Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: aaw2y74S8gfW+v0A1aecsA0RfaI8dwc+VSDzSDujc2Y=
Subject key identifier: BD:55:5E:DF:27:EE:03:CA:21:9F:48:4B:ED:74:8B:6B:0D:4F:B8:55
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019873E2C2E0082186F7B0556109DA89CFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:01:37 +0000
Manifest this update: Mon 04 Aug 2025 07:01:37 +0000
Manifest next update: Tue 05 Aug 2025 07:01:37 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: UV1YUN9d9aJRI/fbifPaOjD+AEO3wbORr5x1A0OzztQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:c2:e0:08:21:86:f7:b0:55:61:09:da:89:cf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Aug 4 07:01:37 2025 GMT
Not After : Aug 5 07:01:37 2025 GMT
Subject: CN=bd555edf27ee03ca219f484bed748b6b0d4fb855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:cc:68:60:e1:c1:19:5d:ee:72:74:a4:f4:
64:af:b4:17:b7:56:52:52:bb:f0:2f:64:5f:4d:91:
ea:ca:a1:49:e1:42:cd:9b:9e:69:d2:87:11:b7:ff:
31:46:3a:88:04:69:04:97:cd:99:71:76:88:df:fa:
51:44:72:d3:b4:11:80:1d:cd:5f:a4:bc:ab:e1:45:
bc:aa:fc:54:ed:39:02:02:55:2e:09:0d:d2:9e:0b:
ef:f7:7f:3e:da:38:6a:71:b0:73:aa:45:42:46:3f:
b9:2d:35:0c:bd:fc:76:a2:9e:8d:98:b0:89:6e:53:
0d:c4:99:08:49:30:2c:b7:54:d8:a8:53:3d:c1:51:
70:7f:49:fa:19:a6:3b:08:1b:19:fa:08:a1:6d:86:
d6:e9:b8:be:9d:bb:94:d5:db:18:b5:56:36:c3:e5:
5d:4b:a9:1e:3f:f4:da:fd:99:b4:e6:1e:7a:be:e4:
6a:c2:c0:ae:1f:c5:43:df:ad:68:b1:16:d0:57:a7:
28:6d:2f:52:3b:f4:f3:1c:f4:d5:1a:12:6f:76:9d:
70:49:5b:52:86:8e:47:a5:77:42:10:ed:19:68:c9:
bb:6d:34:22:1e:05:24:3a:b7:37:72:2d:1c:6f:0f:
0e:2a:86:20:54:06:75:85:e5:d0:30:1c:cd:9c:96:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:55:5E:DF:27:EE:03:CA:21:9F:48:4B:ED:74:8B:6B:0D:4F:B8:55
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:66:0b:10:ee:65:f9:2e:13:ae:23:6b:2d:a7:9b:cd:af:74:
84:e0:ad:39:93:46:11:4a:5e:c6:13:20:24:f9:3f:82:64:3f:
d9:37:2e:f3:b0:f7:a8:20:64:b6:c8:4b:0f:b5:ad:bc:cd:bb:
c3:24:9a:cf:9c:c3:04:07:8a:75:e1:61:48:f6:b1:af:6f:26:
e2:91:d7:29:44:98:89:27:67:04:5f:5a:50:e0:b9:82:c0:b9:
eb:9d:7c:58:23:71:43:9f:ae:ec:19:cb:c9:bd:5a:bc:6f:09:
16:c2:11:24:17:41:23:99:74:a7:bb:92:1e:95:90:d5:64:07:
b9:cc:9f:df:c4:e6:dd:11:ad:e0:8c:8a:71:47:2f:dc:a6:e5:
a2:8d:00:26:27:1a:b4:d0:b5:b0:df:34:39:0f:c9:3d:b8:f4:
00:91:46:88:24:a2:08:6c:71:61:32:8d:8d:a9:d6:32:6e:ec:
50:2e:78:6d:56:07:6b:a6:e0:b9:02:45:ea:e6:6a:d6:f2:b5:
66:11:bd:98:d8:17:d7:b7:4f:1b:20:63:42:fe:47:a7:ae:36:
a2:f3:99:00:6c:ae:df:8a:b8:e8:a7:ec:ea:bb:19:49:58:ef:
45:76:ff:56:1b:dd:f3:5f:10:3e:1b:24:3b:f3:c1:df:1c:42:
32:04:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:27 2025 by rpki-client