Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
File: zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json)
Hash identifier: bQr+Z+8718dZ0XR9h8K4W8nXqR6yhGvN1CT7KwVKBOw=
Subject key identifier: 18:D7:02:B7:9B:5E:9D:E3:AB:34:E3:FE:3B:EB:D5:32:0B:2B:5D:7C
Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
Certificate issuer: /CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Certificate serial: 019895241FE72D2F45161A40F7600232055D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
Manifest number: 0124
Signing time: Sun 10 Aug 2025 18:00:29 +0000
Manifest this update: Sun 10 Aug 2025 18:00:29 +0000
Manifest next update: Mon 11 Aug 2025 18:00:29 +0000
Files and hashes: 1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: /GG/fBBTh8MNNuhvR9vf4TKaaaFguX3XThRl93YD6HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:1f:e7:2d:2f:45:16:1a:40:f7:60:02:32:05:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Validity
Not Before: Aug 10 18:00:29 2025 GMT
Not After : Aug 11 18:00:29 2025 GMT
Subject: CN=18d702b79b5e9de3ab34e3fe3bebd5320b2b5d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:cd:ad:b2:8d:3c:d3:d5:f8:5a:62:2d:7e:
de:45:c2:22:fa:02:d8:5c:44:89:f3:d8:95:97:67:
0c:f4:d2:19:16:50:93:60:81:29:ff:e0:fb:de:d0:
d6:87:ef:c8:f4:2f:fe:4a:54:60:ff:73:a7:1a:da:
ef:6e:f6:70:c3:71:2e:b0:f6:28:56:c5:ac:db:00:
66:40:52:35:c9:64:1e:57:a5:91:92:f5:02:2a:6b:
70:aa:4f:b5:02:5a:0e:fe:8b:86:cd:e8:c9:f6:44:
aa:a4:09:8d:6e:f5:5d:6d:60:ec:29:26:f1:8b:81:
9f:ad:cf:f3:21:1e:0c:5d:58:9f:c0:61:58:8b:ed:
a2:ff:02:e0:56:07:b4:0b:71:19:02:14:9d:52:40:
55:88:8b:70:a5:28:d8:b8:7e:e5:89:37:89:8b:4b:
5c:76:be:48:18:bd:e3:5a:5d:2e:bd:cb:f9:2f:b5:
2a:a7:55:f6:7f:a6:1f:79:ec:fe:0e:2b:87:1f:40:
21:8e:8d:90:3c:da:71:15:57:6d:1f:8e:1e:17:ad:
54:6c:e8:58:84:13:fa:35:54:20:d2:6d:a0:1f:3f:
c2:b7:1e:9e:ba:74:3a:15:8c:24:27:9b:36:56:90:
08:89:ad:b6:26:64:05:2a:9c:f5:39:66:3a:c8:85:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D7:02:B7:9B:5E:9D:E3:AB:34:E3:FE:3B:EB:D5:32:0B:2B:5D:7C
X509v3 Authority Key Identifier:
keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:e4:ab:4c:aa:aa:f1:ba:f7:71:4e:56:fa:fe:c4:3f:cd:
4b:0e:de:b5:d6:f8:34:05:53:3e:d7:ca:eb:db:fe:0d:64:2f:
c7:c2:ae:f3:ce:3c:f1:c3:23:d7:3f:01:91:3b:b9:06:d6:a7:
74:3d:fd:34:50:36:69:a4:80:83:67:b3:51:d4:dc:93:1a:1f:
c6:8b:3e:61:79:bb:32:c7:e7:96:d5:a0:2d:c1:e1:79:75:28:
a4:2a:7d:ff:27:71:1c:ed:cf:63:e7:27:27:e1:91:82:d3:e5:
19:b6:57:13:b4:b3:c9:13:b1:16:cc:38:14:28:be:7d:95:dd:
22:28:3e:cc:c5:02:30:2d:ae:4f:f3:e2:d2:83:ce:d7:f9:28:
fe:ce:e2:45:0b:33:f5:49:99:08:f6:5b:1a:f7:b0:a2:e7:9c:
74:6a:ec:9b:ea:7a:d5:81:c4:0a:a9:e4:9b:3b:05:87:3d:be:
6f:01:d5:fc:1c:4e:34:a7:cb:b2:cb:18:ab:b6:ba:97:9b:0a:
e4:b8:bf:e8:80:79:fe:8d:c9:9f:4d:47:4f:de:d9:15:cd:40:
59:2f:53:40:f0:2a:51:f5:77:2d:e0:21:a3:a5:f4:42:49:d3:
79:4b:67:73:18:58:d0:d1:8f:64:1e:22:a7:6f:78:50:d7:6e:
34:f7:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:39 2025 by rpki-client