Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: QKAB83R/CEGTJ4JThR8vpiyhZPQciCMqz8HKTpB/DEU=
Subject key identifier: A8:96:93:F2:84:68:29:66:E5:CA:E0:36:BC:5C:69:14:1A:05:A8:4E
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 019897139957ACE33D8146DC7E266F39F95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 12E9
Signing time: Mon 11 Aug 2025 03:01:40 +0000
Manifest this update: Mon 11 Aug 2025 03:01:40 +0000
Manifest next update: Tue 12 Aug 2025 03:01:40 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: B4U95AGj/kq+oXJzmBPnzYWYPZ+AK6ATE1EjNNCAHDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:99:57:ac:e3:3d:81:46:dc:7e:26:6f:39:f9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Aug 11 03:01:40 2025 GMT
Not After : Aug 12 03:01:40 2025 GMT
Subject: CN=a89693f284682966e5cae036bc5c69141a05a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:81:b9:1a:8d:8a:39:12:fe:29:02:94:6a:
53:56:01:07:02:58:69:b4:c7:b0:1f:25:e8:72:95:
38:81:c1:94:bb:66:f2:df:31:cd:70:22:4e:be:7c:
53:7d:4c:9c:d3:4a:2b:1c:b0:63:61:c2:19:79:25:
ce:6f:41:13:fc:e9:37:0b:95:9c:39:2c:15:6d:47:
f0:58:ee:4d:f0:11:24:ea:a6:76:c2:f7:cb:fb:ff:
d1:9a:d8:53:d0:76:08:74:08:86:b6:a1:a9:fc:e9:
8a:57:e3:00:fe:4b:81:2c:d5:62:27:7d:84:58:89:
4d:27:5b:a9:4d:2a:0e:86:d8:43:80:f8:e1:d7:89:
0f:0f:47:d2:89:fa:0b:8f:65:d1:a3:25:15:5d:fb:
22:99:81:64:22:ae:90:ed:02:80:b3:1e:0a:69:10:
8f:ff:c2:d7:5d:18:f1:c6:0e:a7:f6:31:7e:d0:86:
1d:9c:08:bf:80:7c:7e:1b:e2:9d:07:91:d9:e4:0b:
40:6f:56:60:c1:b2:1b:e8:5b:fa:78:1d:23:98:bd:
43:7c:17:f9:93:59:6c:b5:78:78:0e:12:82:c3:e8:
2f:5f:37:63:c6:cb:13:51:8b:1c:26:8f:52:b6:ec:
ed:72:6a:98:66:40:90:45:6c:d8:e2:52:ca:47:48:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:93:F2:84:68:29:66:E5:CA:E0:36:BC:5C:69:14:1A:05:A8:4E
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:65:ce:75:05:1c:85:50:c4:aa:bb:3b:af:be:fb:aa:1e:c9:
25:50:8a:d6:2c:62:e6:34:e7:1e:70:68:c3:1d:ad:f3:21:99:
2b:57:ab:3d:71:e2:03:ee:93:fd:4e:0a:fa:5b:99:f6:15:2f:
17:aa:65:9f:71:23:73:1c:7a:ef:99:55:c8:3a:fd:61:fa:6f:
bf:b2:68:81:9b:05:11:d7:92:58:bd:2c:5e:ad:f7:1a:71:19:
88:6e:e6:cc:31:da:d5:27:d4:15:81:69:b9:09:18:a3:7f:9c:
68:65:25:e2:3d:fa:6c:c5:76:2b:24:05:83:3d:cc:bb:c3:58:
a0:3d:1c:9a:29:bc:37:42:11:b2:f4:36:b9:26:81:65:31:7d:
52:6e:09:d5:f5:8f:aa:d3:9d:80:a7:bb:f1:67:e1:ec:d0:23:
5a:32:f0:79:b4:73:67:ba:ab:dc:d9:f4:a4:68:51:5e:b5:02:
92:88:7d:8c:01:db:98:04:ec:f3:82:f2:93:ce:fb:99:ee:c5:
78:71:77:24:c9:2a:ff:fa:65:5d:e8:f2:1c:29:5a:11:b3:d9:
c3:77:59:eb:2a:66:fc:07:32:ae:af:05:ae:a8:12:93:bc:78:
d0:88:85:b2:71:c6:3b:2a:e0:df:ef:e3:a9:74:18:10:eb:23:
70:b6:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:16 2025 by rpki-client