Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: GH7sy48fQrCBDND+Aodw5HR+PWd8B2VrtrldlJh+gVM=
Subject key identifier: F3:13:EC:22:39:2F:6D:F1:88:B8:96:7F:FC:0F:A7:83:1A:FA:69:1C
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 0198A04CEE417ACFD4EB0FC6E9A8C9EC26A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0E2B
Signing time: Tue 12 Aug 2025 22:00:52 +0000
Manifest this update: Tue 12 Aug 2025 22:00:52 +0000
Manifest next update: Wed 13 Aug 2025 22:00:52 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: 2Ht7C+xm1nT2b18+OXvGP66pBPpfmnrVWLZvVnsVTOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:ee:41:7a:cf:d4:eb:0f:c6:e9:a8:c9:ec:26:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Aug 12 22:00:52 2025 GMT
Not After : Aug 13 22:00:52 2025 GMT
Subject: CN=f313ec22392f6df188b8967ffc0fa7831afa691c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:d3:c5:85:aa:17:5f:cb:c9:d7:96:67:8b:
03:cc:80:43:a6:d9:7f:25:a8:da:10:1a:ef:a3:12:
bf:d0:ba:75:53:4e:5b:16:7c:55:9b:2b:51:14:16:
b1:a9:58:5e:aa:23:4d:e0:c7:bd:35:f5:84:b6:40:
21:4b:f0:6c:67:c8:ae:a8:67:8f:11:00:61:12:52:
67:50:0a:ba:21:96:14:17:84:bb:4c:0a:c2:b7:56:
6e:b2:33:10:e5:01:72:0a:f8:5f:b4:81:b5:2f:b9:
46:e7:e5:30:cf:85:5c:7a:ac:20:cf:bb:6f:c7:ff:
e8:3e:ff:8c:dd:2d:2c:25:9d:3e:75:1d:bb:39:1a:
4b:d0:45:3f:85:49:bd:ab:dc:5a:53:9d:13:21:be:
01:5a:db:8c:d7:8e:97:45:9e:9d:0f:ca:53:60:ec:
1a:ae:e0:2c:f6:ba:58:8c:65:1f:e7:6c:fe:90:75:
75:ed:d4:18:ab:53:8d:fe:99:9d:b0:31:fe:c0:1b:
fd:e1:d9:de:8a:5a:0b:ab:0c:8c:c1:52:5a:83:07:
f5:7a:7e:6e:51:5c:50:3e:c1:3b:f7:6a:4d:0e:9f:
44:be:25:c7:3f:90:80:0a:a9:fe:67:40:66:7b:3d:
df:2a:af:f1:4d:d4:ac:d9:4a:2c:2c:87:be:ac:6b:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:13:EC:22:39:2F:6D:F1:88:B8:96:7F:FC:0F:A7:83:1A:FA:69:1C
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:00:85:c8:d2:5a:df:44:13:66:81:1c:7e:3d:52:9f:10:74:
f9:cd:80:3a:ac:fd:7d:11:ea:50:7a:51:3c:9a:4d:3d:7b:5e:
2e:36:cb:15:dc:1e:f1:70:11:b6:16:5a:32:17:fa:4c:2f:bf:
59:15:28:c5:e3:ac:1a:c4:4f:75:d7:8f:b5:24:f3:05:00:b4:
75:83:15:27:41:9a:bd:d1:6c:f2:a4:a2:fb:39:5e:90:99:26:
90:7d:d4:a3:40:98:5a:20:0f:ff:4f:5b:ae:c3:f5:b4:06:99:
35:e0:e2:9f:70:8c:89:b1:69:3b:36:1d:27:fe:3c:7a:8f:c7:
1c:b2:24:84:8b:99:12:da:d4:ca:4b:1b:92:fe:54:24:a9:06:
26:e3:a9:ee:79:94:b1:01:50:1c:3b:3f:29:a6:0e:20:ff:fe:
b9:f3:d2:92:a6:37:78:6b:2f:c0:07:70:2b:de:99:04:82:a3:
3f:7e:11:fa:f1:ea:60:e0:e4:a3:96:69:b6:a1:95:72:e3:e6:
60:69:a0:d3:5b:7e:d3:94:21:7e:76:bb:1c:44:6f:40:dd:b0:
38:8c:47:75:a8:c0:cd:d0:27:d0:4f:31:38:a6:4a:9e:4d:90:
fd:3c:cd:88:61:cf:14:8f:97:cf:7b:10:06:2e:e7:40:6c:7e:
65:09:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:17 2025 by rpki-client