Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: eF6Rmq+AV/EXD67qcvyC8E6Ff9iIQfag/RL7E/taVUQ=
Subject key identifier: 37:5D:3E:2D:5B:87:C9:73:9D:08:03:49:E2:44:DC:A1:1E:0E:D9:23
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 019893A40D9ABE6BCB99F316D5A5D58B6571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 09A6
Signing time: Sun 10 Aug 2025 11:00:58 +0000
Manifest this update: Sun 10 Aug 2025 11:00:58 +0000
Manifest next update: Mon 11 Aug 2025 11:00:58 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: TTLdH3NnuQ0eToDlQF9HrCBI1J13atZa4g6csqpyVA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:0d:9a:be:6b:cb:99:f3:16:d5:a5:d5:8b:65:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Aug 10 11:00:58 2025 GMT
Not After : Aug 11 11:00:58 2025 GMT
Subject: CN=375d3e2d5b87c9739d080349e244dca11e0ed923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:68:3a:da:8c:07:e6:46:c5:3b:ed:73:82:
f7:73:2f:11:b3:15:e9:21:4b:e2:7b:f5:9d:73:cb:
f0:b9:e8:e3:18:ab:32:24:fd:f3:5b:c4:55:44:3b:
92:a3:6d:ec:66:b7:08:63:9f:c4:a4:98:77:c1:58:
d4:34:88:37:e4:21:57:93:c5:c9:9e:39:0f:41:fc:
91:88:fe:2b:31:d9:c0:7a:6b:36:2d:9b:47:d0:d3:
fd:e7:42:c2:e4:3c:32:dd:8e:6c:7f:8b:d6:0a:a3:
2f:09:a6:59:cc:cc:ea:87:d2:8e:86:35:05:25:60:
ae:0c:1f:8c:8c:7d:d0:b7:3d:f8:cc:29:1f:55:b9:
ef:9f:43:e2:fc:29:57:f3:04:36:ce:56:87:bb:ea:
79:3d:79:21:62:1a:b9:9f:6e:dc:cd:5f:c2:26:b8:
d0:0e:70:9d:c0:a6:6d:f1:d2:a1:d1:db:66:03:92:
9a:d3:c2:fa:1d:1e:02:cf:8c:80:1a:ce:2f:96:cd:
58:68:f9:bc:c0:8b:2e:60:95:7e:a2:5f:ce:53:70:
94:30:85:42:06:9f:ef:84:ef:07:72:55:64:b3:1e:
42:5b:16:fe:d5:c2:28:8b:33:f1:b0:65:5f:bf:ed:
cb:80:fb:5e:6e:c7:e6:6e:d6:ce:4f:e1:6c:89:7a:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:3E:2D:5B:87:C9:73:9D:08:03:49:E2:44:DC:A1:1E:0E:D9:23
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c5:bf:9a:74:20:80:ee:8a:44:47:31:e6:97:01:b5:71:66:
92:fc:1c:20:19:ac:cf:a4:c0:fd:4d:ff:87:97:7b:7f:e9:72:
4d:af:39:51:90:cb:82:00:5f:1c:9c:73:b0:e2:d2:3c:71:12:
d9:58:dd:84:f8:4d:df:2d:aa:30:b4:ca:58:ae:31:be:c0:9b:
4f:2c:3e:41:fd:63:86:ce:ca:7d:4c:49:37:97:ae:31:10:6a:
3b:0b:d6:d3:a4:b1:5f:c2:55:be:aa:a2:ff:63:cf:46:95:ce:
5e:b2:b8:41:1c:0b:4d:3c:c3:39:50:60:41:1b:db:3b:0a:e4:
ce:7a:4c:27:c7:43:ae:2a:3d:59:43:ef:cf:c8:6c:cf:c4:e3:
99:7b:fe:df:52:50:c6:e4:92:90:0f:b5:f1:03:58:27:a3:bc:
49:6d:c7:54:ce:14:8a:83:64:8d:a5:55:eb:34:c6:71:44:da:
42:9a:4e:9d:4a:6e:10:8f:cb:1f:9c:41:79:eb:c7:ee:6d:79:
87:4f:10:ee:a2:ea:58:43:54:28:c2:a2:07:56:bf:01:ae:25:
95:fd:57:59:22:ef:3e:66:5a:c4:24:f7:6f:9d:55:9b:5e:a8:
a1:a7:c3:d5:63:64:73:fa:a2:e3:66:16:26:a2:4f:c6:88:e0:
ea:ef:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:11:08 2025 by rpki-client