Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: yrS2oaXGoigcHXhTtufxWL4Gv4IHZn64vLiUJ2hUeTA=
Subject key identifier: 52:28:D9:E7:01:79:84:39:B9:FE:94:00:44:E9:31:21:5F:EB:59:F2
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 019883551E8184F80B58950B6075B9821B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 0340
Signing time: Thu 07 Aug 2025 07:00:50 +0000
Manifest this update: Thu 07 Aug 2025 07:00:50 +0000
Manifest next update: Fri 08 Aug 2025 07:00:50 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: WGDRP+QdGh+kmZbT6monWxdd4Z+k+CDAbvjUiwOVrG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:1e:81:84:f8:0b:58:95:0b:60:75:b9:82:1b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Aug 7 07:00:50 2025 GMT
Not After : Aug 8 07:00:50 2025 GMT
Subject: CN=5228d9e701798439b9fe940044e931215feb59f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:d1:ff:3f:57:6a:35:49:89:59:7e:5b:62:
a6:b4:cb:2a:3b:c9:25:a4:29:68:47:52:90:18:d8:
8a:29:3c:27:36:d9:58:31:57:36:bf:03:a5:f3:56:
b6:8d:5f:57:15:49:22:39:71:e9:07:c3:12:13:fb:
df:eb:0c:40:81:07:16:a9:68:69:69:ee:c5:50:9e:
62:1a:28:a2:4b:90:1f:e6:ce:95:09:85:83:7d:9c:
5d:3d:eb:1a:71:79:95:c7:ef:61:3c:94:ac:df:13:
1d:f3:22:95:5a:c5:2e:f1:08:19:d0:aa:fa:16:70:
77:cb:bf:a6:46:4d:1c:8a:1a:78:3f:18:4e:d0:4b:
f0:04:e4:9f:18:a6:c0:6d:f5:c7:70:68:5d:03:f4:
75:d5:87:e7:da:e8:57:ca:96:83:40:ac:ca:4f:c6:
0a:45:f2:79:68:c9:b0:8b:39:4f:c0:93:0a:48:e2:
be:ec:64:75:a0:c2:13:30:e6:2c:3a:93:73:4c:1f:
5b:11:ad:8c:d6:11:b3:08:b9:0e:3d:a4:17:4e:b1:
63:e2:24:8c:9f:1c:14:65:c2:c9:55:50:d0:1f:32:
fd:47:0b:b2:79:d6:1a:be:af:60:6b:94:9e:70:c2:
94:ac:c7:47:e3:d4:6e:f8:ac:0d:33:8d:98:59:12:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:D9:E7:01:79:84:39:B9:FE:94:00:44:E9:31:21:5F:EB:59:F2
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:69:4c:f3:b4:04:1f:c2:06:6e:18:3d:70:e7:c4:76:56:61:
31:ab:52:31:c9:6c:12:2e:22:db:86:10:3a:e1:cc:66:43:28:
55:cd:21:e0:1e:2d:25:35:fc:a9:96:e1:68:c5:59:63:92:36:
74:c2:00:8f:aa:dd:df:7a:0d:e5:26:e8:21:40:ff:8f:75:b8:
51:c3:4e:31:e9:40:26:f2:be:7a:a6:52:6e:5e:56:58:a3:88:
d0:09:51:d6:ac:8f:20:7a:14:32:c7:c1:81:a9:be:4f:9a:aa:
ce:20:0a:30:01:8b:96:a6:bf:11:89:af:b0:4b:e5:ee:ad:bc:
cc:cf:d0:f3:14:80:88:02:ce:ef:b2:f2:26:26:64:85:be:8e:
63:91:de:84:b3:0a:78:38:96:45:2d:09:e0:5c:d3:d3:76:29:
6e:1c:01:9e:2f:b8:ef:d1:d1:97:d5:65:5a:da:0a:62:50:bb:
16:50:a6:93:34:6b:ec:2c:a8:11:d8:77:ab:53:e0:09:8c:2a:
f3:07:6e:29:c6:f9:f0:cc:ff:15:b6:ee:c0:9e:97:76:ca:e1:
b0:ce:61:63:4f:cc:90:dc:13:b7:ea:7d:f3:31:eb:d8:f2:1d:
c1:1f:43:d8:42:b2:a9:3c:3a:89:74:8a:36:53:69:fe:8b:a6:
49:b8:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:03 2025 by rpki-client