
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: 12g5kZfMToA5OXJp0eMLeQoUx3SaVJ2IwAAKSpEP4H0=
Subject key identifier: 0E:74:71:75:67:2D:BD:44:2C:BC:A5:47:85:C6:E7:BA:69:FA:69:13
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 01988B0ECEA71E3844A60CF0FF7D4C4FA0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:01:00 +0000
Manifest this update: Fri 08 Aug 2025 19:01:00 +0000
Manifest next update: Sat 09 Aug 2025 19:01:00 +0000
Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: 7vvgBT9f4xxILBxWCoDsF6mTliXJV/e0QLQ4MfH9FKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:ce:a7:1e:38:44:a6:0c:f0:ff:7d:4c:4f:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Aug 8 19:01:00 2025 GMT
Not After : Aug 9 19:01:00 2025 GMT
Subject: CN=0e747175672dbd442cbca54785c6e7ba69fa6913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:e6:44:35:52:79:0e:6f:65:d4:da:65:72:
3c:22:56:2d:fe:d4:5e:d6:52:c8:b1:de:8d:5d:f8:
82:ac:18:fe:55:7e:a8:cf:f6:d1:90:05:34:2c:6f:
f7:57:4b:12:81:c2:17:78:b8:11:8d:a4:94:c5:31:
d3:eb:b1:6f:c9:cd:e6:a3:0b:a6:c1:af:1e:3a:bd:
36:6b:4a:c2:f5:b5:c5:fc:16:d7:2b:96:05:6a:51:
51:bd:f7:4a:68:c5:4e:75:a1:d2:d2:99:f8:78:0b:
9d:22:3c:2c:bc:c9:3b:d8:e5:f5:d6:e0:35:9e:10:
ba:6b:2b:ab:4b:6c:59:a1:ec:84:9b:d8:c1:3a:1a:
be:58:0b:79:a5:e2:40:2e:c8:f8:ba:95:f4:a5:83:
be:07:b1:91:30:e4:a4:fe:fd:ab:f6:1b:e7:1f:7a:
ec:16:0e:67:15:7c:66:fc:f5:d1:3d:51:57:f6:c9:
2d:49:a2:24:b4:fb:55:3b:05:b3:de:1a:5c:b0:3e:
15:68:c3:e4:e3:40:a0:97:75:f0:7e:39:c6:28:0b:
43:0d:38:db:bf:e0:df:27:8f:cf:a5:8a:08:bb:41:
03:31:d6:47:5f:d5:d8:c0:cf:c7:fe:29:8f:76:c0:
f6:7d:8a:b6:e9:f0:23:c5:46:44:83:72:59:53:30:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:74:71:75:67:2D:BD:44:2C:BC:A5:47:85:C6:E7:BA:69:FA:69:13
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:17:3d:0d:48:f2:ac:9b:75:a6:e7:30:f9:45:ec:3f:e2:99:
85:65:5d:16:73:dc:ee:db:df:cc:b1:60:b3:cd:2f:a0:c9:b0:
e2:9d:3e:a8:d3:5c:ad:c9:76:88:06:ec:00:05:93:89:bf:e4:
d4:8d:f1:c0:03:16:3e:45:5f:ac:66:f8:35:d6:c7:b8:7f:1c:
7b:db:81:f2:3b:55:6c:d1:0b:ab:9c:46:1f:78:a3:b5:26:ae:
ff:5f:55:ae:96:d0:75:84:6c:06:1a:0b:fa:e2:6c:26:9f:cc:
53:4b:a6:ef:66:d7:5c:05:39:ae:d6:d6:c8:c7:38:a8:2f:7b:
51:05:6a:48:c0:8b:59:f9:e2:75:aa:58:ed:f9:8e:59:5c:2a:
94:f4:f2:58:96:10:9e:8d:b8:34:c1:9a:fd:12:f2:5a:92:c0:
c0:20:52:db:6b:ff:f9:bc:e2:1e:59:4b:e4:17:c3:20:4c:c9:
7e:6c:48:8d:f5:91:e4:cb:68:72:a8:e5:1d:23:36:ec:a6:a5:
ce:ae:96:fc:2b:68:44:d3:68:d5:cb:99:cb:2f:6d:98:3b:67:
79:15:0c:53:b3:0f:c7:0a:27:86:f5:bb:84:7b:4f:72:e8:af:
dc:c3:38:2c:c3:d0:75:cc:33:0c:ac:52:e4:c5:3d:7b:71:e6:
b2:e0:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:46 2025 by rpki-client