Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: mDIEqW3C9TYFmqsnNGJzPxw5EiaQHpdMdUzo9EWfYSg=
Subject key identifier: 52:EF:3F:6C:AB:27:A8:6F:CD:E2:AD:F3:0C:19:96:E9:9C:0B:ED:EF
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 019895FFEEEA49F2A079B808013CC6C113DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 10DB
Signing time: Sun 10 Aug 2025 22:00:34 +0000
Manifest this update: Sun 10 Aug 2025 22:00:34 +0000
Manifest next update: Mon 11 Aug 2025 22:00:34 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: PrhpXEt+5RoWv34BAVEgx28CsDr2EwOix7aoNdH5bH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:ee:ea:49:f2:a0:79:b8:08:01:3c:c6:c1:13:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Aug 10 22:00:34 2025 GMT
Not After : Aug 11 22:00:34 2025 GMT
Subject: CN=52ef3f6cab27a86fcde2adf30c1996e99c0bedef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:40:49:9b:c0:a7:e2:24:0c:84:e1:7b:2e:
da:f4:fc:f9:2a:32:f5:7b:35:63:71:8a:73:08:e8:
1c:2f:33:fb:13:5a:87:00:8e:0c:65:e9:27:1b:0e:
7e:85:b3:c7:e1:77:fa:d1:9f:98:2b:e6:a2:d1:ea:
6e:e1:96:01:88:e8:bb:b7:27:f7:7c:ce:97:0c:92:
5f:71:49:2c:54:bd:9e:4a:29:57:fd:6d:26:7f:e8:
6c:dd:66:09:8f:8d:07:8d:8b:b9:7f:8e:97:ea:a2:
a4:4c:97:ef:49:21:fc:6b:30:9c:e6:ec:89:a3:c3:
ba:0b:05:90:b1:dc:2b:c8:4e:97:75:23:db:66:f8:
ba:7e:75:43:4e:cb:51:c9:56:6a:86:63:46:ef:29:
30:51:85:b8:65:44:45:7b:a2:fa:74:8f:96:d9:4e:
52:b8:fb:30:f4:bc:5b:85:92:66:8d:51:dd:04:da:
0f:7f:2e:03:c9:31:c4:e9:72:2a:cc:fe:3a:83:01:
db:56:13:93:58:17:35:67:52:7f:45:67:68:60:5f:
8b:c0:d0:94:e1:76:93:95:52:27:a7:3b:50:b2:66:
f8:fb:41:24:f9:14:0c:2c:22:02:b7:0c:83:9b:3d:
5a:12:d3:d3:3f:85:be:f7:e1:e6:2e:39:4d:3a:19:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:3F:6C:AB:27:A8:6F:CD:E2:AD:F3:0C:19:96:E9:9C:0B:ED:EF
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f1:fa:41:68:bd:95:85:b9:98:6e:40:7c:f2:78:05:43:1b:
76:27:f4:64:8f:5c:f5:57:29:b1:7d:62:77:1f:3e:43:8e:67:
7f:88:3e:21:42:52:e7:82:25:0e:75:ab:63:ad:63:13:fa:98:
fe:41:66:b3:1f:23:ae:f6:7e:83:4f:4f:55:21:96:1e:b6:c1:
dc:02:1f:fa:db:ce:2c:bb:fe:01:1d:8f:e3:d4:fb:b0:54:a2:
88:82:bb:12:4f:99:01:62:4d:e3:bf:18:e9:c0:28:98:89:45:
56:aa:8d:4f:19:fb:73:db:81:ad:f7:68:11:b8:03:83:7b:e5:
a7:a1:09:3b:16:09:ed:19:2c:3e:06:c3:0a:54:cd:fe:ce:ac:
d0:f3:36:55:ea:c0:ee:2f:7c:c2:6a:e0:14:31:9f:bc:4a:77:
a1:df:0c:3a:6c:7a:25:df:d1:36:03:88:40:c7:18:d5:01:74:
35:18:5b:9b:bc:a3:a9:59:50:d7:16:5d:ae:cb:c6:ff:73:10:
ce:1d:b1:84:7f:b1:1b:40:ee:e5:2f:fd:db:d0:2a:77:50:07:
39:ee:16:ff:df:8b:a2:33:81:b3:55:07:74:78:1c:3e:6f:1e:
a9:bd:e8:e7:ef:fd:54:83:90:2d:17:29:dc:c1:7b:b2:2b:60:
a5:df:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:46 2025 by rpki-client