Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: KO1+zeF9J9EO6Ov6evhTISExv9KOwGwE0N2iJ7+KjpU=
Subject key identifier: D2:BA:6F:67:50:F0:6C:C9:8F:26:3F:30:B7:79:4B:A3:62:80:0C:81
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 019879086D39A6D5FA03E00CBB69460E6DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0A67
Signing time: Tue 05 Aug 2025 07:00:51 +0000
Manifest this update: Tue 05 Aug 2025 07:00:51 +0000
Manifest next update: Wed 06 Aug 2025 07:00:51 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: nx5BWAaEHKI+LW+TW6nDYNkNplOTryEo0iK3uYJXx1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:08:6d:39:a6:d5:fa:03:e0:0c:bb:69:46:0e:6d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Aug 5 07:00:51 2025 GMT
Not After : Aug 6 07:00:51 2025 GMT
Subject: CN=d2ba6f6750f06cc98f263f30b7794ba362800c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:1b:62:db:d4:ba:ce:38:4b:26:17:50:88:
27:60:60:38:15:04:0f:79:66:31:1f:e2:78:7f:42:
f9:f1:b3:51:ae:e3:25:18:8c:54:0a:45:e6:bb:4b:
df:6b:30:84:37:e3:e3:aa:b2:79:8e:e2:04:b0:04:
f1:fb:36:6a:d2:33:37:01:66:b8:4b:50:05:f0:82:
ce:e9:eb:fd:9c:79:76:c2:78:04:e9:df:8d:ff:b3:
01:24:82:aa:4d:d3:97:c0:f5:eb:8a:b7:04:4e:2c:
0b:55:40:31:05:fc:95:39:44:17:50:be:81:04:c9:
43:51:b5:c9:02:51:53:07:ce:08:7f:9d:73:02:0d:
10:03:72:8f:3e:5e:ec:ea:6e:58:93:13:d9:14:db:
fa:16:a7:a2:97:1a:38:59:90:d1:0b:f6:80:42:53:
27:93:b3:ee:00:1a:7a:1c:b8:02:37:e0:03:2d:a6:
93:63:7b:4c:7e:7d:6d:95:c6:ac:64:bc:79:ac:c1:
51:4f:13:cf:37:27:37:cc:8d:7d:24:a3:91:2b:42:
37:56:dc:83:71:40:0e:5c:cc:9e:8c:3a:3a:09:87:
07:d1:fc:d9:c8:bc:69:5d:66:ac:fa:5c:4d:e2:94:
39:60:49:d5:1b:e7:74:43:d0:0f:7b:ed:32:4d:73:
d1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:6F:67:50:F0:6C:C9:8F:26:3F:30:B7:79:4B:A3:62:80:0C:81
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:00:85:21:01:de:bd:0c:19:65:20:fa:ac:61:29:b8:81:00:
03:44:29:47:7c:3a:5e:31:97:6c:8b:91:b7:79:6d:09:64:9c:
98:2d:c9:2f:41:4d:38:92:b8:08:cc:5e:68:4c:17:9f:c7:dc:
90:60:9d:14:07:46:9c:48:ec:e8:50:43:a5:3a:c7:ab:6c:3a:
81:7b:bb:27:86:9e:36:d8:5b:ea:3f:a4:fb:cc:35:58:a9:1f:
eb:92:f2:43:a9:9a:78:db:05:98:fd:ff:15:4f:10:54:19:20:
ca:ef:24:46:2b:bb:0e:fe:04:89:3f:f1:21:dc:83:55:fd:3b:
0e:e5:16:9f:2f:f3:f3:49:9e:98:14:64:43:89:14:7e:18:aa:
9e:5d:2a:32:56:c6:67:7f:c1:7b:26:a8:28:a6:24:52:7e:27:
1f:e7:e2:b6:e4:63:ed:bf:b1:a7:d4:fc:31:82:59:58:4d:ad:
a7:2c:33:cb:5f:26:9c:7a:de:6a:e0:e6:37:41:25:b5:24:bf:
9c:0e:52:b0:26:df:0d:67:37:97:b5:86:58:9b:d4:44:4f:87:
c9:cb:4c:6c:f9:f7:6a:94:f8:e3:05:b8:58:eb:b2:95:83:c2:
b7:8d:a0:0b:15:f1:41:e1:69:b8:38:e4:10:e2:f6:19:60:95:
70:a9:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:08 2025 by rpki-client