
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: p0Mz7T/FPkgMsNjOiYSgxwr7JfRQtaJfYY+6ISvz8dM=
Subject key identifier: 7D:EF:63:DC:7E:4B:6D:DF:60:79:E4:BF:EC:11:39:46:61:2E:24:F1
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 01987ED39D69D1B19EE6C93A138D3B9E096A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 1049
Signing time: Wed 06 Aug 2025 10:00:54 +0000
Manifest this update: Wed 06 Aug 2025 10:00:54 +0000
Manifest next update: Thu 07 Aug 2025 10:00:54 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: wsrKmoxbuB/IOcCbeAuG5oWhxKZrM7qc08erzqQTvkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:9d:69:d1:b1:9e:e6:c9:3a:13:8d:3b:9e:09:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Aug 6 10:00:54 2025 GMT
Not After : Aug 7 10:00:54 2025 GMT
Subject: CN=7def63dc7e4b6ddf6079e4bfec113946612e24f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:58:51:79:b1:8c:4e:d7:c1:bf:26:0d:6e:
3e:a1:57:27:9d:9e:7a:6a:3f:69:89:c2:ae:94:8f:
32:52:df:40:62:70:e6:1c:24:98:20:14:92:67:25:
7a:cc:86:02:f4:9e:5b:ae:da:7f:64:15:31:d9:08:
f9:4a:78:f7:07:97:22:3f:65:da:95:94:0e:35:db:
84:db:79:e1:4c:d2:17:f5:f7:f7:e9:d1:25:0b:55:
69:2d:c9:ed:a7:0b:f5:b1:be:bb:84:c4:db:11:7a:
c8:9e:b5:d7:7a:19:f4:86:32:b3:c6:da:5d:9b:6a:
73:e6:e4:a5:05:78:3f:ff:d8:07:c2:da:ea:8c:35:
f2:48:7c:d9:77:e2:bd:f6:f6:ae:ae:c5:cf:ad:04:
17:cb:d8:7a:55:ae:52:52:c7:35:a1:25:d7:6b:e5:
5a:70:f7:6c:e2:2e:49:3a:dd:6b:3c:a4:a7:35:18:
69:ef:b0:85:24:f1:24:3d:d5:44:86:74:1c:b6:33:
88:9c:57:08:99:d0:31:f0:d7:52:67:60:8c:79:32:
b1:d5:b0:f5:81:d3:6e:cb:b0:91:70:79:4e:4d:27:
2e:3d:ab:5d:08:63:90:b0:bb:de:f5:c2:88:fe:fa:
0b:d6:30:f7:b5:c7:6c:ce:6f:80:b4:6c:a1:cc:6f:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EF:63:DC:7E:4B:6D:DF:60:79:E4:BF:EC:11:39:46:61:2E:24:F1
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5e:5f:91:60:0d:ef:e7:94:24:23:bc:d6:87:2b:06:1d:90:
b8:38:b1:0e:cd:a4:5a:7b:6f:e4:42:67:a9:2d:04:c0:d7:f8:
43:91:96:0f:fe:c3:33:19:08:8d:93:97:de:0f:81:b5:b2:38:
e8:b7:c4:44:c7:17:b2:66:e8:42:e7:91:18:80:49:1c:9f:ab:
2c:3e:36:86:ab:a4:bb:aa:d9:e3:75:7b:32:94:bb:41:c8:7b:
42:57:d5:2e:a7:13:ec:55:ee:61:1e:13:15:40:57:02:03:24:
64:cc:2e:c1:87:d2:7a:8e:f8:3b:41:13:28:64:48:3d:03:ae:
0f:ea:d4:21:04:06:bc:7f:4d:b2:71:1e:fb:68:3b:9f:66:17:
a3:32:7f:35:c3:26:5b:0d:4d:25:98:45:d2:48:bf:34:13:ae:
41:bf:d2:39:a1:a5:1b:58:ff:9b:be:4b:9e:4b:4d:72:52:7d:
e0:40:74:a2:74:d9:96:bb:44:66:35:06:39:fa:36:b5:3e:4c:
1d:b1:a1:df:c5:7b:bc:a8:1c:3e:f7:44:8d:e9:1b:ff:2f:30:
26:34:31:5a:44:90:0f:05:54:f7:06:e3:3a:91:86:0e:2b:5f:
b5:ba:c3:a0:71:a2:83:7d:1e:6d:8b:20:91:f3:83:27:1a:d3:
fc:77:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:42:12 2025 by rpki-client