
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: 2LFCt/jAkovbyVlsAX6mvPxz5L6AJH7XXDCgdBjYqQc=
Subject key identifier: 2E:BD:3D:86:4E:10:D4:08:1D:33:1D:B4:DB:DA:31:D9:37:DF:96:B2
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 019872986A23EB78F76004839F560A8C5681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 1158
Signing time: Mon 04 Aug 2025 01:00:47 +0000
Manifest this update: Mon 04 Aug 2025 01:00:47 +0000
Manifest next update: Tue 05 Aug 2025 01:00:47 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: +CAgAHJfbXUrB7VQrhMDxXS6EFPWQ1QN7sOBASEvRVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:6a:23:eb:78:f7:60:04:83:9f:56:0a:8c:56:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Aug 4 01:00:47 2025 GMT
Not After : Aug 5 01:00:47 2025 GMT
Subject: CN=2ebd3d864e10d4081d331db4dbda31d937df96b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:4b:db:35:62:10:cd:a6:40:53:88:3d:b7:
a5:de:64:d1:a5:14:02:c9:1c:50:b5:23:8d:cc:a4:
e8:1c:e5:bf:b4:dc:0c:c3:2d:af:70:55:e8:2b:8d:
ad:82:3d:cf:ee:66:74:4a:11:fc:eb:ed:cc:14:17:
3a:8f:46:87:d6:02:7d:d1:60:f5:6b:0d:dc:9d:71:
b1:bb:cd:56:f5:08:83:4f:e3:bc:3e:54:4e:d6:12:
28:ba:36:b4:4b:37:16:ec:e4:ad:ee:ee:92:ce:7c:
c3:2d:db:b6:9c:e3:ac:d5:bd:48:61:a3:80:20:d3:
cb:94:2f:8b:8a:ce:ff:15:ed:02:42:4d:c4:00:c2:
aa:ef:a5:08:48:9b:f8:f7:68:7e:3c:83:88:25:b0:
a2:1e:a1:91:64:76:c6:be:28:82:9f:1c:2c:b8:57:
ed:e6:44:89:ed:e9:cb:78:7e:a7:ae:9b:d8:be:77:
c3:59:c8:8d:5d:89:b8:ee:9a:56:f7:cf:32:0d:9b:
26:0f:11:ff:15:53:dd:2d:e7:62:ac:05:05:c6:13:
e8:f0:bb:e4:d5:e1:dc:b8:75:82:34:4d:5a:e3:43:
b1:0a:ca:93:59:48:45:93:a9:34:70:aa:73:4c:dc:
1d:f5:3d:b4:36:1d:12:b1:c5:e6:4b:67:54:62:6f:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:3D:86:4E:10:D4:08:1D:33:1D:B4:DB:DA:31:D9:37:DF:96:B2
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cb:4f:c3:93:99:fd:26:5a:ad:49:87:61:48:c0:1e:a7:29:
76:3a:70:45:72:34:43:52:9c:92:4d:01:37:e7:d3:06:7f:cb:
b1:cc:60:6f:ec:25:d8:b9:c6:8f:dd:d7:e2:05:a8:f5:99:e6:
a4:a7:48:2e:6e:f7:e3:78:b5:b0:65:65:08:e9:82:7f:21:00:
53:61:33:6b:70:e1:42:ee:af:14:65:e5:f6:83:2d:17:ab:50:
60:14:11:d0:e6:d2:f4:00:60:be:fc:05:e1:fa:1b:42:e6:10:
2d:cd:65:0c:d5:5a:e7:29:ac:9d:87:af:2a:60:6c:20:12:4c:
0f:5c:49:96:76:36:2c:2f:f4:38:86:fb:79:db:0f:98:ea:cc:
14:95:98:ca:58:4d:c8:14:51:a8:75:cd:00:69:56:76:99:9f:
07:df:07:6d:4a:41:e9:12:36:f6:23:b1:43:29:a9:ff:8d:90:
73:d2:f5:b8:1d:f7:1c:dc:fd:cc:eb:4c:0f:ac:3b:cb:38:01:
83:20:f4:a5:6b:33:fb:f3:16:c5:37:a1:99:00:55:2e:33:01:
e1:0e:3f:f1:3c:3f:86:fa:f1:88:64:45:31:3a:b7:1e:22:95:
26:d8:c1:f3:91:5d:07:db:41:38:91:37:c5:13:5b:cc:47:66:
b3:a8:d1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:34 2025 by rpki-client