Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: J7988oathR1m8bYITQJN0l/v62Y/MrIvtCYyXbKo8zA=
Subject key identifier: FD:E9:E8:1D:82:45:CB:56:51:82:22:F1:88:D4:F1:E8:F4:9C:AA:D2
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 0198A04E250FB841174058DF5571A729F710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0FBB
Signing time: Tue 12 Aug 2025 22:02:12 +0000
Manifest this update: Tue 12 Aug 2025 22:02:12 +0000
Manifest next update: Wed 13 Aug 2025 22:02:12 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: qF32JnTS29tWuzhzZ0j4yC/CQPxJgxRUMC8GYahczTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:25:0f:b8:41:17:40:58:df:55:71:a7:29:f7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Aug 12 22:02:12 2025 GMT
Not After : Aug 13 22:02:12 2025 GMT
Subject: CN=fde9e81d8245cb56518222f188d4f1e8f49caad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:2c:33:71:be:e9:ae:d1:12:41:5d:ac:0a:
82:c9:ec:30:a1:2e:bd:88:5b:33:cc:18:a2:fd:d4:
a2:55:c1:78:e1:ad:d1:80:8b:d9:9c:4e:24:f6:78:
18:52:76:d1:77:d5:f2:a6:7f:ae:a2:46:50:f0:40:
01:39:4f:e6:28:ed:0b:ee:1a:23:f6:02:35:c1:63:
b2:81:98:3b:ff:5c:d5:81:a6:09:75:ef:1a:d9:ab:
d6:85:10:77:ec:fe:f6:c1:b1:15:83:52:19:6c:da:
99:0d:80:a5:ef:3b:56:58:9c:6b:1c:77:a4:23:2d:
3c:b4:50:80:1d:54:36:ff:e8:e8:7f:16:b2:f0:7a:
f9:c5:90:87:2a:6a:a1:5b:61:fc:fb:31:db:5f:d1:
8d:49:a8:30:6f:b8:85:2f:3c:96:2f:11:38:14:13:
19:5b:7c:44:e8:5c:c2:77:22:84:28:c4:df:19:aa:
25:31:37:16:f9:36:ca:c8:45:60:7d:78:f1:8f:7b:
2e:a2:37:16:52:fc:73:9c:47:ac:00:6a:13:af:f1:
89:84:fc:e0:96:81:a2:0a:50:3b:d1:b2:67:7e:b4:
04:0e:33:e0:3a:9a:dd:92:88:94:dd:71:4e:ed:e6:
83:ec:50:9f:df:39:b4:e8:1c:23:72:30:94:85:5c:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:E8:1D:82:45:CB:56:51:82:22:F1:88:D4:F1:E8:F4:9C:AA:D2
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:68:9f:61:c7:87:08:0b:c9:1f:22:d8:1c:9e:79:24:e3:2c:
44:92:d1:a5:bb:a3:a1:32:d0:4a:84:c1:4b:e6:5a:1e:d3:10:
8d:cb:ef:0c:e6:90:53:84:c4:30:e6:1c:76:bf:e5:66:6f:7b:
d1:e9:cc:27:3a:bb:db:1f:c7:1f:e7:63:dd:af:7e:1b:e3:45:
2b:70:37:27:7d:d6:aa:ba:29:86:f4:f3:f4:56:59:66:37:db:
0d:b4:de:b8:aa:af:10:d6:23:f9:db:e1:90:7f:36:b0:3b:da:
43:0d:45:da:04:dd:1b:11:52:91:76:81:aa:b4:20:f5:5a:44:
5c:0f:49:e7:73:2a:0c:51:06:db:d7:d2:1e:dc:81:9d:e1:12:
f9:3b:27:68:3b:fd:de:33:62:9d:28:e2:5b:27:9b:83:44:b7:
4b:0e:97:14:70:3e:30:4a:9d:77:7e:7d:54:dc:81:dd:80:94:
11:a5:13:26:6e:2a:09:d2:4d:3c:5b:93:13:67:7d:29:89:3a:
f4:54:9e:c3:02:db:d0:cb:4c:9d:5d:8a:2e:e7:86:82:5b:f4:
b2:91:a0:79:9d:2b:99:ea:f6:24:f6:50:4e:5b:bf:f8:8d:20:
73:b3:4c:24:f8:84:0b:8d:d6:f4:68:91:bb:db:27:bd:74:1f:
e8:dc:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:06 2025 by rpki-client