
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier: ZlN+7ZfdryGdjoBWixlXX6L4nC7S457I7c8ksrXc5QY=
Subject key identifier: E8:46:EA:C0:CE:7E:73:2B:46:EE:08:FA:37:06:CE:0D:5E:EA:77:9C
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer: /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial: 019872625F90980DF00408311AC277A51C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number: 0C97
Signing time: Mon 04 Aug 2025 00:01:46 +0000
Manifest this update: Mon 04 Aug 2025 00:01:46 +0000
Manifest next update: Tue 05 Aug 2025 00:01:46 +0000
Files and hashes: 1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: +ZWrihrd6Z/eqFiw1ZIWcDJBc/Lr+TRtsEQRCsnUCLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:5f:90:98:0d:f0:04:08:31:1a:c2:77:a5:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Validity
Not Before: Aug 4 00:01:46 2025 GMT
Not After : Aug 5 00:01:46 2025 GMT
Subject: CN=e846eac0ce7e732b46ee08fa3706ce0d5eea779c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:c7:20:7f:59:dc:4c:6c:f9:79:e0:71:3b:
0f:6d:f4:a8:58:65:4d:07:50:6a:00:4b:76:73:ae:
84:05:64:6a:f1:ef:1d:23:c0:5b:11:f2:61:f7:fb:
0e:96:7c:5b:bd:e0:0c:0f:7b:08:f2:57:37:ff:88:
04:61:29:a0:07:7d:11:90:07:67:04:6b:93:47:6d:
d2:06:2e:5b:2d:aa:81:66:3e:3d:e2:d9:23:c2:29:
dd:51:94:86:06:b0:9b:9c:5f:b6:88:4d:b1:06:30:
1a:e3:b7:06:5a:b2:f3:9c:fd:4d:ab:90:72:33:ea:
ba:71:b6:74:98:b0:e8:0a:91:e8:4b:dd:16:b7:14:
e7:ba:68:5c:24:ad:68:66:00:7f:14:ea:c2:6e:99:
5c:6b:bb:4b:23:1f:f5:3c:44:8c:a7:eb:4f:26:d0:
b7:05:25:e0:02:78:6c:e5:cd:72:38:2f:60:48:14:
b5:1f:2d:5e:5f:f1:bb:bf:22:36:47:15:20:7c:1e:
9b:71:10:27:a6:39:b6:2e:6e:72:40:e1:d9:20:21:
fd:0e:fc:bd:fc:d8:91:69:c9:e0:84:6b:4e:64:81:
85:7f:c9:60:1d:47:16:ce:ef:96:42:11:70:09:0a:
21:1a:10:57:b5:39:88:62:74:c7:15:22:4d:1c:3e:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:EA:C0:CE:7E:73:2B:46:EE:08:FA:37:06:CE:0D:5E:EA:77:9C
X509v3 Authority Key Identifier:
keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:95:d2:27:a9:4e:b8:bb:f4:d9:a5:84:f0:47:09:06:fa:74:
9e:03:11:a2:d9:14:e6:eb:45:25:86:ef:c6:dd:46:e8:af:0f:
bb:f8:fa:03:cd:af:34:1f:01:ae:b1:8a:1a:bb:56:09:db:17:
33:98:f6:d9:10:8a:80:1d:bf:40:4a:87:e1:a8:56:c8:8b:e1:
d7:de:36:30:d4:fa:cc:7c:8a:c9:1f:a4:65:a1:f5:f3:b3:e9:
07:e2:4f:b7:bb:ee:53:6b:62:14:b5:d4:ef:fb:9b:10:20:62:
40:96:42:89:c4:10:d9:c0:78:9c:64:ad:6f:d0:10:45:c6:5e:
e8:38:09:96:02:0f:d3:c2:f6:1a:aa:98:e4:39:c2:22:b1:83:
ca:b3:1b:38:65:0a:82:06:71:80:de:1e:cd:39:78:21:cd:73:
fd:b9:8b:0d:81:57:cf:87:22:52:b1:25:a1:25:1c:02:a5:9c:
e1:c0:a1:cb:2f:a6:0d:65:5e:b0:51:c6:1f:30:03:73:96:b9:
1e:99:54:46:e8:11:c7:74:92:5c:d4:2c:5b:76:33:4f:c6:73:
86:52:4f:0f:c8:ea:0f:4d:4b:65:3f:d9:9c:4f:ec:a3:36:5c:
97:c3:35:e1:55:6b:d4:4f:03:cd:bd:3f:bb:13:db:89:00:59:
75:ca:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:27 2025 by rpki-client