Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File: mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier: vWVnljKPdkvfPFAxPGflhydLBtVb1gpF5mpVkXlML7o=
Subject key identifier: 84:9A:4C:0F:1E:4D:44:F6:6B:DC:0D:EB:1A:B2:8B:28:B6:6D:4D:91
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer: /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial: 0198933613C78B0582360FF24677C545EE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 09:00:51 +0000
Manifest this update: Sun 10 Aug 2025 09:00:51 +0000
Manifest next update: Mon 11 Aug 2025 09:00:51 +0000
Files and hashes: 1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: LmTZKzuRlFGPqCC8geTpatMW3Y5wPt4Fxa/y/Boaps8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:13:c7:8b:05:82:36:0f:f2:46:77:c5:45:ee:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Validity
Not Before: Aug 10 09:00:51 2025 GMT
Not After : Aug 11 09:00:51 2025 GMT
Subject: CN=849a4c0f1e4d44f66bdc0deb1ab28b28b66d4d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:15:fd:44:ac:d0:43:14:2c:b6:b8:6b:78:
74:c9:72:39:d3:ab:e2:11:cf:8d:8d:b5:93:b6:b5:
55:4d:12:08:87:dc:2c:05:e6:47:31:7c:16:34:f8:
9b:03:94:7c:e3:dc:aa:e9:ea:c7:5d:f4:bc:53:d0:
05:d6:56:b9:63:f9:50:a2:66:98:9b:ae:32:07:79:
52:b3:fb:7a:52:bf:d6:65:95:c4:7e:74:be:68:00:
18:b5:87:53:56:2d:3d:00:70:65:2f:4e:1c:66:32:
6c:9c:26:ca:a3:e9:99:b2:6d:8f:34:c6:7a:85:69:
6c:3e:2a:05:66:82:fb:d2:bb:67:5f:76:4f:6a:45:
4c:62:09:41:55:70:b1:12:92:05:15:20:d9:a4:01:
c4:3c:b8:e3:de:e9:a1:32:c6:6e:d6:f2:75:db:74:
27:64:3a:e6:6d:6e:14:4e:27:9e:db:4c:a5:70:b3:
b4:ce:49:06:f4:95:33:ec:57:f0:db:a5:20:11:3f:
e9:87:69:fc:41:3a:39:07:99:69:6d:59:7e:de:68:
42:bf:2f:18:2c:0f:3a:73:2b:96:79:0e:c1:a2:dd:
30:f6:9d:31:c7:ae:de:5b:47:99:0a:fa:e6:75:6c:
6c:e4:7b:1d:53:d0:79:6c:6c:34:46:a8:27:b2:98:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:4C:0F:1E:4D:44:F6:6B:DC:0D:EB:1A:B2:8B:28:B6:6D:4D:91
X509v3 Authority Key Identifier:
keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9b:35:43:2d:f4:d5:20:8c:76:d5:cf:e8:ed:a0:f4:ed:50:
85:5c:45:f3:9a:98:08:01:37:c9:85:5f:25:69:e7:33:f2:be:
69:56:5b:ab:e2:da:d3:f2:5d:c6:0b:6d:b3:46:01:4c:96:5e:
94:e5:e8:6f:5c:0e:4e:32:ce:08:78:9f:70:9c:83:05:53:30:
13:59:1e:97:6b:23:31:87:28:f3:cd:d1:85:5c:25:28:fb:e9:
26:1f:cc:86:65:61:e5:b6:b1:81:f3:4b:01:ba:96:6a:1d:1b:
73:80:02:b6:78:88:3f:a1:c2:02:8d:e7:42:d0:66:7d:03:17:
1c:f6:4d:43:df:78:b5:a4:45:25:df:f9:b5:20:ba:25:91:bc:
85:14:a8:02:b2:e4:26:a4:1c:dc:f3:da:47:b3:43:e0:ae:9f:
95:52:5a:3e:f3:9b:08:ce:05:12:5c:c8:aa:45:87:d1:17:db:
e4:7c:8d:02:93:d3:e5:9e:c7:60:99:c4:23:fb:f8:58:d6:54:
40:68:70:fb:94:a5:2e:3e:2a:9d:e3:b3:1c:26:68:bd:b4:62:
1c:df:15:57:73:ea:c5:a8:d4:f2:3e:41:11:dd:18:a0:61:2e:
28:7c:8d:b0:0b:c1:97:d5:35:52:ba:33:c9:8e:ae:70:d0:5c:
0b:84:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:05 2025 by rpki-client