Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
File: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft (raw, json)
Hash identifier: VHVyqflI9XB6D1G2NFkDLDZnpCaHG/WxfIwOQwwMDFY=
Subject key identifier: 89:33:E4:F9:81:62:6D:73:C4:B4:FB:32:E9:C3:E6:20:01:3C:AF:F4
Authority key identifier: 66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
Certificate issuer: /CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Certificate serial: 01989110CC0D5CC792CCD8EB11C9851B270E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
Manifest number: F7
Signing time: Sat 09 Aug 2025 23:00:53 +0000
Manifest this update: Sat 09 Aug 2025 23:00:53 +0000
Manifest next update: Sun 10 Aug 2025 23:00:53 +0000
Files and hashes: 1: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl (hash: 2WX5FjOPv2PKXwAQnWGT8963+kFQuMODt9LPkc3REew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:cc:0d:5c:c7:92:cc:d8:eb:11:c9:85:1b:27:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Validity
Not Before: Aug 9 23:00:53 2025 GMT
Not After : Aug 10 23:00:53 2025 GMT
Subject: CN=8933e4f981626d73c4b4fb32e9c3e620013caff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:65:5f:31:25:a0:42:e5:d9:ce:a2:9a:8e:
9a:65:0d:3d:c4:77:09:64:4a:a1:47:c4:36:4d:6e:
49:19:49:cb:a5:9c:fe:52:76:c7:07:cb:e9:9d:50:
91:83:45:a7:2c:93:0b:83:6e:c9:1e:f7:1e:5e:da:
c4:4e:01:f5:fd:2e:be:a3:63:46:cd:ac:a0:93:8a:
96:da:f2:14:85:7b:6d:d6:d0:df:fa:0f:8e:4b:fd:
80:4d:3e:97:8a:b8:65:46:f1:31:a7:67:29:70:9e:
90:d1:03:c8:80:cc:f3:90:8c:a8:d5:a4:2b:ba:7d:
a7:d1:4e:5f:4e:5e:d7:d7:e2:3c:45:76:54:4e:b6:
8f:9a:58:07:2e:70:41:08:75:47:bd:10:7f:2c:46:
0c:6e:60:5d:d8:c3:5e:8d:44:d5:8c:e1:54:4a:b4:
65:1d:3f:7d:b5:57:c9:bc:05:83:33:bd:53:a8:61:
22:45:4f:09:67:56:4a:f4:23:d0:15:b0:cb:78:d9:
74:2b:4b:13:ce:c4:4c:bf:18:73:93:22:46:18:1b:
d1:3f:7f:d5:98:65:0d:03:93:36:2b:1c:f5:2a:f7:
9b:09:9a:56:e0:5d:24:88:eb:56:a4:06:17:ac:29:
dd:74:23:7d:e8:34:28:65:7c:3f:2c:9e:05:07:66:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:E4:F9:81:62:6D:73:C4:B4:FB:32:E9:C3:E6:20:01:3C:AF:F4
X509v3 Authority Key Identifier:
keyid:66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a4:ef:c8:0c:92:2c:71:5c:39:2d:fb:37:5d:85:a6:93:bf:
bf:6f:ec:ec:b3:e5:6d:a5:c3:53:fb:f1:7a:4b:57:9b:fe:25:
b1:07:de:1f:f0:cc:4a:be:8b:cc:17:e2:25:5b:38:98:9f:e3:
94:95:33:35:88:93:47:f0:9b:1c:44:bb:bc:9c:31:11:6f:6b:
d1:d9:90:7c:00:30:fc:c9:b6:80:a5:44:ee:38:d1:e8:38:df:
fa:c3:83:a2:6d:ba:9f:b5:32:c0:45:8b:c1:45:d7:ec:6a:cd:
73:d6:03:70:20:8b:9e:57:4d:85:b2:e6:18:af:ec:51:d6:96:
e1:82:ec:31:18:86:62:21:cf:77:8a:70:d2:69:9f:86:37:b6:
97:8b:32:5c:21:92:7d:9f:e8:33:6c:2e:31:34:6a:e9:95:d1:
6c:ee:6b:fb:90:40:91:eb:ba:ef:b9:8e:46:bd:7a:a5:84:86:
1d:a2:43:5d:98:61:9a:75:f0:85:3e:28:c6:f8:4e:98:8b:b9:
66:c5:e0:44:0b:60:f1:6d:b9:ec:76:59:22:27:42:61:55:9a:
2d:34:7d:d6:c4:1b:a4:92:16:09:13:6c:cf:f1:20:f5:49:f3:
6f:2a:ed:e8:e6:15:4f:58:a1:6c:be:46:ea:3c:f9:9f:b2:4c:
e3:0c:4f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:26 2025 by rpki-client