Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
File: zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json)
Hash identifier: YWXcXR8lc+aj1tcA3VvupH6ix/Yl+RLRktOgY6S1XWI=
Subject key identifier: 14:BA:63:32:D6:B1:49:34:9D:AD:5C:80:42:8A:C1:25:6C:E9:66:06
Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
Certificate issuer: /CN=cc4500091efcd905e72ea45f278248661f225b2f
Certificate serial: 01989825BFA291D7A8E45531910D91B4A2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
Manifest number: DE
Signing time: Mon 11 Aug 2025 08:01:07 +0000
Manifest this update: Mon 11 Aug 2025 08:01:07 +0000
Manifest next update: Tue 12 Aug 2025 08:01:07 +0000
Files and hashes: 1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: 7Ex4HiA2BNv3NX6CxAKR7DIPxbXByR7ucbp9wh5b3/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:bf:a2:91:d7:a8:e4:55:31:91:0d:91:b4:a2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f
Validity
Not Before: Aug 11 08:01:07 2025 GMT
Not After : Aug 12 08:01:07 2025 GMT
Subject: CN=14ba6332d6b149349dad5c80428ac1256ce96606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:1f:79:20:b4:10:f1:2a:16:06:68:4d:84:
ba:ac:49:93:58:b2:27:f2:57:b8:24:26:13:42:07:
06:a8:18:71:87:45:06:0b:75:4d:07:90:19:0c:69:
6b:15:89:30:31:6a:e1:71:60:47:27:27:55:4e:6c:
ea:5f:0d:92:0b:43:a8:23:88:19:22:d4:0d:61:e1:
9b:af:b0:b3:13:62:ae:83:d5:a9:97:7d:b7:f7:56:
b6:47:37:3c:9c:07:76:7d:2a:ce:32:82:99:f7:36:
09:d4:45:cb:6c:e1:5f:b7:dc:58:41:a4:89:0b:59:
8a:ef:90:c0:ef:af:22:0f:bb:79:96:85:ad:7c:5d:
69:bf:da:55:0d:f4:d5:55:03:7b:32:ca:26:6d:f2:
a8:dc:d4:41:f7:4b:73:d7:26:60:d5:3c:14:99:99:
85:8a:54:f2:30:50:76:75:92:94:56:17:ba:cb:1d:
ce:a5:9e:2a:9c:ce:0c:d8:5d:6e:24:73:45:63:1d:
82:d0:bb:7b:ce:60:f6:38:8e:7f:4b:f2:5a:5d:99:
e8:13:eb:00:48:cc:30:e5:88:00:8b:f4:ff:87:3b:
75:b1:51:27:a6:87:0a:f0:42:69:f1:66:45:ca:08:
ef:27:ea:64:5a:66:cd:23:b7:1a:0d:63:61:01:ee:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:63:32:D6:B1:49:34:9D:AD:5C:80:42:8A:C1:25:6C:E9:66:06
X509v3 Authority Key Identifier:
keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b0:1b:01:4e:da:db:19:c7:00:45:d8:07:17:5a:ba:f7:1a:
6d:ff:e2:fc:ce:91:60:c1:a4:b2:4b:16:be:7d:d4:09:c4:e0:
c1:12:3e:b5:83:4c:fa:25:3b:79:f8:2d:75:2d:bd:07:f3:fe:
26:ab:50:7f:7e:60:c9:ef:dc:a5:42:dd:be:1c:7b:0f:73:e5:
2f:4d:3e:62:d8:7e:84:46:f6:61:8b:9a:48:a6:40:79:a7:f3:
38:c7:13:5b:ba:c5:ee:85:ac:ae:c9:9a:ba:07:c1:26:f8:a4:
ed:10:81:3b:99:b9:49:f3:45:3b:9d:9d:76:ae:3f:d5:3a:d3:
61:97:73:d5:9d:2b:e9:f4:78:21:1f:ad:4f:57:e9:49:f7:3c:
6d:1b:5d:4c:a5:c4:6a:39:4a:21:4b:b1:f9:c8:a5:12:55:e2:
c8:81:a6:d3:7a:50:68:8b:f0:5c:5a:52:4f:99:a1:fe:61:37:
b5:60:f9:91:b0:43:6b:15:44:e0:37:ce:35:5f:30:e7:3b:a8:
54:d4:f5:59:63:be:f2:b2:5d:66:7c:04:e4:02:41:21:3b:35:
d8:c7:85:3c:f5:1d:fe:5b:a7:c7:3c:b4:9a:78:04:a2:39:1e:
10:34:e3:03:ff:55:1b:1b:c1:b6:26:81:01:5b:9f:d9:5e:43:
ab:03:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:35 2025 by rpki-client