Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: zYT3r2EOLGbSueiO5+gOEzy9w3zs/8G5n1zlnVrX73o=
Subject key identifier: CD:20:4B:BE:90:0C:2E:04:53:27:9D:DB:63:FA:B4:74:FA:0C:E9:F9
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 01987AF6CC068197D4794745EF54524391F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 1534
Signing time: Tue 05 Aug 2025 16:00:51 +0000
Manifest this update: Tue 05 Aug 2025 16:00:51 +0000
Manifest next update: Wed 06 Aug 2025 16:00:51 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: rXTzeOMOn0C04nDcdBiifDuNHaal+Ckj+peRZVEElqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:cc:06:81:97:d4:79:47:45:ef:54:52:43:91:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Aug 5 16:00:51 2025 GMT
Not After : Aug 6 16:00:51 2025 GMT
Subject: CN=cd204bbe900c2e0453279ddb63fab474fa0ce9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:72:de:ea:c0:fa:fa:e3:9f:c1:24:25:d3:
d6:d7:30:c3:18:c4:0b:02:39:45:be:46:c3:fe:e2:
b8:24:66:74:0a:92:ae:49:4f:91:aa:37:d7:4b:3f:
f6:a9:5a:15:45:63:2e:e6:58:42:50:10:32:dd:87:
8b:81:c4:08:9c:d9:a3:87:18:a2:76:d6:22:bb:f0:
ab:a0:bd:66:c6:77:1c:59:28:cf:4e:bd:b7:cd:50:
6d:0b:5f:42:3a:30:bc:01:dc:93:a8:84:35:b0:e9:
d1:23:a9:94:9a:3f:83:38:c9:cb:1e:c0:14:58:ea:
39:49:a8:21:88:39:5a:4e:a4:e8:3d:fa:09:e8:ab:
17:e9:c1:85:38:35:b1:d1:2f:cb:d1:45:a6:38:66:
be:b1:44:18:bf:d4:6c:ec:1a:e0:c1:88:cc:5e:bb:
af:c3:35:bd:ff:c8:45:cb:93:c4:df:60:f4:cd:8b:
cd:99:da:90:45:77:22:b3:49:2d:3c:5c:7f:3b:90:
c8:df:c6:b7:d9:33:3d:a5:6b:75:69:ff:5d:15:f2:
5a:8c:18:77:0d:00:63:ae:9b:7d:f9:4e:f2:23:52:
e5:a5:00:09:b4:86:16:2d:5b:94:23:6e:8c:15:c7:
c9:4e:32:ca:66:c5:fd:c1:36:ca:41:48:0e:3c:5b:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:20:4B:BE:90:0C:2E:04:53:27:9D:DB:63:FA:B4:74:FA:0C:E9:F9
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d1:7b:d7:55:e1:43:ba:bc:aa:24:8d:7c:99:64:28:12:5e:
81:89:85:ed:f9:8a:17:1b:e9:cd:c4:69:f7:60:b9:e8:b8:0e:
1b:e7:43:85:2f:fc:d2:ef:d9:2d:29:a5:e9:04:c2:77:ab:a3:
78:6e:d0:16:09:32:11:d9:60:71:9e:c2:1d:a2:9c:05:76:c3:
21:f7:e3:75:f3:19:6e:95:66:2b:cf:77:b3:20:20:b1:5c:0c:
f8:2d:2d:94:57:c9:b1:b1:c7:c2:c4:ca:6e:22:eb:9f:66:6e:
28:6b:99:77:7e:c4:fa:f2:b9:ab:25:79:64:82:2b:0e:23:67:
63:11:7f:b0:a2:57:c0:31:10:69:49:bc:70:9b:19:33:d5:c5:
44:95:1e:f9:c3:4b:77:89:0b:9e:c1:98:fb:06:d9:1b:b7:1a:
67:e8:ed:90:f6:52:2c:57:10:66:84:6a:67:8b:e0:9b:7a:ab:
d0:14:e9:58:f7:6f:e6:d4:43:85:5e:c1:e6:1a:3d:d5:0f:61:
06:6a:a6:6a:ad:2d:ad:2f:90:af:bd:80:85:2e:fd:6b:dc:5d:
e8:f1:53:e8:a4:1d:5c:b6:26:c8:b4:31:15:7e:bd:d6:20:e8:
8c:ce:d8:80:32:f8:c2:ca:df:98:27:85:e2:13:76:ce:4c:95:
f4:ca:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:53:51 2025 by rpki-client