Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: 3bsaPynfJ50bH+7qy1fJnXJpkgSjoA3L/tXlGHLc2lU=
Subject key identifier: 17:32:73:11:B3:A3:E7:69:94:C9:CA:78:78:CA:38:47:26:E3:68:0D
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 0198733DA544464C9C414FD5F8F1F4A2A370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0ACD
Signing time: Mon 04 Aug 2025 04:01:16 +0000
Manifest this update: Mon 04 Aug 2025 04:01:16 +0000
Manifest next update: Tue 05 Aug 2025 04:01:16 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: /w7g4Gvulvy8lH1hKmrb6byMh6+Y9BqNIlmAMCSWiR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:a5:44:46:4c:9c:41:4f:d5:f8:f1:f4:a2:a3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Aug 4 04:01:16 2025 GMT
Not After : Aug 5 04:01:16 2025 GMT
Subject: CN=17327311b3a3e76994c9ca7878ca384726e3680d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:fe:1c:da:e5:54:52:08:7e:2f:ca:da:ca:
d7:de:d2:c6:3b:86:38:43:57:e8:be:f8:04:ec:c7:
23:8f:c7:f4:30:7e:7e:08:80:65:d2:3d:bc:2f:0b:
b3:32:3b:35:c7:4b:e8:18:11:e4:51:92:4a:97:40:
04:e9:82:d8:21:d0:95:25:e7:64:d8:2e:95:1e:9c:
b6:ea:b2:68:de:91:48:bd:90:b6:ff:cf:27:cc:ce:
e0:db:4a:45:cd:49:44:c2:8e:ae:e1:c9:cb:81:ce:
02:dd:4b:a7:d7:8c:2b:50:10:c8:79:5f:10:f8:6d:
62:d3:3b:fe:4d:ab:0e:da:2f:db:1e:ef:d4:d7:84:
a9:43:d2:be:f4:c2:7a:78:4b:39:f6:2a:c2:ce:07:
59:d3:a9:31:1b:b0:93:c5:8b:3b:87:ae:a6:51:15:
3b:82:eb:df:61:15:e6:2b:dc:4c:f5:7f:f9:ff:f2:
db:4e:de:32:13:71:fa:15:1f:9f:e3:62:b2:fe:28:
df:d1:3c:1d:fc:9f:b9:b0:2f:1a:c9:9c:98:f5:fd:
59:7a:fb:5d:45:e6:ff:da:cd:02:a3:c5:3f:fa:d9:
66:f0:d2:46:c5:45:38:73:ad:a5:9f:14:37:f3:75:
26:ae:df:42:d5:46:eb:0f:11:bf:69:68:e2:6e:7c:
d4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:73:11:B3:A3:E7:69:94:C9:CA:78:78:CA:38:47:26:E3:68:0D
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1c:33:ff:62:8c:cb:c9:a6:fc:bc:35:2b:5a:fb:9d:77:5a:
29:77:09:bd:36:7a:89:39:ab:98:e8:af:9b:01:f3:03:27:ee:
12:56:2c:d0:f6:55:28:e7:b8:e2:a8:2b:44:b0:08:c7:5d:ef:
71:df:c5:67:07:bb:9b:26:2e:f3:1d:64:e9:44:d0:b5:b8:37:
09:c3:b1:05:66:b0:62:df:95:a8:4d:5d:bc:03:1b:60:f1:e7:
c3:97:55:86:ae:aa:c1:67:08:de:65:8a:ac:18:e8:bd:e8:c7:
be:9e:07:06:53:96:33:cf:1d:47:40:0e:fa:8d:29:28:6b:fd:
ed:9a:c4:2c:0c:51:c9:a2:6f:a1:e0:3a:52:5e:27:4b:e8:59:
4b:3a:ca:2f:36:82:73:fa:89:af:e8:9d:a4:2c:45:9a:07:e0:
02:f4:be:d0:50:93:50:1d:cf:97:e2:0e:5e:f4:21:cf:be:e5:
4d:75:ea:d9:06:24:92:3c:ba:f6:de:9d:94:71:c0:aa:c4:ae:
62:1e:eb:cd:97:cd:4c:70:94:7e:bd:d8:d3:85:f3:4e:88:29:
78:d3:b0:01:52:cf:cd:94:c6:9b:67:9a:82:79:00:bb:55:6c:
e2:8b:eb:90:e1:ba:b9:e8:a3:9f:5f:a8:81:1c:05:e8:dd:4d:
9b:02:ae:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:45 2025 by rpki-client