Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
File: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft (raw, json)
Hash identifier: HkWPvFOQ9fFfxmUMBxlV3446rk5nvpLmBgPeMgpGUCc=
Subject key identifier: EB:2A:0F:C2:82:1C:0E:DE:BB:00:4D:E4:2B:41:F4:10:26:57:00:DF
Authority key identifier: 64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
Certificate issuer: /CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Certificate serial: 01989ECC1B1916FD49E512D688DA30E16383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
Manifest number: 01D4
Signing time: Tue 12 Aug 2025 15:00:33 +0000
Manifest this update: Tue 12 Aug 2025 15:00:33 +0000
Manifest next update: Wed 13 Aug 2025 15:00:33 +0000
Files and hashes: 1: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl (hash: qqKnNV6K4nr84+5Hl3wVRwiRrpcxdNs5bMFsKXsEl70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:1b:19:16:fd:49:e5:12:d6:88:da:30:e1:63:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Validity
Not Before: Aug 12 15:00:33 2025 GMT
Not After : Aug 13 15:00:33 2025 GMT
Subject: CN=eb2a0fc2821c0edebb004de42b41f410265700df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:19:c8:2e:0f:e5:50:08:60:68:03:e9:30:
e5:65:93:7a:48:51:f4:7b:17:6e:d5:72:40:32:fe:
31:af:62:06:8c:24:45:b7:db:ba:f4:3a:41:9f:2c:
02:e6:01:b7:d1:17:63:38:b7:12:ac:38:6a:76:42:
48:ab:a2:bc:ba:da:34:f2:86:3a:d2:59:c3:14:2e:
16:3b:f8:0f:14:c8:9f:2a:11:34:50:cd:30:e5:01:
e7:15:c9:07:c1:b9:56:dd:a9:0f:9a:57:5b:2a:dd:
93:3c:8a:b5:56:1b:be:a3:68:d0:e0:ec:bb:13:01:
87:56:0d:42:09:26:1f:c5:d1:2f:eb:a0:2b:c6:5a:
45:a3:ff:7d:21:fd:23:cf:11:2a:d5:a0:cb:df:70:
2d:a5:2f:b3:e1:4f:94:2a:f2:87:2f:70:2b:be:30:
ea:de:b3:2e:d6:08:43:90:20:c4:f2:cd:0e:54:69:
30:4a:a0:ce:cd:fc:70:b8:80:4e:c0:8c:99:c7:c3:
b7:5c:a3:0e:2a:4a:aa:8c:01:46:a5:f9:23:c4:82:
6f:f7:49:8d:98:45:35:4e:d2:a4:9f:c9:3e:f6:68:
cd:c7:c9:fb:86:65:48:fa:e9:e3:da:8e:3a:35:ec:
74:11:19:59:56:a8:6c:44:d2:66:d0:d5:ae:25:79:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:0F:C2:82:1C:0E:DE:BB:00:4D:E4:2B:41:F4:10:26:57:00:DF
X509v3 Authority Key Identifier:
keyid:64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:b3:b7:31:82:f6:21:95:1e:63:0a:ba:7a:29:5e:5c:42:
21:c9:e1:29:f4:c6:83:ba:8f:68:4e:14:74:8e:12:74:5a:aa:
f6:bc:10:29:fd:7e:44:cc:d8:12:16:bb:b2:ca:30:5b:4c:1e:
35:d8:22:27:0a:1d:92:21:93:76:4b:a8:be:86:b0:fd:bc:49:
65:d5:f0:58:26:ab:79:12:7f:24:4e:cb:45:17:9a:26:a8:0b:
47:81:81:29:9b:39:53:f6:f7:5e:be:9b:ad:86:e0:d3:d3:c2:
f0:96:86:58:c0:c7:77:91:11:23:bc:4a:7c:25:ae:d0:cd:3c:
eb:d4:f0:f7:08:23:96:4b:db:a0:02:c8:1e:2e:c2:89:9c:a4:
d4:ee:3e:c8:d4:ac:f6:9d:f8:9a:77:e2:73:f1:1d:ea:73:8f:
94:46:40:a0:c2:1e:71:82:1f:ac:eb:09:37:4c:bc:f0:85:47:
d6:92:fc:1c:c3:33:ff:ce:65:7c:c8:ea:77:d0:0a:95:d0:c2:
c5:e3:d1:d1:72:05:d9:0e:77:20:f5:20:c2:f1:92:08:ba:80:
49:99:31:82:0d:c1:d2:e6:74:af:3a:89:64:43:b6:7c:8a:c5:
de:e2:10:04:e7:42:02:c4:8d:98:79:f7:02:49:ef:bd:e6:45:
de:11:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:29:54 2025 by rpki-client