Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier: BQhMgT6VxVvFpLCRZnecD8PkPE/vOYELo28QSPJ1ww0=
Subject key identifier: 69:90:9C:01:CB:62:65:F5:21:AF:2B:6B:EB:57:68:B4:E2:8C:28:93
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial: 01988CFE9C5336D731A71F6A2C5BD38B3ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number: D8
Signing time: Sat 09 Aug 2025 04:02:32 +0000
Manifest this update: Sat 09 Aug 2025 04:02:32 +0000
Manifest next update: Sun 10 Aug 2025 04:02:32 +0000
Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: UzhEEW+qT4uQ9pmFZc5clzsa0eufGR90EF6eFmFGH28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:9c:53:36:d7:31:a7:1f:6a:2c:5b:d3:8b:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Validity
Not Before: Aug 9 04:02:32 2025 GMT
Not After : Aug 10 04:02:32 2025 GMT
Subject: CN=69909c01cb6265f521af2b6beb5768b4e28c2893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:9e:86:65:cb:0d:f1:47:db:21:55:56:8b:
a8:a4:2b:a7:8c:2b:39:d0:8f:40:d3:ee:fb:32:34:
65:49:23:fa:f2:76:62:57:67:13:f9:e9:f1:23:52:
ae:50:d1:57:a4:0f:9f:a2:5e:49:68:16:bb:29:43:
6a:53:a3:0e:a6:26:57:5a:a4:7e:5b:07:2e:76:b7:
46:f7:21:ac:61:8c:07:34:65:44:63:ab:ae:a5:fc:
03:c2:71:84:83:3f:07:71:86:15:ff:e4:8c:a8:d0:
f4:66:46:44:c7:34:a7:12:b2:ca:2c:c8:19:1d:c4:
b5:98:51:ae:29:52:d6:bb:e0:c8:69:ab:75:25:d6:
8f:39:e1:de:eb:8a:89:d7:f5:2e:b3:09:a1:67:11:
22:bf:34:d2:d8:6b:b1:58:d5:64:ce:01:64:00:61:
62:0e:3e:3c:f4:a5:3d:d4:97:a7:df:bd:0f:b6:e1:
83:ef:9e:1d:21:e9:c0:ac:d0:77:0e:9b:b1:70:65:
d8:56:d6:6d:cb:98:45:9f:34:f2:e7:e7:65:5c:f1:
f8:7f:41:3b:c1:0b:da:7e:34:06:40:35:66:d2:38:
77:45:2e:3e:2d:cb:1f:1b:a0:67:77:55:b3:6e:8e:
0a:b5:a3:b2:1e:2e:c4:08:67:ac:f8:8a:50:b7:10:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:90:9C:01:CB:62:65:F5:21:AF:2B:6B:EB:57:68:B4:E2:8C:28:93
X509v3 Authority Key Identifier:
keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:9a:68:80:ab:bb:d9:3c:4a:2c:19:c5:13:57:e6:ba:8a:
1a:9f:a9:86:82:c1:6d:99:f6:db:ed:1a:e4:7c:18:9f:0f:91:
3c:bf:3a:c2:99:58:c3:71:4b:82:80:4f:be:2d:d6:1d:9e:2b:
88:91:78:69:4c:4e:4f:ed:f4:f4:6c:c9:c7:3d:a1:f7:13:4f:
bc:8c:a1:3f:c7:e2:5e:13:4e:10:1e:3e:71:8d:04:e7:c4:bd:
ab:df:9a:20:5a:df:a5:59:16:cc:35:4f:63:ff:22:bd:5a:c0:
54:99:30:ae:f5:2f:97:f5:9c:a4:cb:43:01:7b:f7:f2:fc:12:
72:36:0f:9e:f2:15:ee:c4:87:d9:4a:05:a1:c7:ab:2c:af:a8:
1d:37:8e:57:6b:61:d3:41:2f:4e:e9:f1:ce:14:a8:10:21:85:
2d:d4:55:fa:37:a1:82:21:b0:fa:fa:c9:67:6b:79:1f:22:23:
f1:55:c7:12:b2:50:a2:d6:47:af:a6:7c:1c:cd:e4:bd:f9:56:
31:4d:0b:b4:db:d6:81:fe:5d:b3:7d:15:48:2d:cf:29:aa:eb:
1f:41:c8:9b:4a:7b:ad:98:2a:29:40:41:85:07:5e:b7:b7:45:
26:81:dd:c3:ff:af:f4:9f:f3:8c:30:9c:c2:13:03:db:ea:f8:
46:42:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:40 2025 by rpki-client