Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: kRC248jRnY9Y69okPUr7sxQtlgqxB5e30OJ5kfOyMXk=
Subject key identifier: B1:07:96:EF:C3:BA:CC:7E:AD:45:D8:32:DA:9C:84:D2:41:21:53:66
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 01988166A7393F23045EBA4BB529586B91F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 12AF
Signing time: Wed 06 Aug 2025 22:00:44 +0000
Manifest this update: Wed 06 Aug 2025 22:00:44 +0000
Manifest next update: Thu 07 Aug 2025 22:00:44 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: XQXIuDSvQ8w/w8jEGiJpFFUgHsoF1WdNN1CuWz/v3EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:a7:39:3f:23:04:5e:ba:4b:b5:29:58:6b:91:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Aug 6 22:00:44 2025 GMT
Not After : Aug 7 22:00:44 2025 GMT
Subject: CN=b10796efc3bacc7ead45d832da9c84d241215366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:22:e7:ce:09:c0:ff:96:ea:8e:16:b3:ff:31:
69:47:6a:bd:f6:05:62:6f:2a:72:e6:b1:d8:a0:17:
96:d1:89:4e:cb:fb:54:90:af:f2:da:61:a2:5a:f6:
83:2b:e6:83:de:74:23:7e:62:19:b1:2c:a6:a6:18:
59:e3:f3:6b:b5:5c:00:73:59:5e:87:6d:5d:2e:73:
3c:58:c1:ec:56:b5:6d:dc:14:3f:34:89:52:b4:55:
bb:9a:b7:42:e4:1d:30:06:89:9b:44:fe:de:b8:bc:
1a:89:10:fe:a0:cd:00:02:58:68:7d:33:d7:7d:44:
62:76:57:32:4a:e4:99:e5:3e:54:90:e0:c9:d4:6a:
4c:bc:91:f0:f5:de:cf:24:fa:85:41:52:d0:f6:37:
74:bb:5c:1f:4f:28:bc:22:24:69:5c:5b:ef:2a:04:
01:95:8e:32:44:6b:47:7e:87:63:05:29:0a:98:02:
62:c5:7d:b8:8a:22:28:5d:a8:76:6f:e4:a8:f6:c7:
1a:8a:8d:b2:ca:42:77:f3:4c:be:4c:c9:3f:31:e0:
75:c9:53:78:20:e2:b8:ac:89:a5:97:58:6d:c2:e7:
94:fc:d1:07:15:21:c9:0c:cd:2b:62:71:3d:9a:c8:
0e:1d:db:f0:34:30:f6:5c:f6:5b:e8:e0:e9:27:0a:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:96:EF:C3:BA:CC:7E:AD:45:D8:32:DA:9C:84:D2:41:21:53:66
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d2:14:c5:91:8a:d1:59:89:22:50:88:4e:4c:62:fd:73:71:
6f:a5:b4:5d:b6:a4:e8:d7:7a:ad:8a:90:da:83:e4:e2:e4:9b:
b5:6f:5b:f4:4c:c7:33:ce:d3:02:e6:94:57:2c:a9:4a:e1:3a:
be:7e:94:80:9d:c1:bb:6b:48:89:1f:bc:a2:7e:18:eb:f1:bd:
74:2b:29:9a:8c:59:f3:de:dc:ff:9c:4b:b2:3e:88:b3:cb:15:
55:2d:69:30:cb:de:60:8f:a9:93:d4:83:27:8c:90:06:4c:19:
79:9b:2a:68:fa:9d:88:4d:c2:08:65:37:d0:ed:86:b3:76:b1:
a1:2e:b2:6b:58:97:83:05:c1:f8:a1:0c:9a:cb:46:e9:0d:16:
c3:ae:e3:32:a5:53:f9:43:30:96:1d:3c:78:a1:9d:63:76:0d:
11:c4:9b:d2:1d:48:11:5c:27:7c:4f:16:ac:0d:f3:14:8d:68:
7b:e8:fe:ce:b0:89:1e:1b:df:f5:49:f8:8f:37:d1:77:9f:f7:
21:60:30:bc:46:fb:36:2f:7e:f6:a2:ea:30:eb:64:9a:4f:00:
98:92:4d:2a:85:cb:d9:6a:44:fa:9c:6c:d4:3c:a4:34:5e:8e:
d6:03:f0:13:6f:e7:d8:5f:c5:7c:ae:9c:7f:d6:94:08:5a:ce:
63:81:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:40 2025 by rpki-client