Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: F81iPThIPyoDdP5pgr4SVDvNY7WCxIB0ruB/PnHlOEw=
Subject key identifier: F9:0A:4A:9E:73:F8:CD:9B:C3:F1:97:1F:2A:4A:C4:CA:15:BA:22:2C
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 019896A6454E2375F5E8B60560337165C846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:02:15 +0000
Manifest this update: Mon 11 Aug 2025 01:02:15 +0000
Manifest next update: Tue 12 Aug 2025 01:02:15 +0000
Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: /eUJT41UtxDY5ALJQiGON0Rsav03l7uW2qBPN9wG1ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:45:4e:23:75:f5:e8:b6:05:60:33:71:65:c8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Aug 11 01:02:15 2025 GMT
Not After : Aug 12 01:02:15 2025 GMT
Subject: CN=f90a4a9e73f8cd9bc3f1971f2a4ac4ca15ba222c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bc:72:ac:b7:d4:a3:7b:ba:33:c8:88:06:b5:
09:d8:a6:6b:e6:18:3d:0d:67:a1:af:26:e1:74:0f:
4e:5a:5d:95:f2:52:2e:ae:be:ca:66:fb:ea:ec:ae:
8b:46:73:0e:9b:91:23:46:a4:ab:ab:0a:41:30:bc:
43:fa:28:95:bc:dc:17:49:ff:c7:b2:d0:74:41:a6:
81:96:3c:78:9f:33:54:65:97:ec:43:2a:2a:ca:d9:
83:22:54:bc:43:59:0f:29:66:72:f7:5b:14:30:0a:
be:b1:ab:f8:f2:29:e2:1d:31:f1:26:91:2b:49:73:
70:5e:a9:40:7f:a8:70:de:21:f8:32:78:22:b4:5a:
97:76:0c:65:bc:16:87:58:ec:3e:fa:ff:e8:e6:23:
30:e1:71:d1:1c:cf:aa:a5:a0:23:4c:f9:c5:19:52:
2b:0b:cc:42:aa:0a:1d:60:de:f8:2e:fa:00:e7:0d:
0d:ab:0b:50:f1:bd:1c:5f:11:ea:8a:ee:d4:8e:88:
6a:ac:02:f3:4c:e1:36:58:eb:08:c8:38:60:3a:01:
53:b9:a7:55:15:e5:05:8c:ea:80:55:cc:3b:c6:38:
06:da:b3:54:c3:5c:8f:9d:c5:0c:38:75:fa:31:43:
a8:de:df:ac:42:b5:7c:f9:da:86:dd:1c:81:db:71:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0A:4A:9E:73:F8:CD:9B:C3:F1:97:1F:2A:4A:C4:CA:15:BA:22:2C
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ee:17:94:42:2b:42:27:2f:07:09:59:05:0c:2e:98:4e:c8:
d7:d1:7c:8b:d8:4b:69:78:8a:b0:08:13:13:de:00:5f:b8:9f:
90:10:cc:af:97:4c:74:b9:e0:8e:32:51:14:17:e7:0c:08:33:
f1:a7:37:dd:c0:50:22:02:b1:53:19:7d:d9:28:15:af:0b:8b:
8b:37:73:2c:e5:ca:97:d3:1c:ae:2a:15:eb:f9:15:c7:95:d6:
9f:aa:a7:b2:67:fe:34:ba:7c:ae:e3:44:71:db:30:a0:10:04:
2c:f0:a2:88:43:e4:b7:8a:bb:0c:a0:03:bb:1c:f3:89:37:34:
50:4a:2d:9c:00:48:e7:8f:a2:bf:33:b2:c7:ca:8c:c9:f9:07:
3d:99:16:3a:52:44:2e:36:d0:f5:8f:f2:73:12:c4:4a:e8:d3:
67:d6:aa:2d:8d:5a:e5:b8:bd:f7:c8:ce:ca:a6:c3:46:10:46:
c4:fe:e8:4a:a8:dd:19:b4:6c:b6:2e:2d:37:a5:10:18:c7:7d:
c3:16:36:f2:7a:6a:6a:96:6c:3e:c0:51:ea:7c:24:54:ee:f2:
1c:ad:4e:91:67:24:d5:0e:03:c6:7a:6b:db:a6:33:35:95:0d:
1c:6a:9f:eb:39:55:39:ca:aa:58:17:04:9e:14:b2:0f:17:39:
91:8b:a9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:59 2025 by rpki-client