Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: HLITeiLvpIwjXlzRY4Y+GhkZh/zw1TElOpEmDqyygqA=
Subject key identifier: 9F:4D:15:84:80:A1:C0:E4:38:15:A1:08:24:41:59:FB:69:AF:26:15
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 01988EEBE532D80333899F566148485BFCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 13:01:20 +0000
Manifest this update: Sat 09 Aug 2025 13:01:20 +0000
Manifest next update: Sun 10 Aug 2025 13:01:20 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: A2dQ/ux/WDWg9Xl/xHqtE+r/L5lOh5fVrAZ0k42N78M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:e5:32:d8:03:33:89:9f:56:61:48:48:5b:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Aug 9 13:01:20 2025 GMT
Not After : Aug 10 13:01:20 2025 GMT
Subject: CN=9f4d158480a1c0e43815a108244159fb69af2615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:03:f7:5a:05:7c:83:65:6b:14:4b:44:c4:
78:80:dc:4b:e7:9d:5d:cb:f8:31:6e:86:f7:7e:0b:
67:44:1b:52:12:80:da:42:eb:ed:1f:25:e0:15:b8:
fe:91:d0:fa:0e:13:af:a8:ac:2e:4f:69:9f:bc:98:
97:be:74:66:ff:8d:b3:14:dc:69:76:42:cd:6a:14:
00:51:f8:ef:88:e6:99:04:3c:e7:99:5c:3b:31:ce:
18:8c:79:ea:a5:c3:bb:47:0d:0c:28:80:4d:85:b4:
3b:8f:3d:c0:59:29:d6:d2:51:4d:d5:a6:e6:3d:d7:
fc:20:28:e4:a5:f0:d6:da:67:d1:b9:68:30:40:82:
78:5a:21:60:61:09:f9:b2:a1:9d:be:35:47:83:0b:
c8:71:2f:f2:80:4d:30:cc:13:3a:fe:cf:a8:17:45:
6f:6f:39:80:3c:d1:a8:d0:12:c4:ed:c7:52:f1:83:
f5:9b:b6:68:87:ce:22:52:01:7e:7a:fa:ba:f0:d1:
55:d3:7b:f2:4c:d6:65:ec:7a:d0:fb:79:63:96:8c:
e8:13:80:e2:aa:95:d7:e1:97:63:fa:d0:f6:a5:cd:
4c:de:47:68:ca:54:17:2a:9d:97:2f:af:f2:ca:af:
02:9d:3e:3b:61:1d:7d:79:96:80:a0:b2:81:07:80:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:15:84:80:A1:C0:E4:38:15:A1:08:24:41:59:FB:69:AF:26:15
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:de:84:60:69:e2:84:e1:3f:e8:6e:54:34:58:05:9f:82:de:
f0:e7:db:84:ff:5e:0b:d7:6f:ba:fd:64:cd:bd:39:0f:9c:a1:
0f:76:ad:d4:43:19:34:c0:d6:6c:36:da:6a:a0:6f:e8:07:0f:
c6:9d:27:33:e1:68:09:0a:ab:7b:04:a5:92:e2:ab:75:6f:9a:
85:5e:b5:94:f3:80:04:46:43:a0:ed:0e:79:2a:76:38:39:5d:
37:aa:b1:6b:ab:b5:08:aa:b8:4a:9f:70:22:79:fa:77:06:88:
54:85:96:7a:0a:f6:c2:cc:0f:f3:17:4f:60:82:06:9e:93:66:
fb:fd:ba:1e:00:4b:99:9d:9a:44:24:69:97:20:63:1b:68:7f:
09:11:29:e3:d2:80:52:40:ce:6b:37:b6:8b:cf:ab:23:df:85:
4b:c1:ae:96:53:15:02:32:9d:c0:4e:63:e0:e9:d2:b1:03:4b:
ec:47:83:aa:8c:35:a0:6d:af:9d:fc:83:fd:fa:7d:0c:9c:e0:
a3:6b:93:11:c2:9c:ff:91:7a:9f:59:61:47:1f:e1:84:5f:0d:
13:98:f9:69:cb:08:d2:5e:e8:58:b2:3d:6b:55:fa:b1:88:3b:
91:59:78:8e:17:e7:81:aa:b5:e0:43:d8:be:d1:d8:d7:f2:ec:
96:c0:ac:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:57 2025 by rpki-client