Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier: zD+6HR2zDFeX6ioRbFiAIQZHjZ2yDEr2gOigZOdJXho=
Subject key identifier: 3D:CB:B8:E2:CD:92:7C:3E:55:22:6F:56:92:D9:6E:8D:24:7F:CD:90
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial: 0198A04E48391DD3F93E7F836833F399DE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 22:02:21 +0000
Manifest this update: Tue 12 Aug 2025 22:02:21 +0000
Manifest next update: Wed 13 Aug 2025 22:02:21 +0000
Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: dgstgOfEQjrERcIXJfj20jUDML0OmrpXsu3NGpCiBvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:48:39:1d:d3:f9:3e:7f:83:68:33:f3:99:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
Validity
Not Before: Aug 12 22:02:21 2025 GMT
Not After : Aug 13 22:02:21 2025 GMT
Subject: CN=3dcbb8e2cd927c3e55226f5692d96e8d247fcd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:3a:12:99:b8:4a:c3:07:30:f7:d6:ba:70:
bc:f1:37:88:49:1c:6a:8f:b8:b8:6c:6b:77:55:8f:
de:e8:9c:3d:a9:3e:7a:c3:b1:f7:88:04:b5:0e:75:
76:40:07:72:d2:e2:2b:ee:f5:b3:c3:7f:15:27:33:
58:09:85:14:52:95:56:c8:52:42:ec:88:73:1a:ee:
59:ce:62:ca:3a:d8:1a:b7:82:0d:4c:98:6d:cf:20:
df:99:5f:69:cc:f3:40:d0:a6:c4:f3:8a:e9:2e:96:
33:29:f1:04:b0:0d:94:b3:f4:62:75:13:d0:74:d3:
a5:86:0c:48:c8:59:f0:1e:eb:0c:33:49:89:fa:af:
19:ac:bc:11:f2:11:a7:99:d9:03:dd:79:16:25:e9:
b7:00:6a:0a:c4:25:56:6b:07:45:9c:3c:4a:35:cf:
3c:d5:a4:dc:7d:ba:fb:5b:4b:45:f8:49:8a:92:50:
1e:56:6f:aa:b1:f2:6e:2e:1f:88:01:a9:cf:75:cf:
12:ce:2b:0c:3b:9d:b8:df:87:63:20:c9:0b:3d:55:
f3:20:c1:40:e6:36:88:95:7b:85:7e:13:29:69:6a:
c1:e2:6e:83:f3:2c:ea:59:c9:38:d5:06:58:2d:4e:
90:8a:34:67:99:d3:a7:37:fc:e6:ee:06:69:59:93:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CB:B8:E2:CD:92:7C:3E:55:22:6F:56:92:D9:6E:8D:24:7F:CD:90
X509v3 Authority Key Identifier:
keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:87:ec:e2:4a:66:5f:94:f0:12:54:70:0f:05:d6:32:e9:ac:
a3:11:2b:86:68:cf:4f:b8:7d:cb:b9:d2:a6:3d:bd:59:93:86:
88:7e:37:5e:d1:bd:eb:ac:dc:65:f3:e7:46:2e:a1:da:3d:86:
3f:77:99:8d:c8:3b:a0:e9:81:13:4b:f4:f9:a8:3d:d4:15:bb:
84:c2:ef:ee:81:45:c8:ec:37:e2:ef:0e:be:21:2f:27:0a:e4:
84:42:29:be:4f:bb:11:f5:d6:dc:54:21:31:3b:ac:6a:d1:9c:
09:23:78:58:5b:88:de:fb:a6:21:06:dd:9a:af:82:64:a8:7c:
bd:07:49:0c:50:5d:a5:27:32:76:1c:98:f3:d8:95:89:9e:23:
e9:37:4e:d6:b7:fd:b6:03:90:d7:54:73:66:f9:da:51:e7:37:
a6:4d:27:35:2d:ec:57:61:11:d0:02:cc:7b:9a:9f:24:77:7d:
1c:fa:92:21:83:3c:96:68:b3:1e:27:1f:88:34:ae:fd:9e:88:
31:19:06:73:18:9a:9f:ae:e5:3e:a9:a2:f6:e1:3d:66:4e:23:
e4:ce:e0:a7:ef:23:af:c0:d8:5c:d2:03:24:98:c6:00:65:76:
fc:02:87:1b:e2:5f:dd:87:a0:6f:7c:21:7c:2f:02:e9:70:dd:
ae:e4:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:05 2025 by rpki-client