Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: a5hoyMP/IQfmjkbJvojwgBsY1MybuAN9G60laeng7h4=
Subject key identifier: 2D:86:1D:41:68:30:5B:B4:B4:73:8E:68:43:83:3E:74:86:AC:F3:7C
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 019873E2A3206A65018C2C1D249B8335D55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 1166
Signing time: Mon 04 Aug 2025 07:01:29 +0000
Manifest this update: Mon 04 Aug 2025 07:01:29 +0000
Manifest next update: Tue 05 Aug 2025 07:01:29 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: uA5Psrvj7L0+mJESq37wNMbDWBw8kzQs13csnbvQJYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a3:20:6a:65:01:8c:2c:1d:24:9b:83:35:d5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Aug 4 07:01:29 2025 GMT
Not After : Aug 5 07:01:29 2025 GMT
Subject: CN=2d861d4168305bb4b4738e6843833e7486acf37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:68:eb:5c:a4:dc:99:0c:f9:f4:32:f4:92:
bc:fe:b7:0b:17:62:7a:8b:54:dc:55:58:85:e8:2d:
d9:00:97:06:4e:a0:fd:9e:33:8b:18:5b:59:e3:08:
e6:79:a6:4a:7e:24:b9:82:fb:d6:1c:32:44:ba:f8:
a0:4c:b8:12:f9:61:a6:ed:c3:4a:ee:71:23:c4:fd:
cf:1f:2e:c2:bc:89:9f:66:2c:6e:7b:35:b1:7d:76:
a1:2b:e9:ca:c5:fa:51:ca:f4:06:92:b3:75:d2:b3:
11:4a:8a:3d:02:01:b3:c6:64:24:a3:df:1e:95:b2:
ca:70:d7:35:c1:e7:55:cd:f1:b0:6d:55:b2:9c:13:
21:93:61:e1:f5:ff:69:44:78:3e:ce:bc:16:de:71:
d2:6d:76:6a:4a:c2:03:b4:19:52:08:cf:98:3c:87:
65:22:15:7d:e5:92:33:d7:c6:ea:b1:53:c2:ca:bc:
1d:8d:26:d1:d3:86:14:4a:19:0f:23:c2:ce:da:70:
9d:9f:33:5e:9f:e3:7d:4d:a6:be:a7:4f:ec:17:a9:
3f:e8:fa:a9:8e:9a:ca:a6:63:ef:6d:60:bb:bf:a2:
8c:ed:9d:08:4a:53:fd:eb:85:b2:d6:22:d1:2f:34:
57:a8:69:12:52:63:d6:b7:8d:1b:16:3f:8f:ba:72:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:1D:41:68:30:5B:B4:B4:73:8E:68:43:83:3E:74:86:AC:F3:7C
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:98:8e:2c:35:8f:8e:3f:19:a7:c5:7a:cf:ba:f5:bc:f7:ca:
fc:8f:5c:19:68:6d:0a:60:70:7e:1c:90:f7:26:d3:f4:58:e6:
95:0c:db:a4:c8:d8:b5:76:fe:05:c3:ff:55:bb:94:d0:00:4c:
61:cd:6e:26:09:7b:9c:c2:57:f9:48:c2:58:55:50:df:a5:bc:
36:ec:b4:fb:34:b4:87:c5:8c:e4:45:a6:5d:c8:ae:e4:e5:38:
31:8c:4d:62:ed:24:6c:d8:0f:e4:31:c9:e1:02:4b:b5:27:ca:
77:7a:36:54:13:c2:3a:d9:f4:f5:28:f4:3f:72:0a:7d:4e:19:
74:b3:a8:ed:6f:c1:f9:d0:bc:cb:63:fe:7d:f7:21:9f:14:1e:
4e:13:ce:59:eb:52:f0:d9:23:19:c9:a8:80:f9:b6:a4:c2:d2:
10:df:24:76:34:a3:38:cd:38:a8:59:10:b8:af:a6:ca:aa:d9:
4b:4c:80:3f:0c:03:dd:d4:eb:d3:ee:2f:a2:69:22:89:30:31:
58:08:e0:61:7e:15:3b:05:34:f6:d5:7e:f8:5e:70:71:aa:a7:
56:37:af:1e:b2:38:f0:82:86:f4:f9:b0:8b:e3:c4:da:5a:f6:
f4:b1:7e:8a:f0:57:96:a8:0b:ef:ae:84:f4:92:e0:1c:82:bd:
02:60:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:37 2025 by rpki-client