Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
File: z9rC7BEEwkXZyrqOthY46drxADk.mft (raw, json)
Hash identifier: uTcW1MCJGcvUrH4jkiTkPvt4o+z/8P/rQplN2kgCUgI=
Subject key identifier: 1D:7B:3B:96:D8:C2:DD:5F:22:14:6E:0D:B8:58:F1:B6:D4:4D:3A:34
Authority key identifier: CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
Certificate issuer: /CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Certificate serial: 01987D8A7A8B3FBF6E8D1AC7DED50A6050AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
Manifest number: 1159
Signing time: Wed 06 Aug 2025 04:01:23 +0000
Manifest this update: Wed 06 Aug 2025 04:01:23 +0000
Manifest next update: Thu 07 Aug 2025 04:01:23 +0000
Files and hashes: 1: z9rC7BEEwkXZyrqOthY46drxADk.crl (hash: ZEvo9aPzw/rzTLHInRtZe7MRS+WJHQvQhR0x8bs4Pc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:7a:8b:3f:bf:6e:8d:1a:c7:de:d5:0a:60:50:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Validity
Not Before: Aug 6 04:01:23 2025 GMT
Not After : Aug 7 04:01:23 2025 GMT
Subject: CN=1d7b3b96d8c2dd5f22146e0db858f1b6d44d3a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:20:b1:3e:63:68:5d:f5:0b:77:58:1a:7f:
2c:83:aa:ac:4f:51:27:06:6e:a8:3a:83:2c:91:78:
79:af:16:97:8a:c9:8d:62:43:66:b8:ca:f2:f3:eb:
ff:3f:fc:42:a2:12:61:44:16:e0:f7:fa:07:5a:e6:
4e:a0:99:fb:71:e5:d5:d0:59:13:25:76:91:81:dd:
74:a4:46:19:8d:2e:b4:02:0b:4a:33:17:98:af:87:
19:b9:47:ab:a0:28:cc:84:35:b3:0b:8b:27:08:68:
0c:0c:50:61:fc:cc:26:8e:14:dd:e6:a7:ea:7e:2a:
ba:3c:1f:ea:0a:38:d6:a9:de:c0:5d:82:36:37:bc:
63:4b:3c:f9:27:32:b5:a4:ba:5e:68:9b:e8:16:fd:
a1:e2:e1:84:48:76:d3:7f:fd:55:82:05:82:20:ce:
12:ce:93:16:61:3d:34:92:d9:99:48:a4:c9:38:ec:
92:c4:78:f2:43:f0:49:c5:ae:74:70:68:2a:ed:dc:
db:5c:af:d4:7e:fe:fd:a9:cf:1c:b2:0e:02:dc:4a:
c5:ca:dc:9d:4c:60:fe:16:32:fa:86:29:e1:41:07:
83:e0:e2:0f:53:c4:7b:bc:8b:85:a6:14:66:55:e0:
3e:d9:e5:b5:e1:e5:fb:e3:b0:86:17:e3:4b:15:22:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:3B:96:D8:C2:DD:5F:22:14:6E:0D:B8:58:F1:B6:D4:4D:3A:34
X509v3 Authority Key Identifier:
keyid:CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7c:26:c8:f1:a2:dc:b6:ec:7d:ac:86:77:f5:3a:3f:28:72:
be:45:35:02:61:8a:21:a6:f0:a4:d3:21:ed:2c:2c:02:87:08:
ba:fd:b7:42:d8:f3:ac:ba:53:3c:3f:10:0e:c6:5f:40:3e:a3:
7a:6e:b6:f2:05:de:dc:1c:63:c7:05:6f:77:18:c1:bb:b4:53:
84:bf:9b:05:bc:ea:18:56:62:8d:b0:a6:a8:c6:70:c7:43:17:
ab:10:ad:a4:46:9f:cd:a0:67:bf:26:e3:da:fd:db:e9:fb:2c:
d2:3d:a2:1e:64:94:c4:5d:d4:f9:70:96:ac:67:ec:44:5a:38:
36:cc:3e:07:79:48:cc:5f:97:76:72:c2:39:f8:eb:03:9a:0d:
09:fb:51:f8:7c:20:37:5d:52:e5:33:fc:c6:6a:70:75:23:28:
8e:99:c1:98:05:fa:28:07:3a:29:76:73:d1:3c:10:e6:20:01:
35:b7:8a:5d:fb:96:70:68:34:27:52:50:9d:d8:da:d6:3d:e0:
b7:c1:a7:dd:04:cc:ec:4e:2e:20:dc:e5:34:9c:69:3c:6c:11:
03:cf:f0:8f:fa:ef:5a:25:f6:47:28:b0:5e:6a:d0:f4:b1:d3:
8a:f3:9e:43:8f:42:ff:0d:ba:a9:ed:17:dd:71:78:10:54:21:
09:7b:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:25 2025 by rpki-client