Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: EpwLIloyg6XbFsPgW3EyW/Wk7qfTqoHQoKgN85/mLd8=
Subject key identifier: 33:CF:D9:24:A1:BA:78:D6:A1:53:CB:4D:8B:D4:B5:F3:22:8F:34:C2
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 01987562E19BA89C451E6F6FEEAF8854B268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 0EC9
Signing time: Mon 04 Aug 2025 14:01:11 +0000
Manifest this update: Mon 04 Aug 2025 14:01:11 +0000
Manifest next update: Tue 05 Aug 2025 14:01:11 +0000
Files and hashes: 1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: ZA7pShwry/Rv1YHn4RRPEweg1MfpwybuNZnbwtNAv08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:e1:9b:a8:9c:45:1e:6f:6f:ee:af:88:54:b2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Aug 4 14:01:11 2025 GMT
Not After : Aug 5 14:01:11 2025 GMT
Subject: CN=33cfd924a1ba78d6a153cb4d8bd4b5f3228f34c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:58:de:6d:ff:09:73:fd:85:22:ec:15:67:
2c:03:d7:e0:a7:8d:cf:32:2c:0b:14:18:9f:23:74:
74:8f:4f:96:a3:65:ef:64:1f:dc:30:67:5c:eb:3a:
17:02:2e:fe:d5:67:a4:64:d6:46:ff:f2:68:a2:56:
c7:ca:ea:d5:3f:02:7e:a5:de:86:d5:15:ab:09:87:
85:7c:1a:4e:3d:93:33:70:53:ff:ed:d5:3f:02:18:
57:ec:43:5b:41:ce:f8:08:5b:6b:33:9c:a4:4f:7d:
4c:ef:64:ea:00:a9:aa:71:26:e2:25:40:d5:81:3a:
16:d1:64:6f:01:0f:ff:a3:98:19:c1:72:22:64:08:
87:4d:65:9f:4c:a8:f4:9e:dc:53:0a:57:70:31:dd:
77:0b:c0:3e:00:9c:1f:d8:24:3e:b4:79:3c:31:aa:
3d:bc:d0:7c:d5:c7:57:00:32:f8:17:78:3c:9f:70:
c5:26:a1:0c:b5:cd:34:2f:85:32:79:58:ad:74:17:
c8:35:37:84:cf:91:12:e3:e1:4a:31:05:6e:fe:33:
a1:05:f9:b0:91:f5:1a:e9:28:dc:50:60:d2:6c:59:
d2:3c:68:56:c3:8e:5c:e1:db:78:86:0b:18:10:c6:
68:6c:ba:3d:eb:08:8d:74:ff:bb:d9:cf:b3:a5:c2:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:D9:24:A1:BA:78:D6:A1:53:CB:4D:8B:D4:B5:F3:22:8F:34:C2
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:54:57:dd:57:5c:1d:a2:78:21:4c:18:47:cc:32:7b:9d:0c:
3a:14:36:97:f6:d3:79:ce:5b:5d:e1:5d:7c:35:59:93:fe:0a:
c7:bb:48:f3:d3:08:8a:2b:e6:7e:8f:29:ba:cd:e1:44:98:05:
67:c7:b6:cc:09:d1:14:ea:c8:c5:ad:ed:74:2d:f0:7e:28:7c:
8d:d5:e5:69:d3:a4:1a:98:19:7b:ad:7d:26:68:40:29:93:f3:
ca:bf:d6:83:33:da:42:c5:24:c6:10:7f:9e:d1:97:cb:55:ce:
59:1f:9d:ed:af:17:ba:5e:72:6e:6b:fc:c9:22:ca:a8:60:ed:
63:e7:00:84:90:12:cd:ff:67:a7:db:33:f8:23:39:37:6d:8e:
b7:d7:46:fd:9a:bc:90:75:7f:5a:d1:0c:a2:55:93:75:d6:a8:
24:3f:ec:11:dd:6f:04:bf:f9:fe:26:39:b5:1b:1c:c6:71:ce:
0b:49:2e:b9:2c:f6:22:af:23:3f:0f:be:0d:5d:f9:d4:a0:7e:
33:bd:74:75:ea:d5:e8:d1:b6:91:cd:61:19:1a:ae:68:67:44:
3b:41:50:b9:2b:e7:16:80:d3:ac:a2:83:c2:ff:cd:90:b2:ee:
6a:83:7e:94:5a:7d:aa:ed:08:31:15:90:32:30:68:4a:4f:3d:
af:76:77:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:53 2025 by rpki-client