Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
File: ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft (raw, json)
Hash identifier: ZnbAAth8JmawhgTscCbeYqqEr6ei9DE+qHTUJ7WDZM8=
Subject key identifier: F7:C8:6C:3C:98:F9:C7:32:71:47:15:A8:47:47:07:98:D7:0A:AD:8D
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Certificate issuer: /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial: 019873E37861F1BD47910957F64A459F37EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
Manifest number: 1145
Signing time: Mon 04 Aug 2025 07:02:24 +0000
Manifest this update: Mon 04 Aug 2025 07:02:24 +0000
Manifest next update: Tue 05 Aug 2025 07:02:24 +0000
Files and hashes: 1: ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl (hash: tn7IRe3uXq7s94Vx0zGtBAONyb7BJw1M+ueF3CmA7CM=)
2: duKwaDi_zRpAEa-uPqbKM14YVII.roa (hash: TetSzhXv2DRZxntyXp+bNMJwwDRAUYL5O4ug5nil6iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:78:61:f1:bd:47:91:09:57:f6:4a:45:9f:37:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Validity
Not Before: Aug 4 07:02:24 2025 GMT
Not After : Aug 5 07:02:24 2025 GMT
Subject: CN=f7c86c3c98f9c732714715a847470798d70aad8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:a9:b5:73:6f:f1:49:d9:e5:68:ec:6b:11:
0b:b8:c5:df:dc:af:07:ad:90:1a:8d:aa:5e:d8:b3:
17:f6:87:b7:97:4b:f6:bb:2b:9d:c2:7a:6d:99:06:
10:4a:4d:63:70:d8:81:f4:65:d0:ca:01:7f:9f:d1:
fc:4d:06:e0:5c:8a:f7:e2:3e:03:d1:f3:37:88:f8:
6b:ec:8e:19:01:fe:4c:cf:34:90:f7:a5:c7:19:97:
6c:fb:cf:f7:e1:4e:be:f4:b0:09:67:ff:90:a1:62:
aa:d9:f6:a8:f3:e6:5c:be:27:92:b8:d3:97:70:45:
9c:16:06:25:dc:da:96:37:82:5b:60:41:8e:60:4a:
c4:98:bc:70:ff:f8:78:31:aa:a3:b1:a1:82:b9:9f:
bd:df:c6:e7:5d:48:30:f7:a9:00:ec:07:0f:8b:99:
8a:85:c3:ce:10:64:20:57:7f:a4:e8:45:78:31:46:
1f:e5:45:07:91:07:a7:f1:e2:9f:be:6c:98:d8:bb:
b7:cd:be:17:46:6a:b5:5b:fb:dd:d5:0d:1e:68:c2:
76:7f:77:36:8b:26:4a:56:d8:23:78:98:35:4b:4e:
13:8b:9e:40:0c:7e:db:86:29:42:23:ce:c3:a3:d6:
e6:25:cb:3f:6a:07:c6:f8:53:20:ec:fb:90:df:18:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:6C:3C:98:F9:C7:32:71:47:15:A8:47:47:07:98:D7:0A:AD:8D
X509v3 Authority Key Identifier:
keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f2:04:d3:99:20:de:4c:3e:f1:5f:6b:c8:61:a0:bc:be:e1:
81:54:75:1a:d5:5e:a4:c2:65:1d:48:9b:b4:e3:9e:07:52:9d:
87:d0:6f:f7:b5:32:88:79:a8:07:c6:f1:d1:29:4a:ca:a7:16:
6b:a6:fd:47:ea:1c:23:ed:47:f5:6b:b0:ee:43:e5:e3:61:98:
4c:d1:a5:3e:93:2f:77:86:2f:d1:20:1c:db:84:92:c3:75:38:
ff:ac:24:3b:46:54:ac:f3:38:53:43:e9:e2:69:b0:2b:25:e4:
87:ae:83:16:63:e2:0c:9b:3b:aa:37:8c:66:6a:4b:00:25:97:
2a:53:11:cd:7a:d0:d7:86:92:70:c8:7e:4e:1d:ad:9a:a7:6b:
60:ed:ed:b4:70:01:b4:ae:a7:1e:cb:9b:66:b3:64:28:32:6d:
97:e7:4d:99:7b:b4:03:0f:54:e1:dc:74:b4:a0:6e:67:7a:5d:
cf:b7:64:9f:05:29:f2:95:e5:34:b1:1b:71:74:0a:71:ec:0e:
0b:64:20:51:f8:b3:e2:50:f6:7f:9d:ed:b7:b7:4e:52:70:c8:
f1:ca:10:fe:43:d6:16:e5:a1:62:5e:c7:c8:49:75:36:60:d4:
d6:f7:4a:9d:d3:b5:07:45:6c:63:83:db:c7:38:9c:da:d1:5e:
26:e5:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:24 2025 by rpki-client