Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json)
Hash identifier: gupbYUtucqk4L57W5gsYYSGEeovvAqDBMZXEiGP/oa0=
Subject key identifier: 6D:83:C4:22:B3:EA:5D:1D:0E:FE:CB:4C:C6:D5:82:2B:E8:CD:7D:38
Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Certificate serial: 019894B66EFC98871F794226A4E1DA8000CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
Manifest number: 01D2
Signing time: Sun 10 Aug 2025 16:00:40 +0000
Manifest this update: Sun 10 Aug 2025 16:00:40 +0000
Manifest next update: Mon 11 Aug 2025 16:00:40 +0000
Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: eOj27F8wah9VAKQ5+/WhQCJi6mYluCpMmJgtKyUxQNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:6e:fc:98:87:1f:79:42:26:a4:e1:da:80:00:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Validity
Not Before: Aug 10 16:00:40 2025 GMT
Not After : Aug 11 16:00:40 2025 GMT
Subject: CN=6d83c422b3ea5d1d0efecb4cc6d5822be8cd7d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:6e:ab:35:3b:e7:21:84:a1:56:b3:4c:ba:
c1:17:fe:a3:33:9a:46:1e:73:78:34:74:f3:2b:d1:
05:1c:e1:c6:eb:a9:7f:cf:a4:f4:00:99:77:f5:01:
92:86:93:81:bd:ab:96:a1:0d:5d:8d:40:5d:40:ee:
31:16:44:b8:af:4a:9c:60:9e:b2:a6:47:79:ff:ad:
40:c2:86:33:aa:4d:d8:ea:bd:9a:91:36:a5:0b:d1:
c6:fa:55:75:96:f7:be:86:75:d6:c7:7d:26:b3:44:
2e:3e:76:03:1e:33:63:d4:27:6e:3b:27:f9:ee:95:
a3:6e:10:48:8c:69:a5:ef:b7:1d:58:bb:40:cc:e8:
09:8a:75:48:65:c8:61:c4:e5:a3:52:56:06:39:17:
2c:9c:5e:c5:5d:1a:ed:17:bd:51:a9:e8:f0:de:08:
3f:9b:0e:39:ce:10:15:1d:18:08:30:8b:a6:ab:59:
f9:84:9f:ad:33:c0:a6:cb:98:02:bb:09:76:34:20:
0c:2b:15:68:b1:cb:4e:e9:68:44:c6:f4:cb:c2:86:
33:bf:20:10:b3:e2:dd:d4:04:68:ce:32:b4:5f:c2:
3b:9f:bf:c6:c8:ae:a3:86:8d:48:70:29:d0:96:b3:
42:00:e0:dc:e9:eb:d0:e1:b6:d4:77:e1:11:88:5a:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:C4:22:B3:EA:5D:1D:0E:FE:CB:4C:C6:D5:82:2B:E8:CD:7D:38
X509v3 Authority Key Identifier:
keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5d:c4:4c:dc:09:bf:96:36:61:ce:70:ea:f5:20:d8:de:27:
de:62:8f:b1:7a:a6:84:06:ff:5e:19:8e:de:83:d8:e9:f1:53:
dd:66:99:07:3d:9e:6a:02:da:21:26:f2:c3:31:a6:a3:5b:b6:
d3:25:0e:e2:24:9e:14:0f:cb:d9:a4:af:0c:0a:d0:c8:5e:fd:
1e:4a:ff:f7:f9:ee:9e:dd:3f:a9:55:a1:34:50:e1:0e:35:e1:
48:c4:95:8a:2b:c9:80:c1:8c:95:ae:48:71:05:49:60:b6:30:
bd:13:a3:7c:5c:29:44:4f:a6:7e:a0:42:f2:96:33:b5:06:97:
b3:8e:2d:cd:33:99:d3:0f:ad:7f:fd:a0:da:93:7b:34:1a:ec:
fa:6f:af:4d:69:2e:e4:a7:fb:ed:5e:f4:4f:a7:c5:a5:c2:6f:
ba:63:23:68:38:c8:3b:6e:18:3f:ae:60:e0:b5:ec:4b:17:57:
c3:22:4b:14:5f:dd:16:51:dc:69:7c:b4:04:ec:b5:62:82:5b:
54:f7:78:9f:61:4d:ee:9a:f7:3a:e2:8e:6e:5e:99:e5:af:35:
10:a3:3f:48:f0:91:d3:20:68:74:ca:1a:bb:e7:75:66:53:f8:
de:f8:8d:90:cd:ab:6e:52:2a:03:eb:c4:c5:93:89:86:ec:af:
bd:fa:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:07 2025 by rpki-client