Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: LRiKJcziAVihKMHyrmP2r/zwNqSEnm4Mkzy7M7iF+Z4=
Subject key identifier: 8A:55:53:4E:F8:6B:0E:C3:A4:AD:30:05:95:1A:0B:2D:7E:54:83:A7
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 01987C09FD5721C96267CDEF5EE6318D96F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 0DAD
Signing time: Tue 05 Aug 2025 21:01:26 +0000
Manifest this update: Tue 05 Aug 2025 21:01:26 +0000
Manifest next update: Wed 06 Aug 2025 21:01:26 +0000
Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: vspmSumKNwDkhl8pGutWKNhqncSKstyce1edj1JkfjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:fd:57:21:c9:62:67:cd:ef:5e:e6:31:8d:96:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Aug 5 21:01:26 2025 GMT
Not After : Aug 6 21:01:26 2025 GMT
Subject: CN=8a55534ef86b0ec3a4ad3005951a0b2d7e5483a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:d9:8a:b4:89:65:93:fd:8b:82:5a:7a:08:
a1:ce:86:a8:61:71:53:07:8b:8c:89:e2:05:7a:a1:
e6:14:b0:c5:4b:f3:8b:56:92:2f:b6:05:58:0a:a4:
2b:98:65:6c:8f:3d:2e:7a:86:dc:ac:37:75:72:58:
83:0e:d0:1a:12:6c:9b:28:bf:4f:36:e2:34:30:9d:
d4:27:76:8a:23:a8:38:59:80:3b:74:fa:4b:15:9d:
00:9e:71:60:72:8c:36:94:23:dc:54:20:ff:06:5f:
7b:d2:60:26:5d:95:8c:0d:e4:c1:6f:94:46:7e:ac:
8b:7d:07:08:46:55:53:26:98:a7:0c:c1:13:30:70:
c1:1d:dc:9c:18:c3:26:7d:fc:7c:35:89:89:af:86:
06:ab:dd:13:52:2a:dc:47:b7:5a:ef:6a:f5:72:9d:
5a:6a:6b:ad:9e:57:a3:b6:49:ee:1b:b5:95:9a:04:
21:6c:0c:08:45:4a:66:18:3d:94:5f:42:74:4b:16:
3a:ab:73:5a:7b:96:e4:d9:7a:a2:06:52:ad:bd:19:
9b:52:ce:4e:10:0e:86:71:93:f7:11:b9:3f:aa:9a:
58:04:6e:54:08:08:54:3b:cc:09:e8:e4:bd:67:ab:
bd:c9:33:d6:78:eb:2b:8e:b9:38:63:73:6e:6d:1a:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:53:4E:F8:6B:0E:C3:A4:AD:30:05:95:1A:0B:2D:7E:54:83:A7
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1d:d9:89:42:26:bf:c1:02:67:4e:0b:3e:1b:b3:16:22:bc:
38:ec:b1:bd:7e:86:06:88:fa:71:30:c2:ec:e0:a0:c4:03:70:
1d:e6:46:30:e2:0c:06:51:d9:9b:64:68:38:fe:10:50:1e:e9:
ef:1e:3b:db:e3:fb:f1:6c:9c:2e:6e:ba:3e:f0:07:72:77:40:
7e:ea:64:64:1e:f5:b5:c0:45:61:c6:4d:48:bc:df:90:f9:2f:
1a:8d:49:24:9c:0b:b6:fb:2e:c5:fa:5b:70:17:71:1c:af:9b:
fa:ad:d5:51:13:5f:e3:02:48:2d:46:f0:b8:83:bf:3c:0f:4d:
10:7a:10:f3:ad:d2:97:3e:c6:7d:89:6b:e9:69:e0:33:b9:88:
9a:0e:32:95:c9:5c:a7:96:46:f9:7e:d8:49:21:2c:d2:ef:5a:
09:87:01:5a:12:50:41:08:7f:a9:be:95:ba:2c:93:3f:ac:f3:
1b:67:8c:3f:0d:e4:5d:b1:78:ea:95:ee:81:c9:77:67:12:97:
87:b3:cd:67:1e:fd:18:0a:4f:83:75:cd:e6:48:cd:ad:9a:b1:
78:35:63:db:b5:0c:20:9b:8c:04:b7:00:73:2d:70:10:c9:7b:
7f:7c:af:39:1e:2f:23:db:0a:2f:9f:c4:04:05:87:fa:07:30:
00:3d:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:15 2025 by rpki-client