Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: yEZppEQX5/b1C4N7Jbo/BkmrENxnmvB8ywNajB8YyXQ=
Subject key identifier: 0F:16:DB:EC:A1:69:90:B7:A0:C0:B4:95:EF:65:11:69:3D:D7:C3:72
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 01989ECD0A729A2C1120D7E4856038135D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 15E6
Signing time: Tue 12 Aug 2025 15:01:34 +0000
Manifest this update: Tue 12 Aug 2025 15:01:34 +0000
Manifest next update: Wed 13 Aug 2025 15:01:34 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: CAITJgFEjXCJ/vemTF4X+yAuh5g4Mka16iwEhYOT7FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cd:0a:72:9a:2c:11:20:d7:e4:85:60:38:13:5d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Aug 12 15:01:34 2025 GMT
Not After : Aug 13 15:01:34 2025 GMT
Subject: CN=0f16dbeca16990b7a0c0b495ef6511693dd7c372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:28:22:1c:cf:c1:cc:1d:67:6f:f9:48:c7:
74:c4:89:56:18:c0:f9:a6:2e:70:42:46:77:97:fb:
b2:2b:60:b3:69:a8:df:ac:b4:8e:91:eb:7b:a0:6e:
c1:a6:da:07:83:f5:63:0f:2f:40:59:1c:26:40:28:
d8:d2:8a:58:b2:b2:41:60:00:25:51:f2:87:5f:c3:
75:3a:8e:a2:de:98:98:47:61:bf:f4:32:7e:18:16:
88:f6:53:0f:48:28:eb:61:e9:d4:16:54:4e:4b:01:
6e:c1:13:07:83:9c:fb:f9:78:ff:e7:4f:6b:4c:6d:
c4:40:70:b1:ce:d8:98:38:ce:cd:70:46:38:8e:62:
03:ad:b4:dc:46:3a:10:9d:e4:ca:42:48:20:c8:d3:
27:ed:69:0b:ac:59:8d:e2:fe:98:07:6c:7d:13:d2:
62:4f:af:14:c1:ac:a6:5f:0f:63:36:ed:29:cf:cd:
67:50:bb:b2:ba:e1:d0:0c:ac:5f:2b:c5:35:4e:83:
1e:25:09:b2:5b:b5:35:cb:27:6b:2e:77:f5:98:a3:
a0:99:15:b7:c9:0d:1c:98:78:d7:06:b6:fb:f2:ca:
e9:d3:fd:69:64:c7:c0:80:9d:84:43:81:81:2e:1f:
82:00:f8:a7:4d:9c:40:82:cc:11:ed:64:a8:96:99:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:DB:EC:A1:69:90:B7:A0:C0:B4:95:EF:65:11:69:3D:D7:C3:72
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e9:36:ff:da:b3:62:2f:36:ae:f4:83:fb:bd:bd:c5:88:48:
ea:6e:89:e4:b6:f9:13:92:41:5f:b5:b8:bf:07:46:c5:14:e8:
f4:60:69:08:3f:84:27:d8:c7:cf:3f:24:bd:83:13:3a:b0:ce:
ec:df:ba:1e:bf:08:99:e4:00:10:7c:eb:f2:83:8d:8d:1f:2a:
15:b1:37:49:30:f1:54:87:26:fa:4d:72:52:aa:9e:37:0e:16:
af:f5:f0:c2:fb:2a:f9:4e:50:3e:58:84:84:ee:99:ab:79:d8:
c1:a8:40:c6:71:d8:40:89:19:f5:63:86:35:e6:e6:9f:75:72:
a6:0c:fa:7b:de:fc:ac:d0:23:5e:24:9b:65:ec:26:2b:b0:a0:
ba:76:fa:3a:78:49:19:10:95:6d:78:8f:a5:03:ff:83:29:a7:
3c:4e:2f:d0:d8:ad:af:03:7f:2a:df:e1:64:77:3b:9f:c5:0f:
f0:82:dd:46:a1:ec:f9:9c:66:db:73:2b:85:96:2b:3b:29:b1:
aa:56:0d:4f:f2:61:f4:9b:f4:32:fa:7d:47:94:ab:e5:71:20:
4e:74:d6:c4:17:05:2c:9f:0b:7e:c5:c7:65:a7:fd:37:de:1c:
6c:5d:a0:e7:80:aa:3e:c3:5c:27:37:97:ce:2a:c7:f7:76:34:
18:f2:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:06 2025 by rpki-client