Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
File: ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json)
Hash identifier: b1HYKWbrmHvc0uDj8F+rXwvZ1QTuYwJf905JeXrCRf0=
Subject key identifier: 86:E4:5A:B8:3E:84:F0:C6:9A:11:86:AF:BC:64:C0:5B:58:6E:56:0C
Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
Certificate issuer: /CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Certificate serial: 01988EECB5CE8E2F57A1086E1D7785FE24CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
Manifest number: 137C
Signing time: Sat 09 Aug 2025 13:02:14 +0000
Manifest this update: Sat 09 Aug 2025 13:02:14 +0000
Manifest next update: Sun 10 Aug 2025 13:02:14 +0000
Files and hashes: 1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: AfK4Bd1R0wT5o7TGccNL+/HxAtsnE+EpaPFRwzNOX+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:b5:ce:8e:2f:57:a1:08:6e:1d:77:85:fe:24:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3
Validity
Not Before: Aug 9 13:02:14 2025 GMT
Not After : Aug 10 13:02:14 2025 GMT
Subject: CN=86e45ab83e84f0c69a1186afbc64c05b586e560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:4b:22:b9:dd:8f:5f:da:04:42:97:4f:a9:
f5:6e:0e:25:f9:d6:2f:9d:e2:27:df:00:26:49:bf:
26:ec:47:41:7f:2d:0c:3e:9e:e8:52:34:d5:8d:a5:
db:c4:85:f0:02:44:eb:de:18:82:4a:c8:3b:2f:dc:
28:9a:ca:c5:94:41:d6:c0:a0:d4:f6:76:31:88:95:
c0:3c:53:dd:8c:36:bb:5e:42:23:30:d0:6a:db:0d:
48:9e:7a:d4:6e:f0:7d:30:07:4c:0f:20:18:75:68:
11:66:b2:59:05:77:93:81:1a:f4:7e:57:eb:81:33:
ee:29:3b:ee:e3:b6:f7:5f:97:8c:28:d0:e6:0f:a6:
46:01:8d:ff:9d:b7:9a:d5:2f:80:fc:a3:37:81:13:
a0:06:b9:fd:8d:d0:25:b9:d4:e7:0a:89:34:d4:f4:
89:25:de:52:6f:76:66:2e:43:15:e4:6b:a9:0f:f2:
c5:29:86:f7:28:c5:11:ea:bf:ad:38:0a:13:6f:92:
68:6b:94:d2:83:75:1b:df:88:94:be:07:8f:7b:27:
bc:ee:fe:72:51:37:00:25:60:fb:7f:33:d6:d4:b5:
db:88:ff:2b:ad:14:45:97:b3:e1:cb:bf:f5:7b:e6:
ab:d6:51:62:d7:65:c5:91:f7:1b:b2:fd:52:b0:07:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E4:5A:B8:3E:84:F0:C6:9A:11:86:AF:BC:64:C0:5B:58:6E:56:0C
X509v3 Authority Key Identifier:
keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a2:5b:ef:84:63:29:22:eb:13:d1:59:d8:1a:61:36:88:fe:
85:a0:4e:03:c3:ca:0c:d3:3d:37:65:9b:7d:3b:3f:52:84:2b:
8a:b7:a2:af:77:0f:84:8c:df:95:60:d0:17:10:36:03:b6:71:
f1:30:65:e9:b2:a9:de:89:e2:49:94:d0:42:75:47:6a:96:70:
48:2f:4d:c1:dd:79:24:3b:f2:d1:ad:39:6e:31:50:09:62:2d:
99:c7:f3:c9:7e:dc:77:d9:77:7a:2f:ec:df:cb:b2:4f:52:3c:
c6:51:9d:9a:1b:b9:c6:3e:68:08:f2:c9:c4:cb:32:7a:df:2d:
f2:c5:dd:99:be:9e:2e:d4:a3:75:18:1b:5f:23:b0:03:e3:f2:
4d:80:4b:c3:82:65:ab:dd:2b:2b:17:41:c9:9a:1e:b4:1e:81:
50:52:41:b9:7c:99:45:79:ee:f9:fc:25:c5:db:e9:b6:a4:40:
c8:2b:69:6c:90:4d:d8:76:0b:f3:5e:06:66:4b:7c:45:9c:8f:
35:17:7a:cc:c7:fc:e9:62:9e:2f:89:ea:af:12:a1:dd:4f:3a:
e3:0d:d9:87:15:7f:05:e8:fa:3e:eb:c6:83:c2:eb:cc:52:08:
1c:30:3c:f1:4a:1d:1d:1c:ba:e2:48:fb:19:9b:b7:6b:7b:3d:
74:5f:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:27 2025 by rpki-client