Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: cYAG9gefNM8TmapC6OuOTl3pEtNGUepvQSaJL1nY8II=
Subject key identifier: B3:22:65:E5:65:A0:1D:11:23:3C:D5:74:E6:3A:0B:76:90:E9:51:19
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 019872CFD889506CF358EA1FA18A0570A46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 02:01:20 +0000
Manifest this update: Mon 04 Aug 2025 02:01:20 +0000
Manifest next update: Tue 05 Aug 2025 02:01:20 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: cXSzZVpUUASl7FJBseASrvbMkfSDC9LFluACpYEdWWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:d8:89:50:6c:f3:58:ea:1f:a1:8a:05:70:a4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Aug 4 02:01:20 2025 GMT
Not After : Aug 5 02:01:20 2025 GMT
Subject: CN=b32265e565a01d11233cd574e63a0b7690e95119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:1d:ed:c4:32:3b:79:a9:d2:f6:fa:6e:2d:
ed:2b:eb:47:d5:52:01:80:80:0d:5f:76:bc:73:64:
fe:07:e0:92:12:79:79:94:9a:8b:3c:ce:85:22:9b:
ff:ff:f5:4d:51:bf:b2:6e:d7:23:16:f8:ac:b3:8a:
9c:95:60:16:ce:62:3e:03:4e:27:d8:8b:72:38:4e:
bc:c8:84:b0:5d:ff:4c:9a:7a:02:55:8a:ea:be:3b:
71:87:00:ec:7d:ee:5e:35:09:b2:32:21:b8:ca:22:
63:92:28:a9:df:35:6e:43:5f:dd:68:ac:2b:40:68:
44:c3:64:3b:a9:ee:18:8a:f1:ec:77:c4:56:f8:1b:
b9:81:d0:83:56:bf:c3:c3:07:ed:c1:6f:67:35:da:
45:bc:0c:c3:44:e9:91:ac:2d:85:50:15:ea:5c:dc:
c4:61:91:94:e1:b1:cc:cb:37:cf:44:bf:1d:97:19:
97:c2:ed:4a:13:86:da:b6:e7:fa:d9:2e:99:b5:2d:
aa:17:aa:f2:5d:a9:31:14:83:96:d9:79:40:4d:be:
8b:d6:1e:69:b8:04:b6:1c:2d:73:9b:e1:54:a6:f4:
48:23:71:c2:92:bb:16:f6:f3:f1:c2:75:38:2d:55:
ca:34:92:ec:44:9c:ed:6e:f2:c2:26:77:2c:94:8a:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:65:E5:65:A0:1D:11:23:3C:D5:74:E6:3A:0B:76:90:E9:51:19
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:ef:20:7b:39:68:ab:af:97:00:19:93:e6:ca:7b:2d:a5:
ee:cb:c4:9e:da:4f:44:3e:8b:71:5a:21:dd:ae:21:df:cf:68:
d6:d7:19:43:d6:1e:ee:10:2b:29:60:56:e4:cd:fe:ea:3c:d1:
91:7c:cf:73:4a:f3:1a:94:5e:b6:fd:c8:9b:5f:88:99:55:e5:
3b:f0:b1:2f:95:2c:88:ab:d8:c0:0b:68:62:80:a6:ef:2a:5a:
60:e6:30:2b:61:cd:24:7f:f8:9c:60:55:c9:69:31:ca:a7:a1:
63:11:2f:68:6f:30:c7:60:43:ff:55:cb:c6:a2:1e:cb:07:81:
ce:5b:a0:e5:13:aa:a5:a6:29:bb:fb:d6:f2:54:ed:a3:8c:39:
19:53:9f:3e:de:58:c1:68:5f:95:0a:a2:27:9e:db:fd:f6:e2:
1e:81:b8:7c:7a:67:1d:58:27:fc:3b:9b:21:3e:27:58:66:ee:
6a:e2:ac:ea:b2:bf:df:4c:a7:2d:d5:be:3e:a6:b9:1c:e5:49:
f5:1d:2b:34:94:ff:aa:66:8d:2b:38:ab:3a:57:00:c0:bc:bf:
1b:94:fd:26:a2:95:2d:ff:b6:de:b7:d1:1e:fc:05:92:5b:f6:
c8:db:7a:8b:b8:93:12:82:62:31:77:de:8b:ce:c4:af:66:bf:
8a:3c:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:20 2025 by rpki-client