Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
File: E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json)
Hash identifier: 2/GA8k62GzeWX3RiOzX6EbydY4P9CnLlD0V3zmATqDQ=
Subject key identifier: A8:DF:F9:D2:80:58:9D:FA:D4:A2:55:7E:CC:39:C8:37:61:73:13:5E
Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Certificate issuer: /CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Certificate serial: 01989E5EFA47E67127922BCE3338A42824C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
Manifest number: 08A3
Signing time: Tue 12 Aug 2025 13:01:21 +0000
Manifest this update: Tue 12 Aug 2025 13:01:21 +0000
Manifest next update: Wed 13 Aug 2025 13:01:21 +0000
Files and hashes: 1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: edNRZ/oJAj9A3oM1BaPWe2GWVugHd6CK+EzJeNPZRb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:fa:47:e6:71:27:92:2b:ce:33:38:a4:28:24:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Validity
Not Before: Aug 12 13:01:21 2025 GMT
Not After : Aug 13 13:01:21 2025 GMT
Subject: CN=a8dff9d280589dfad4a2557ecc39c8376173135e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:0d:51:3f:b1:ab:80:dc:32:d4:b5:69:70:
8b:7c:89:78:37:b8:8a:06:87:ac:99:4a:13:ab:fa:
7a:4f:6a:db:b2:ed:9d:52:1b:7d:54:ec:a9:16:2e:
de:55:16:5c:9d:9b:33:35:d6:a4:3c:99:86:6b:4a:
4a:ec:b9:26:ef:3f:10:bf:f6:70:82:12:3f:56:47:
c3:b9:7e:fc:fc:1e:ad:3d:e1:0b:c8:a7:5c:0d:73:
98:2f:97:8e:7a:0e:5f:16:72:12:ab:c8:5c:b9:b8:
c7:35:77:ba:ad:5f:c3:ab:63:49:fc:cd:0a:bc:dd:
0e:e8:4c:04:4c:3f:1b:92:7d:58:ec:bd:d8:0b:67:
ea:8d:92:9b:a3:21:ee:fe:63:87:01:a0:4f:02:bf:
5c:90:1b:e7:8b:fb:38:1e:10:6e:ca:4c:45:9f:7d:
45:fc:fb:96:fd:0e:43:ea:d1:3a:3d:2e:4b:05:9e:
92:eb:8c:69:10:57:ec:73:b2:4f:f9:78:17:8d:ab:
0b:52:21:ce:d4:74:89:bc:46:0f:d8:d1:83:3a:48:
52:9d:73:3e:fa:fd:dc:e7:7f:8e:85:55:99:2c:6a:
60:72:c8:7d:01:fb:13:a1:da:5f:a1:7e:d9:91:7f:
ec:ab:a3:f8:f5:03:db:c2:b7:c1:ea:7d:e3:ac:e0:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:F9:D2:80:58:9D:FA:D4:A2:55:7E:CC:39:C8:37:61:73:13:5E
X509v3 Authority Key Identifier:
keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:2d:4a:01:40:7d:a4:34:b3:06:ee:d0:e3:56:4f:bc:f2:
3b:27:f6:f4:ba:9e:3b:c9:4e:d8:a6:ba:c6:ef:5d:9a:f3:e4:
a1:1d:ce:92:27:ac:4a:9b:1b:5d:5e:50:66:0e:ab:a0:e6:18:
ee:87:91:0c:62:89:23:ac:29:e7:40:78:52:17:f9:b1:b5:9a:
41:b0:80:3e:35:9d:fd:81:bc:aa:04:c4:4b:3c:b5:6a:ee:7d:
e2:14:49:9a:9e:46:01:31:5e:ec:1c:ba:8b:3b:ac:ee:95:d5:
5f:f0:9c:96:83:d1:ca:dd:22:e2:53:2a:92:d9:90:f0:fd:e9:
e7:cc:be:bc:16:f9:62:af:6c:8e:10:12:1b:ea:70:d5:51:8e:
49:0d:2b:86:b8:96:40:9d:f3:69:5f:17:53:55:84:25:7e:31:
41:cc:39:8b:c0:87:2e:75:79:0e:0d:ea:ca:b3:51:6a:b2:8a:
4c:97:67:4b:55:64:61:bf:6f:02:65:5a:49:d6:35:a3:0b:38:
f6:83:14:d6:a9:91:20:84:2d:d6:71:71:a8:22:90:e2:7b:84:
83:9e:41:b9:0e:5d:78:b6:d1:0e:d0:46:53:97:ab:94:fe:64:
40:70:eb:e3:ac:21:d0:bb:75:c0:74:31:d3:32:9d:e0:11:2c:
af:db:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:19 2025 by rpki-client