
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: uv/4UWKixoGlxoQ1mJ4DOL5HlYGXGFRyR8UnY4jpLEg=
Subject key identifier: 1C:D5:C8:41:75:B9:C1:FF:77:61:40:6D:08:55:84:1C:8D:F5:2F:C4
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 01987C0A2602D5041317676FFD6D2557CF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 21:01:36 +0000
Manifest this update: Tue 05 Aug 2025 21:01:36 +0000
Manifest next update: Wed 06 Aug 2025 21:01:36 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: OWxWbm8OC/Lnjiz4SSR4xG/e2w5xnUiPDrXkppnk9kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:26:02:d5:04:13:17:67:6f:fd:6d:25:57:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Aug 5 21:01:36 2025 GMT
Not After : Aug 6 21:01:36 2025 GMT
Subject: CN=1cd5c84175b9c1ff7761406d0855841c8df52fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:40:1d:78:28:f4:58:d7:b0:50:62:d8:ce:
84:1d:1e:40:f3:ec:4f:b2:37:db:ff:a6:30:a6:06:
ca:de:e7:38:b2:cc:8c:3f:48:08:ac:4f:0f:d2:3e:
33:e2:81:6f:9f:37:98:da:fb:be:91:11:3d:a3:83:
1b:14:ea:1a:86:0f:d9:69:be:12:47:91:49:e1:3c:
96:43:67:6f:ec:70:c4:a1:6e:d9:3b:fd:3f:75:a8:
be:ee:9e:a2:82:31:f3:c0:7f:b4:3c:11:47:2d:be:
db:47:06:0b:4e:46:7f:56:0f:f9:10:d6:19:11:0e:
68:6b:95:39:a2:3d:94:a7:60:23:9f:01:83:0b:23:
62:cf:7f:4e:ca:5e:61:4c:ff:a6:2d:c1:f4:ee:07:
66:d6:ea:39:89:44:af:b4:6b:a2:e0:de:7b:99:00:
ee:26:fb:f2:e1:5e:46:78:dc:94:48:45:72:6c:1f:
f2:98:69:4b:d4:63:76:ce:4b:c1:cc:f1:8e:a9:75:
7d:1d:c0:5d:ea:75:af:c1:ad:6b:a9:af:60:e3:4b:
c9:e6:61:4a:b4:e8:86:2e:1e:83:47:a3:50:cd:43:
b4:43:fa:47:06:8a:33:ac:e4:50:54:aa:4c:d1:a0:
46:70:f9:51:4c:08:3b:a2:49:bd:8f:1b:7d:ad:ff:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:C8:41:75:B9:C1:FF:77:61:40:6D:08:55:84:1C:8D:F5:2F:C4
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:84:91:44:bb:11:13:0d:37:12:ab:81:2a:88:44:74:12:5a:
74:65:db:48:cf:99:99:c2:b0:29:db:16:46:6e:13:a5:9a:7e:
3a:cc:5b:b1:9d:a3:78:f4:d4:b3:32:ee:d9:2a:3d:87:f3:2d:
08:d7:3e:1a:61:f8:10:23:02:79:45:85:2d:00:9b:f1:f2:89:
6a:25:8c:31:93:ec:1e:f0:f3:6b:df:2b:06:05:ca:c6:9f:22:
da:4a:33:21:3c:39:ae:03:7d:e6:9e:95:77:96:2c:32:4f:e3:
e2:96:77:21:e3:76:37:72:96:f8:a7:fd:af:58:b5:34:e9:11:
b8:8d:f4:a2:0f:79:a8:ef:3a:7a:df:c3:fa:a9:47:4b:53:7a:
00:ba:e8:a5:f0:34:91:ee:c0:1f:e2:c4:43:44:6a:cf:6b:bc:
d7:14:27:3e:56:0e:0e:e3:d9:d9:4b:e5:32:cf:6e:37:ca:0a:
90:2f:51:8d:c6:24:e2:fc:ed:c5:d4:51:c7:b4:f0:7a:17:e9:
0b:f0:14:69:17:37:c7:4e:c7:8e:ab:bb:a1:cf:82:6c:3c:2b:
fc:98:4a:7c:4f:b9:29:c6:55:66:b2:42:30:e5:2a:d6:f4:76:
14:36:f1:75:fb:be:89:e8:85:4b:43:1e:8c:69:84:64:b9:3d:
4a:0e:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:01 2025 by rpki-client