Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: erJj9I+PkTlf/B3QGBHVpX5IJ66XG91F8+evwsnWlOQ=
Subject key identifier: 74:2E:5E:08:6F:61:DE:BD:3E:10:E5:52:AA:DC:23:78:EF:29:3F:1A
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019885B10F25CD2ED5F7F88167DD75A712F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 18:00:29 +0000
Manifest this update: Thu 07 Aug 2025 18:00:29 +0000
Manifest next update: Fri 08 Aug 2025 18:00:29 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: +aHIMw40k+8nW5dS9tyvDpCFD/duK3W4VvlVKNkva+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:0f:25:cd:2e:d5:f7:f8:81:67:dd:75:a7:12:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Aug 7 18:00:29 2025 GMT
Not After : Aug 8 18:00:29 2025 GMT
Subject: CN=742e5e086f61debd3e10e552aadc2378ef293f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:fa:a9:46:a3:64:29:0f:ec:bd:60:31:65:
e5:2f:78:cb:d4:9e:4d:e8:c8:32:a2:88:67:ca:1d:
4f:2d:d7:87:1d:e6:bf:69:e7:4d:0e:63:c4:f0:79:
e4:c3:5b:87:14:60:98:21:ee:c7:c8:e4:55:5c:33:
61:9e:fa:de:73:a8:6a:36:87:1e:60:df:6f:a6:b3:
18:c7:d2:cc:97:6c:9a:01:f3:71:1c:ac:13:66:35:
ac:a4:66:a1:21:fd:8c:51:ca:bc:cd:a6:85:1d:b5:
08:61:8d:a1:c5:f6:9e:76:a9:86:6d:f9:9d:88:d5:
30:dd:46:83:3e:fb:3b:8a:6f:75:96:ae:14:3d:aa:
c6:4f:e6:88:15:14:1f:0b:af:5b:51:44:8c:4d:5a:
51:d8:b9:d0:f0:cd:a3:d0:76:b1:2b:e6:a8:06:e1:
54:ce:8a:76:bd:e6:8d:86:04:74:95:38:e8:43:07:
cb:48:54:a1:7f:0a:5e:79:24:fd:f0:31:10:18:b3:
31:31:65:5a:d7:3e:96:0b:d8:6d:f4:61:ab:56:da:
7a:05:19:96:8f:e4:a7:71:d0:fe:01:a1:e1:c6:71:
13:bb:e7:80:8a:18:83:b3:d9:ba:5f:88:bd:82:40:
31:5e:7b:da:54:08:8f:4e:0c:a4:b6:44:fb:a2:a2:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2E:5E:08:6F:61:DE:BD:3E:10:E5:52:AA:DC:23:78:EF:29:3F:1A
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:54:1e:28:0d:36:e4:2e:b6:bb:c7:f6:b3:75:87:85:5f:c6:
f5:14:21:a6:2d:91:30:f6:6c:2e:62:1d:34:c8:fb:dd:fd:35:
36:c0:9f:b7:29:08:c9:8c:9a:53:42:59:ba:60:89:af:3b:58:
cb:e9:c9:74:45:0a:c2:9d:3d:38:84:ac:6a:2a:24:f4:49:18:
5b:74:0f:a4:2c:89:b1:1b:e6:cc:f3:3b:18:fd:16:38:f3:c1:
a9:39:92:00:e4:fd:b7:83:2e:b8:80:3e:00:ae:d9:be:d2:c6:
7a:cc:7a:9d:45:82:12:bb:7d:2c:7a:d9:d6:c7:eb:bb:2b:0c:
9b:9c:ac:dd:73:40:25:45:dc:c1:be:41:74:38:dc:cf:3c:d7:
74:6a:c5:26:47:1e:46:ae:04:c8:e9:31:89:01:ee:50:f2:67:
fd:b7:13:db:7a:e3:0d:6f:0f:b9:a3:9e:c5:79:0c:fb:5e:20:
51:e9:41:85:6d:41:2e:7d:b7:3c:8c:b4:05:1d:20:7c:d9:a6:
ae:29:3f:00:f0:08:75:8a:8d:b5:be:03:a3:5d:16:08:68:bd:
bd:36:99:eb:40:54:71:04:14:15:e5:19:ff:e0:80:d1:8d:9b:
de:5b:8a:6d:ce:47:b8:8f:0b:21:e3:b0:55:b4:b2:a9:d0:56:
cc:98:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:19:29 2025 by rpki-client