Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: HYnirsob7nA2P3uE1jsIqYsd9yONeDOeDeDnHYxYPno=
Subject key identifier: 4E:97:3E:F0:7C:8C:C4:7B:A9:25:C0:A7:B5:C6:67:E1:87:12:FC:4E
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 019873E3FCABE3ACBA229983F9C4D1F07D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0E33
Signing time: Mon 04 Aug 2025 07:02:57 +0000
Manifest this update: Mon 04 Aug 2025 07:02:57 +0000
Manifest next update: Tue 05 Aug 2025 07:02:57 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: sVAsenm5wQC0cfnW8ikTzSVGWCEHoK6c2A72OYSl4DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:fc:ab:e3:ac:ba:22:99:83:f9:c4:d1:f0:7d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Aug 4 07:02:57 2025 GMT
Not After : Aug 5 07:02:57 2025 GMT
Subject: CN=4e973ef07c8cc47ba925c0a7b5c667e18712fc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:9f:82:47:7f:c4:5a:b5:8d:b8:39:47:86:
8f:cf:9a:12:e0:82:e0:24:60:c0:21:85:c3:42:6a:
8c:56:14:b1:93:50:1a:2c:63:54:50:9d:c7:02:7f:
d2:54:da:1a:12:d5:49:b6:ce:5d:3e:15:75:97:32:
ec:2a:48:dd:f7:e6:34:b1:11:d2:3f:c4:77:09:fa:
ca:b3:7e:11:d0:33:54:b1:b9:24:a4:5d:57:a1:b8:
81:f9:0b:cb:e4:89:5d:dc:40:b9:82:5d:48:c8:5c:
24:bd:61:79:4a:9b:92:55:a8:9a:4c:ce:a2:c3:59:
d7:f9:a3:eb:52:2f:55:dd:98:f4:10:82:86:29:85:
04:5f:88:c0:07:f3:9a:fb:91:58:f4:05:8f:de:29:
16:dc:42:13:9e:c4:57:06:02:5b:d2:b5:c2:90:5a:
2b:94:fc:cf:3c:8a:bf:b9:3e:e1:d2:2d:ad:9a:21:
b8:8a:cc:cf:5d:8d:94:84:f9:1e:49:a3:a6:6a:1a:
53:de:f0:55:6a:b3:e1:27:ea:a1:cd:4f:19:8b:45:
8c:b6:56:a2:a3:2f:bf:d8:67:75:7f:e4:18:64:3c:
19:e5:c9:10:29:ab:54:7e:ef:56:ad:68:c0:e5:26:
12:d5:1e:31:c9:cf:8c:f8:b9:b0:db:8d:c8:4b:98:
a5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:97:3E:F0:7C:8C:C4:7B:A9:25:C0:A7:B5:C6:67:E1:87:12:FC:4E
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:76:5d:91:ce:6c:1b:d0:53:36:57:2c:e5:50:cc:d2:15:74:
33:bc:e0:7f:8e:d2:60:34:42:b9:00:20:c0:22:93:d2:88:21:
09:53:e5:d9:59:10:c2:bc:11:29:4e:66:66:97:ea:86:51:4a:
3d:8c:af:cf:56:ae:66:df:2c:ea:0c:69:f3:b3:ce:30:20:31:
07:27:a9:a8:ab:8c:7a:df:43:55:9f:32:e3:12:27:13:6a:d3:
c6:96:b9:ca:46:2a:ff:84:48:3b:f0:d3:9f:e5:b8:07:80:b5:
a1:ec:ab:06:4f:57:75:f5:c6:e8:1b:2b:a2:18:80:a1:13:19:
16:55:5c:98:59:a5:87:f8:20:f5:70:7b:c0:97:28:a4:2c:5b:
9a:d9:8e:6d:61:3f:4c:3f:ba:81:06:fc:02:36:3d:5d:a6:17:
1a:e9:ca:85:b5:92:1a:78:b3:ea:0e:2c:c6:f5:fe:e5:81:09:
25:b0:2d:21:7b:3e:f6:17:70:37:bc:61:a6:01:c9:e4:72:53:
5c:15:59:63:eb:c1:e5:86:24:23:81:01:7a:85:75:20:bc:86:
5f:42:1c:2d:7d:65:63:20:79:2f:0f:91:57:33:3f:31:83:7c:
3c:74:31:75:dc:65:39:ec:1a:ab:bd:68:19:12:04:39:25:d6:
ee:7a:48:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:43 2025 by rpki-client