Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: uB+nsLuntBNhepPiCeBpb7HesZJ+Y8EC3wjx2e+ERB8=
Subject key identifier: 5D:EA:B1:EF:C6:31:A0:80:77:B3:5D:CD:7B:24:B3:C0:DA:FF:20:64
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 0198898E9F23ACC48ABAF52BB90F28A6A7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 12:01:21 +0000
Manifest this update: Fri 08 Aug 2025 12:01:21 +0000
Manifest next update: Sat 09 Aug 2025 12:01:21 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: RGWjI/oVU8dzo8EktgXZcBmEprZ9PDUsxRKgyIdFRtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:9f:23:ac:c4:8a:ba:f5:2b:b9:0f:28:a6:a7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: Aug 8 12:01:21 2025 GMT
Not After : Aug 9 12:01:21 2025 GMT
Subject: CN=5deab1efc631a08077b35dcd7b24b3c0daff2064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:7b:ab:21:68:e2:1e:9b:72:f2:9e:d9:06:
d3:2f:b8:2f:5e:fd:d8:aa:e1:41:0b:48:c5:c3:a8:
d3:e4:e2:03:95:b7:84:cb:ae:1e:e2:11:92:66:38:
4f:ff:92:5e:48:6a:55:5f:05:74:ea:61:55:f5:ca:
7a:d6:71:04:1c:18:09:cd:11:ae:e5:1d:e1:81:c8:
46:8c:08:75:27:96:a9:f8:ff:74:24:5b:f8:b6:02:
2a:81:a9:a1:5b:d5:22:9f:91:83:34:3b:5d:94:7f:
e1:f6:2d:c4:2e:f5:10:48:3a:d3:79:e1:ea:3f:5d:
82:f4:d0:2e:2d:b5:24:a8:2c:e0:f0:e9:ad:49:97:
e5:95:9c:15:44:a0:fe:51:e2:05:e8:b9:6a:7f:d0:
dc:83:63:72:e6:4c:99:0a:2a:2a:64:a9:ce:bd:73:
cf:7d:b7:f7:df:83:ba:c9:14:0e:7d:06:76:c3:a4:
37:f5:14:52:fe:01:24:62:ce:a5:6a:02:00:5a:78:
42:98:e5:4b:c4:7e:a6:89:ef:ca:47:c2:6f:61:c5:
f5:a0:e7:ae:85:53:cc:94:ce:71:27:17:4b:3e:f9:
79:a3:9c:d5:f8:20:97:db:b7:b6:f6:0f:7b:9b:1f:
74:d9:0d:92:3f:f2:57:74:5c:34:18:f2:8d:1b:c5:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:B1:EF:C6:31:A0:80:77:B3:5D:CD:7B:24:B3:C0:DA:FF:20:64
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:27:c3:25:64:97:f2:f6:80:46:a9:87:f3:50:35:d3:a3:eb:
eb:5a:70:5e:a9:a0:fc:ba:f3:49:07:07:0c:fd:e3:0b:65:0b:
f9:77:05:fb:86:73:d3:63:1d:c4:14:e7:88:e7:56:98:e5:a2:
52:1e:b0:83:7a:28:a2:8f:46:59:11:0f:bf:5f:f1:1f:92:de:
b4:7d:d9:36:79:b3:2f:16:8c:65:20:38:db:88:44:63:61:5e:
ef:f5:33:17:5f:a3:d9:e3:22:45:59:83:0c:47:b6:00:fb:33:
76:3c:3e:65:7e:ac:5d:ae:c5:3f:da:ef:ea:d0:b9:f0:ea:9c:
37:d2:d3:8d:ab:f2:e4:29:a9:29:dd:9b:a5:20:93:d5:24:89:
9b:8f:17:7c:40:f6:30:74:da:c8:ad:60:5a:b4:c4:33:82:13:
7c:e9:71:e3:c3:c9:5a:d9:33:87:c0:39:07:4e:03:5c:57:4f:
c7:65:b0:e5:3f:0f:bb:f4:4b:ca:d0:f1:ba:c1:46:6f:7f:19:
ce:1a:58:79:31:c8:98:a1:71:cc:86:49:da:19:01:32:62:f2:
a0:a6:a8:a0:96:8f:13:40:3f:55:44:33:d4:0a:4c:bc:0f:f0:
0b:59:a5:43:66:2f:9a:12:a8:9f:2d:c9:f8:64:ea:d0:8c:19:
f0:5c:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:33 2025 by rpki-client