Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: QX1v5r6BwN5sjKZSLu1FCdd9lQCC4ljkiV5pweXdkSs=
Subject key identifier: 39:D6:93:93:7F:AD:BB:C4:61:D2:F0:BE:C2:3E:4D:29:42:4B:8B:4A
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 0198733D5D9E3E666B8A23071815DDA15582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 0BAF
Signing time: Mon 04 Aug 2025 04:00:58 +0000
Manifest this update: Mon 04 Aug 2025 04:00:58 +0000
Manifest next update: Tue 05 Aug 2025 04:00:58 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: 0Shl8necILUjhroVhCZ3XL9kpiVISYprR0y6FauRqx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:5d:9e:3e:66:6b:8a:23:07:18:15:dd:a1:55:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Aug 4 04:00:58 2025 GMT
Not After : Aug 5 04:00:58 2025 GMT
Subject: CN=39d693937fadbbc461d2f0bec23e4d29424b8b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:7c:c5:95:2b:56:3b:1b:82:bb:2b:80:b1:
74:be:5c:43:8d:34:25:a8:c5:7c:21:53:b9:46:34:
12:56:88:e6:62:7d:01:ed:5e:d7:a3:c0:45:77:aa:
f2:99:9c:21:b7:78:9f:41:a8:8b:d0:af:1d:d7:33:
ae:56:63:eb:d2:05:0e:1b:7c:76:18:59:d8:cc:f9:
90:02:9d:53:a7:e1:bf:68:db:13:9f:a5:c3:d1:59:
06:08:b3:d4:fa:59:c7:5d:09:12:53:45:de:4d:dd:
e8:61:d1:29:8c:8f:dc:0f:aa:fc:a5:37:5a:8b:23:
7e:63:b8:cc:54:d7:2c:f0:6d:31:a9:c0:90:56:7a:
68:0c:7e:ae:a3:39:87:d3:6a:f1:fb:b2:b8:62:83:
77:89:07:cb:fc:fa:9b:2e:67:0b:6d:5a:b3:09:b6:
55:b3:11:81:d3:ee:04:f8:59:1c:c0:18:60:9e:e7:
d8:5b:26:b5:d5:cb:ea:87:c5:8d:b6:e5:93:f2:c0:
0d:16:f4:94:b0:6e:53:d9:e0:36:1b:90:2f:e0:08:
c3:c2:ec:aa:dd:1f:3b:04:c6:a9:36:7b:f6:1c:14:
2f:18:e5:a9:8c:c8:7c:29:cf:35:c8:03:34:a5:75:
10:22:de:67:f3:a1:cc:14:ef:cd:d9:e2:f6:a1:a3:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:93:93:7F:AD:BB:C4:61:D2:F0:BE:C2:3E:4D:29:42:4B:8B:4A
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b8:ac:d4:83:ba:bb:7a:43:5d:55:6f:80:b9:5e:bd:a9:f7:
e3:51:64:e5:6f:ef:9f:a4:b2:02:60:3e:45:06:30:39:17:f7:
9b:15:3c:81:14:2a:e5:15:90:54:bf:20:9b:14:b2:f7:67:8d:
13:fa:76:32:53:00:79:79:ef:53:02:bf:04:76:28:91:95:1f:
5f:36:8e:1c:00:40:d1:d6:f3:2e:8b:3f:17:c1:ac:61:97:6b:
d4:10:03:38:ee:45:d3:a4:20:0a:bd:23:f7:7a:15:0c:31:5c:
31:4a:f8:3a:4d:f4:fd:78:4f:5a:5b:39:0d:4d:e4:b6:6b:08:
08:f1:65:3d:5e:32:9f:79:02:e4:51:ad:b8:bf:52:5c:79:68:
ab:81:10:d4:53:08:47:36:41:74:1f:dc:5c:e2:c9:11:be:0b:
ad:44:11:98:da:17:21:5d:d0:46:37:61:8d:69:e4:b6:05:91:
aa:e2:ae:4e:f1:8d:99:fd:30:f3:85:9c:7a:dc:8d:e9:96:c6:
bf:8e:12:01:3a:97:53:b9:4c:7c:c9:e0:75:c9:9f:a6:94:ca:
9b:17:8a:e6:07:8d:82:49:f0:5c:4a:b1:93:0d:02:b5:c3:50:
8f:61:59:1d:b3:d0:bb:af:94:63:ce:7a:d5:e0:fe:af:ce:a3:
e2:54:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:58 2025 by rpki-client