b0:5c:8b:f8:09:06:5d:df:64:
eb:17:56:80:17:c1:35:a2:fc:bb:f4:0e:26:b3:da:cf:0b:2a:
a9:56:10:96:c3:37:26:3f:e8:a7:40:ae:b8:61:41:92:96:b4:
d4:04:82:5b:e5:0d:da:f7:95:9b:1e:05:66:22:a0:ec:23:84:
e5:66:70:94:88:fb:34:ec:9d:10:70:c0:09:a0:a9:52:27:16:
f4:c1:57:f5:e2:d5:f0:fd:b4:ab:92:6a:83:fd:d5:90:2b:13:
b3:d4:54:24:1e:0d:21:c9:a0:3a:57:de:30:0c:21:88:9b:63:
cd:01:5c:95:af:8b:87:06:b3:a3:d3:1c:3b:07:85:ef:bd:e9:
31:d4:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:37 2025 by rpki-client