Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier: PzKhNFsFcIp6eTTg3lX3jhzMqgTOx6LwH+Qas44GU8s=
Subject key identifier: F2:57:19:27:93:29:10:75:FF:01:1F:4D:D1:31:39:BB:89:AB:C3:F5
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial: 0198960004937B4FC072D364FF35B808FB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 22:00:40 +0000
Manifest this update: Sun 10 Aug 2025 22:00:40 +0000
Manifest next update: Mon 11 Aug 2025 22:00:40 +0000
Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: SIh95VZPrSTatycNS3GSceZlnVN5jU1qRlP+Jfhy0bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:04:93:7b:4f:c0:72:d3:64:ff:35:b8:08:fb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Validity
Not Before: Aug 10 22:00:40 2025 GMT
Not After : Aug 11 22:00:40 2025 GMT
Subject: CN=f257192793291075ff011f4dd13139bb89abc3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:0e:3a:85:37:22:94:3f:00:42:3a:90:14:
c2:8b:89:9e:84:0a:5a:d3:6e:bf:07:47:e7:ba:cc:
8c:7e:dc:60:5f:eb:44:d5:4d:72:b4:0e:0a:78:a0:
6a:bc:9a:3b:cb:37:42:97:e3:3e:3c:54:96:0c:37:
d8:e8:52:88:37:df:0e:a5:29:92:3f:ee:7d:5f:eb:
96:42:72:ee:e3:e8:62:c9:b2:8a:da:55:0d:a2:65:
d1:8c:83:2b:f9:be:02:33:7c:cd:07:b6:1e:b2:0c:
70:8e:56:49:33:b1:31:8a:4f:8a:d3:73:61:8a:49:
42:4f:95:47:a1:13:66:9b:05:61:70:f2:31:d4:d7:
f0:c0:a5:ce:f1:0c:ae:b3:bf:0f:a3:4a:65:05:85:
96:34:62:2f:42:9a:f3:26:90:a6:29:1f:e0:24:57:
a6:ff:4d:57:0b:36:9f:61:70:e0:18:5c:ef:7f:68:
a7:90:24:5b:05:73:99:20:ac:a5:1d:d6:a3:2f:38:
c5:d2:91:6f:25:b4:de:94:9b:a1:4e:08:dd:16:53:
d3:e2:89:59:19:f5:33:1d:0a:28:45:c4:5d:5a:af:
e4:6a:d9:ea:e5:d3:cc:6c:53:ee:c7:a2:0d:0e:8d:
d1:04:7f:f8:22:fb:f2:9e:ea:10:8a:e3:ea:95:a2:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:19:27:93:29:10:75:FF:01:1F:4D:D1:31:39:BB:89:AB:C3:F5
X509v3 Authority Key Identifier:
keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:cb:aa:af:e4:48:c8:8d:6f:4d:e6:bd:a2:08:3b:b4:2a:94:
4e:90:28:fc:69:a4:6e:9a:61:1b:10:eb:ba:88:aa:b4:96:c5:
39:3a:c7:22:b8:0d:3e:e9:08:ad:1f:40:c0:37:9d:ee:e2:c3:
f5:22:c9:c3:55:3d:95:26:92:f7:3c:ff:87:2e:23:7e:51:2c:
09:d8:15:6f:20:74:22:e9:1f:83:35:fb:12:72:fc:1a:af:c9:
2c:d4:91:03:a2:a5:62:9a:35:7b:1e:41:91:8a:f6:32:f3:6d:
ab:10:34:8d:ac:98:61:ea:4c:3e:29:b7:b2:56:3c:9f:af:ca:
5e:b0:96:8e:dd:72:fd:1a:da:5e:2f:f0:0b:b5:ee:6e:30:29:
fd:8d:30:5a:e4:6c:3a:ee:97:a8:00:27:e3:72:1b:da:a0:e5:
89:99:67:d6:8a:bb:5d:fb:57:be:43:65:6c:d8:e8:e4:21:ff:
f9:76:2e:31:45:95:8e:27:6a:e4:9e:a3:33:b0:0c:4a:77:13:
0c:f0:a3:ef:84:11:ce:c4:50:e8:50:49:7c:5b:73:6f:fe:c6:
3e:af:99:4a:d5:f4:d3:bc:07:0e:ff:59:21:83:87:e3:8f:c8:
0c:d6:49:7b:f0:a2:28:77:57:b5:68:78:84:a0:f0:ce:e3:82:
c8:54:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:36 2025 by rpki-client