Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
File: zfQLRgtIuPNm_sXKObMcOAxkWjI.mft (raw, json)
Hash identifier: 0ET5nzZbQUpKkmmZnfhxjZtWExFpLyEAFwqgvfleacU=
Subject key identifier: 39:33:A5:6C:18:5C:6F:A1:3D:21:E5:F9:90:D2:11:CD:B4:9C:1D:59
Authority key identifier: CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
Certificate issuer: /CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Certificate serial: 01988A331BB705D3E91CB81A1DE30E20A3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
Manifest number: E9
Signing time: Fri 08 Aug 2025 15:01:01 +0000
Manifest this update: Fri 08 Aug 2025 15:01:01 +0000
Manifest next update: Sat 09 Aug 2025 15:01:01 +0000
Files and hashes: 1: zfQLRgtIuPNm_sXKObMcOAxkWjI.crl (hash: 6Cqtib65X+khOBza3qkQ20F/c/2dT/G+hHzqspfDNKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:1b:b7:05:d3:e9:1c:b8:1a:1d:e3:0e:20:a3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Validity
Not Before: Aug 8 15:01:01 2025 GMT
Not After : Aug 9 15:01:01 2025 GMT
Subject: CN=3933a56c185c6fa13d21e5f990d211cdb49c1d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:80:f0:ac:14:ec:dd:b1:19:d5:97:4e:f8:
c9:cc:8b:a8:e9:45:79:19:55:ea:cf:fe:45:eb:5b:
a4:20:10:05:e1:99:3d:a1:e9:6d:4b:d3:9f:d9:4f:
bc:1f:ce:45:60:ff:9d:48:28:3e:c9:27:63:38:08:
6b:f0:20:9d:1f:6c:d9:73:6e:ad:30:6a:3f:00:38:
58:ed:bb:3e:41:30:4b:ff:96:c3:55:3e:81:c5:18:
5d:c5:ff:80:0b:ab:32:3c:d3:eb:68:e1:da:07:f6:
20:42:8b:cd:c9:0a:c0:07:0f:53:5f:c3:9e:71:a7:
d8:5f:2d:c0:2b:22:78:ea:04:29:c8:0f:89:ef:29:
20:2c:6a:3c:41:21:69:51:03:c0:68:76:6f:e9:93:
2f:0e:03:4f:ec:35:6e:3b:29:8e:65:cd:02:da:15:
46:48:cd:c6:a2:8a:fa:7e:46:70:40:f0:50:e8:e8:
d7:7d:c6:08:76:cc:d1:51:74:7d:7b:19:c0:28:f4:
f4:5d:b6:4a:f4:82:3a:9a:b3:b1:7c:06:fe:12:c1:
1a:e8:73:09:48:ec:e4:58:7a:84:52:b3:aa:eb:43:
b3:a2:a1:85:e0:1c:f7:39:6d:b0:4b:59:da:09:74:
c0:e5:65:29:98:dc:79:07:de:b7:ff:5c:76:39:64:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:33:A5:6C:18:5C:6F:A1:3D:21:E5:F9:90:D2:11:CD:B4:9C:1D:59
X509v3 Authority Key Identifier:
keyid:CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f0:8c:62:19:92:1f:69:4b:84:5d:99:c8:5e:0b:e7:09:e0:
b7:81:b8:89:63:a6:6f:43:df:fe:0e:e3:2b:14:17:c3:c2:ed:
12:72:73:f0:21:0b:27:bb:90:b8:a0:e7:f3:97:d7:f2:8e:c5:
fb:80:39:0a:16:19:5f:e1:9c:02:d9:4e:29:b5:85:ed:e7:df:
07:66:3d:8d:59:fa:49:32:86:96:31:02:9a:7d:a9:28:ee:fe:
0d:dd:1f:02:4b:0d:66:35:cd:53:f5:76:4e:11:a3:c1:37:0b:
d0:0d:a2:bd:6c:8c:e7:73:6c:e8:db:d5:9c:1f:5e:7d:81:94:
54:bf:5e:9c:99:86:de:6d:df:13:d5:13:f9:fc:d6:81:e1:45:
0b:50:1e:8c:ed:9f:82:ff:59:0c:6c:3e:c1:6d:b5:f7:21:ef:
6d:56:98:d2:8d:cf:87:17:40:71:ba:ce:53:42:a0:12:b5:b5:
90:ce:6f:44:94:41:84:87:e6:6f:6d:49:ee:93:78:e4:29:ed:
ce:fc:27:56:c3:6d:54:ad:e3:02:77:12:a2:f0:a0:b3:4c:a5:
cc:83:6a:b3:75:a5:ab:6e:5b:bd:ab:6a:45:1a:97:21:30:ee:
e1:0c:42:54:86:ca:9a:2b:f0:ef:5d:63:2d:28:79:f0:4b:b2:
c4:46:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:54 2025 by rpki-client