Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: wbZpK0axf9hj9DAFiQl4hBn5KRZqgaNfPJajTHYeOSI=
Subject key identifier: 72:45:78:3F:62:DB:2E:62:3F:15:4C:76:AC:70:4C:AD:9E:F8:C1:E6
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 01988C587B1A656A4B815D5A2B6776C59009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 0540
Signing time: Sat 09 Aug 2025 01:01:05 +0000
Manifest this update: Sat 09 Aug 2025 01:01:05 +0000
Manifest next update: Sun 10 Aug 2025 01:01:05 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: ICiD8n5g+HMPNRrvQT3wpKqF+g8/WUilbQFTomTRbps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:7b:1a:65:6a:4b:81:5d:5a:2b:67:76:c5:90:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: Aug 9 01:01:05 2025 GMT
Not After : Aug 10 01:01:05 2025 GMT
Subject: CN=7245783f62db2e623f154c76ac704cad9ef8c1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:a1:de:4b:5e:e4:48:d2:ca:7e:49:36:39:
51:d7:1f:65:54:0c:09:05:4c:e4:1d:9f:e7:49:07:
97:86:33:d1:7f:35:11:8a:a2:7d:d6:44:01:8c:98:
9a:ae:a8:18:90:55:84:db:eb:66:84:b3:fc:d2:8c:
73:18:de:88:45:72:fe:3b:f3:4f:3c:20:a5:d2:57:
3e:5e:ea:d7:8a:4a:f3:fb:09:32:bb:65:9e:03:99:
1a:1b:40:1c:a0:0d:00:00:56:3b:3a:8e:08:a6:a5:
db:ea:4a:e0:2f:19:e6:2b:f8:c4:94:14:3a:1d:da:
3a:c5:53:8f:5c:8a:c2:2a:b0:db:86:3a:9f:a2:cd:
2c:c2:1e:04:35:c9:2a:3d:bd:e8:e0:9b:da:f8:9a:
89:07:bb:55:54:32:42:e2:0c:17:be:1e:b1:f8:8b:
04:64:10:ed:ef:8d:45:88:4f:8e:09:ad:62:c8:42:
ac:50:c2:2e:37:3b:81:c1:c2:0a:f1:89:32:4a:bd:
cd:5d:3e:81:ec:c5:da:a3:f9:bc:d8:7c:28:d0:4a:
90:6c:e6:af:7e:93:de:3e:8e:5f:dc:81:93:c0:06:
b8:95:f7:0d:3e:01:b9:93:ef:95:fc:b1:fc:5f:12:
1e:16:26:97:7d:a1:83:e8:2c:10:bd:05:6d:88:0e:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:45:78:3F:62:DB:2E:62:3F:15:4C:76:AC:70:4C:AD:9E:F8:C1:E6
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:13:c3:85:ac:e6:6d:af:28:a5:60:97:ca:f6:1a:34:4b:39:
c8:1f:7b:a9:51:0b:ff:c0:6f:b3:72:0a:07:60:8d:0e:a3:3a:
f1:67:37:a9:53:6f:96:11:df:6c:87:e4:ac:a3:5a:9a:a9:05:
5b:a1:b2:ba:42:8d:51:32:26:08:85:25:1c:f2:e0:ee:11:ee:
0f:cd:d3:2a:de:cf:19:ed:9f:d2:1c:6a:24:99:56:1b:9e:34:
bc:87:33:ea:48:4e:15:cf:01:24:16:31:6c:26:d1:46:85:92:
2f:ca:f6:36:aa:22:76:dc:89:12:9d:a6:be:f0:3c:27:d3:13:
62:f9:c3:a9:66:e1:e1:3f:0b:b2:9d:1a:c8:30:72:b7:e9:86:
41:dc:01:38:d8:ea:84:6c:c4:41:76:16:55:8a:82:68:6c:95:
60:88:96:1e:0d:c3:72:63:64:dd:37:f9:f1:c1:4d:a4:7f:50:
66:b9:94:2f:63:0b:2a:be:b2:48:ba:2a:01:22:e9:9b:86:2d:
9e:60:17:7c:7d:6f:f1:85:45:d1:f1:61:33:be:1a:5a:cf:66:
86:c1:0d:47:a6:f3:02:34:11:aa:fb:64:cd:5a:3b:56:e6:a1:
c1:31:9c:21:32:9d:21:9a:2e:6a:5e:97:35:31:4b:3a:85:04:
bc:ad:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:33 2025 by rpki-client