Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: TnS9f0mR4dF0qICu6ocisiSvxrTVHywTSUeXwXX/fgE=
Subject key identifier: E2:44:65:8E:CA:37:2D:54:1F:37:B0:D2:23:A0:4A:08:F8:B7:09:B3
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 0198733DA80FB9F2A9E9B4A4663995897D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 08F3
Signing time: Mon 04 Aug 2025 04:01:17 +0000
Manifest this update: Mon 04 Aug 2025 04:01:17 +0000
Manifest next update: Tue 05 Aug 2025 04:01:17 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: jPNxcx372WYE00P5bfkSEcsQcjdw4ZUiVWLuUH5Y38c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:a8:0f:b9:f2:a9:e9:b4:a4:66:39:95:89:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Aug 4 04:01:17 2025 GMT
Not After : Aug 5 04:01:17 2025 GMT
Subject: CN=e244658eca372d541f37b0d223a04a08f8b709b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:19:d2:5d:78:29:c6:c1:3e:67:fb:fa:5d:
96:b5:5e:4d:82:5b:92:b5:2e:ed:98:97:2a:01:6f:
eb:21:d1:70:ba:73:31:84:98:56:46:71:62:5f:13:
d2:da:ba:4e:2d:ea:e4:92:31:e9:d3:b3:46:d2:f3:
82:f1:05:cc:08:0c:d8:49:90:47:ca:a4:98:f0:af:
da:ca:af:01:86:77:ae:ca:52:29:6c:5f:38:0c:e4:
9e:7f:89:51:e1:41:96:66:55:df:10:6d:1c:51:14:
96:8f:fa:15:39:d6:0d:d3:63:83:ec:6a:27:d1:de:
1e:29:b9:38:f8:ce:64:98:37:c8:45:7e:ec:ba:bd:
a9:ae:d6:b5:fa:38:40:4f:c6:c8:72:15:0a:b8:cb:
ed:d1:ff:7b:39:41:21:9d:cc:ba:73:ac:ae:eb:4b:
45:b3:24:37:5a:f2:2a:7f:c2:44:48:46:d7:b6:fc:
95:f3:28:0e:7c:e0:c4:bd:58:2f:d8:b7:e0:ce:05:
08:15:7d:b4:32:0c:9d:4f:64:52:3f:dd:cd:ad:75:
70:d8:f0:4a:6b:f5:fb:ee:1a:24:ba:f0:94:c7:73:
45:40:04:82:d9:6f:0e:3a:57:09:a2:a9:0b:35:83:
63:c4:7b:12:44:54:f6:0b:2f:39:9b:e3:8e:14:20:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:44:65:8E:CA:37:2D:54:1F:37:B0:D2:23:A0:4A:08:F8:B7:09:B3
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:82:f7:ef:76:3a:d3:41:ef:6b:fb:69:42:c6:22:72:39:53:
d3:9d:b0:75:b9:bd:af:54:80:28:7a:6e:af:90:be:35:37:48:
c6:39:90:c3:47:2f:4a:48:4f:96:8f:89:81:25:c4:4b:95:81:
0e:1f:2f:26:5a:e1:0b:d3:37:7d:4e:56:5b:2d:a2:38:ba:ad:
11:6f:84:8e:ba:2c:c3:72:84:46:42:96:02:72:fb:65:e3:50:
b2:3f:1b:de:fe:88:82:21:74:4d:b4:84:1b:38:17:f5:32:48:
57:60:4c:48:11:05:57:07:73:b6:08:19:62:c9:c9:47:64:e1:
8c:a3:de:6a:25:fc:5c:e9:fb:92:6b:7f:74:62:e7:18:c0:92:
41:f2:db:57:8a:c0:69:b2:dd:3c:d9:6a:67:ce:c7:7d:ef:57:
53:27:8f:70:f6:4c:9d:09:8c:05:73:be:91:67:c3:09:0d:85:
7b:db:b6:d9:ae:08:4f:eb:8f:77:ab:1b:64:18:98:1b:df:ef:
4d:15:dc:3e:17:c5:6b:ba:54:b6:0c:cf:62:cb:0f:ae:f7:2f:
5f:ca:8c:30:09:a5:78:f3:5e:41:1c:eb:4f:ca:11:39:7d:15:
76:10:50:3a:12:61:d8:cd:fe:07:90:a3:1d:ee:64:e9:e8:66:
bc:d2:19:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:52 2025 by rpki-client