Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
File: ZmW8l5kwxe64oYSlqQOei5nuMK8.mft (raw, json)
Hash identifier: fufYuF+vJPypEdY0POaqcPoAHwS3bhArIzMT+vsEgYI=
Subject key identifier: 20:D5:34:C0:30:BF:5B:D9:9E:87:5D:1F:1D:CC:33:71:2A:5B:0D:2F
Authority key identifier: 66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
Certificate issuer: /CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Certificate serial: 019873E3AC924C266A5F4349D20E82C72199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
Manifest number: CB
Signing time: Mon 04 Aug 2025 07:02:37 +0000
Manifest this update: Mon 04 Aug 2025 07:02:37 +0000
Manifest next update: Tue 05 Aug 2025 07:02:37 +0000
Files and hashes: 1: ZmW8l5kwxe64oYSlqQOei5nuMK8.crl (hash: x605qSfVOOpTPzCsbmcdfiHeY9tMO34dr6gYvi/ks6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ac:92:4c:26:6a:5f:43:49:d2:0e:82:c7:21:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Validity
Not Before: Aug 4 07:02:37 2025 GMT
Not After : Aug 5 07:02:37 2025 GMT
Subject: CN=20d534c030bf5bd99e875d1f1dcc33712a5b0d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:cb:92:54:d8:34:cc:1e:65:aa:1f:1f:7f:
26:0e:90:d5:ce:c5:9c:46:9d:f3:8b:5c:68:4e:3c:
22:81:df:9c:e6:42:a3:b2:55:9b:39:d1:01:f4:7a:
2d:b3:52:48:90:f0:03:12:a6:a7:ec:2c:c0:28:4d:
ab:95:6d:0d:67:94:bf:71:90:5b:4a:2b:88:5b:ef:
b7:08:7e:44:ad:fc:00:c8:16:44:0b:c9:95:b0:f2:
b5:6c:dc:fd:ce:a2:30:46:0e:6e:d2:66:81:86:78:
dd:1a:d4:eb:61:a2:4c:bd:b9:85:c1:4e:af:4d:db:
55:7e:e3:17:63:0b:16:03:ae:1d:c2:9b:19:1f:1b:
b9:4d:04:e2:c2:7b:93:79:09:d6:92:34:e8:a0:6d:
f1:cc:e4:9c:63:30:c1:78:f0:49:82:d3:ab:31:14:
33:5f:fb:2b:db:4f:0f:d3:a7:e0:31:e9:60:28:3c:
b3:e8:37:88:62:2f:b8:3f:f3:58:b5:59:4e:82:ea:
04:fe:4b:2d:fa:99:88:13:ca:8f:66:71:d1:ef:3b:
ac:18:92:5a:65:b7:cc:71:a3:34:7d:d5:b0:a0:4a:
fd:bc:4c:b5:12:9d:35:94:24:3e:e7:0d:b5:d4:af:
d8:ce:85:f6:02:d2:bf:8d:4d:2d:f3:c1:76:20:7e:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D5:34:C0:30:BF:5B:D9:9E:87:5D:1F:1D:CC:33:71:2A:5B:0D:2F
X509v3 Authority Key Identifier:
keyid:66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:e3:92:7d:7a:bf:b2:f2:0c:20:93:08:46:d3:da:47:84:
24:20:d6:ca:15:75:c1:60:54:97:5d:8f:68:86:e7:cd:72:d9:
7b:6d:94:f2:f3:fe:e0:0c:f8:dd:25:4c:19:30:80:c2:ea:d1:
c9:fd:b9:1d:76:78:2b:f1:92:fb:82:be:a6:67:82:2f:d3:a0:
fc:6a:73:c7:a5:a2:dc:8a:58:9c:f4:02:47:82:cc:59:b4:19:
65:15:e0:43:4d:ca:1d:66:e2:c0:e7:da:61:88:fb:64:0f:da:
ed:b3:bf:f5:1a:66:b9:a7:09:c9:19:7c:47:58:76:7c:e2:8a:
e7:b9:47:24:5f:64:d1:cc:b7:ca:55:c4:df:dc:da:ef:2e:af:
c5:3c:ff:22:61:a3:bb:5b:52:69:df:2e:54:96:82:71:da:a7:
ec:ad:f3:9e:c7:44:7e:74:f2:d4:35:5f:b6:f7:65:64:77:37:
18:04:de:cc:6c:fa:58:b4:f3:bf:2d:91:39:5f:db:0c:6b:17:
df:cb:6d:7c:a6:41:e5:b3:ca:d4:dd:cf:6a:11:2c:fa:8a:1e:
4b:3c:8f:a0:96:f0:59:ee:7a:64:a7:b3:bc:05:07:f1:91:2b:
37:80:34:8e:17:dc:8f:ab:c5:3a:cd:c5:b1:03:df:aa:1d:53:
1a:37:8f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:44 2025 by rpki-client