
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: L1cZrwoWGmDcOPqt0+Vt2JbAGbdP582T25PbhwkGOi4=
Subject key identifier: 29:F3:AC:FE:EC:AE:B1:06:41:A3:25:0A:19:F1:AF:EB:6B:EF:45:7C
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 0198744FE130ACBFBB0D2540A563F371CEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 09:00:48 +0000
Manifest this update: Mon 04 Aug 2025 09:00:48 +0000
Manifest next update: Tue 05 Aug 2025 09:00:48 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: vajSGoQHe5raW3aliyPT9A0Jh7XZi2g1AHUFyGIfTfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e1:30:ac:bf:bb:0d:25:40:a5:63:f3:71:ce:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Aug 4 09:00:48 2025 GMT
Not After : Aug 5 09:00:48 2025 GMT
Subject: CN=29f3acfeecaeb10641a3250a19f1afeb6bef457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:2c:3a:9b:3a:7a:f2:44:f7:8b:23:0f:29:
7a:32:b8:f0:51:3d:3b:0d:43:b1:f2:22:aa:a9:74:
5b:8a:ce:d1:aa:fd:13:20:4e:71:a4:0d:b7:e2:e9:
c9:5b:aa:1a:c0:ea:c6:26:68:84:b9:fe:a2:d0:a1:
51:e2:c4:00:18:66:d0:8a:08:54:5c:70:d1:9d:47:
94:c8:12:b3:9b:33:30:e2:c1:f5:37:4c:b7:8c:28:
05:6b:77:43:d8:8b:9e:70:cf:1c:a0:19:c7:75:7c:
9f:f2:47:7e:3a:84:36:29:b2:f5:4e:cf:de:52:e6:
04:3d:a8:b1:5d:5a:86:88:36:71:03:ff:1a:d6:9f:
82:db:f3:19:a5:ba:97:97:6b:10:4a:c6:dd:a5:75:
05:65:5c:6e:fe:78:1a:52:35:5b:11:26:70:04:53:
3c:6a:22:fe:93:1b:b2:fb:17:c7:65:a0:16:b3:40:
86:0f:9d:c5:71:04:ee:cf:66:36:7b:5b:86:01:33:
46:1c:6c:85:20:c1:a2:cd:61:a7:01:df:d6:7c:27:
e6:85:b8:29:a1:3e:86:22:06:18:0c:c1:c3:b0:34:
89:19:d4:8d:be:f3:ad:6c:17:7b:ba:20:6e:1b:e8:
c1:e8:65:ef:24:45:25:e6:de:c7:ab:66:5c:e1:96:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F3:AC:FE:EC:AE:B1:06:41:A3:25:0A:19:F1:AF:EB:6B:EF:45:7C
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ec:e8:74:7b:b1:e7:df:b0:3e:1a:e2:a0:54:6c:de:11:80:
ee:b3:9e:30:67:57:54:51:6e:3f:36:56:1a:c8:36:6d:9d:15:
4e:78:8a:3c:46:75:34:d7:95:c7:0c:f0:bf:ba:3e:88:07:6c:
d3:f3:56:8b:11:e1:3d:b1:d1:ad:2d:3b:cf:77:33:67:c5:0b:
81:c5:b0:42:92:c2:f2:89:40:ab:04:e2:13:eb:7c:77:ae:58:
11:cf:f4:42:62:83:99:b6:7f:c8:55:60:2a:43:bc:03:8c:7d:
25:a8:ab:bd:1f:c7:55:3e:78:26:49:f2:92:97:37:bc:20:ee:
6e:72:5e:7e:0f:9e:1a:d8:bf:f2:fc:43:b5:e5:d3:30:9b:d9:
04:96:74:b1:53:fe:39:52:10:bd:6f:e3:ae:09:6f:ae:c7:93:
35:b0:3f:79:5e:25:de:2e:28:ca:7a:12:af:36:77:9b:f8:a4:
bc:64:8d:29:99:12:17:6e:18:b6:71:5d:42:ef:25:74:7a:bf:
8f:84:91:8d:8b:ca:41:ca:4f:2b:d0:c3:36:f8:a0:b3:94:9f:
e9:d8:7e:23:26:ce:bd:2e:24:e9:5d:a2:c8:aa:22:c8:95:b6:
d2:10:cd:3f:fa:53:dd:a8:1b:47:0f:46:39:c2:15:6d:a1:23:
67:e5:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:41 2025 by rpki-client