Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: F1qLC1vfZ1luJ/fwwWCpGj2qVg4eYpyRiGtnfUKXYsA=
Subject key identifier: E2:F3:66:7D:FA:37:40:D5:86:F6:3D:D5:77:C8:F9:B0:79:8B:EC:9D
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 01989712CC799E108C5AA517252563D333D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 05D3
Signing time: Mon 11 Aug 2025 03:00:48 +0000
Manifest this update: Mon 11 Aug 2025 03:00:48 +0000
Manifest next update: Tue 12 Aug 2025 03:00:48 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: Qt5javlQUksFga9B/t89dTzLzxTaFe5lG0atvOjTGws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:cc:79:9e:10:8c:5a:a5:17:25:25:63:d3:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Aug 11 03:00:48 2025 GMT
Not After : Aug 12 03:00:48 2025 GMT
Subject: CN=e2f3667dfa3740d586f63dd577c8f9b0798bec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:21:77:8b:d1:2e:26:95:10:20:ba:6a:8a:
d9:5e:9a:6a:25:d0:bf:63:80:f9:c5:cf:65:5e:90:
dd:fb:53:bc:cb:60:c8:3a:68:2b:41:10:19:23:54:
4e:25:23:8c:8d:40:47:2f:5b:65:2e:d6:4c:f6:6f:
dc:24:30:88:f5:41:02:a5:35:9f:6c:c3:f8:3e:bc:
c8:03:02:0f:ac:00:98:2d:bc:e7:76:e1:c6:8b:49:
b7:9d:8d:b6:da:48:40:3f:a3:da:ed:f9:0a:4b:55:
d0:f7:3f:5b:90:cc:ac:21:90:d2:c8:fa:24:74:8d:
19:d4:95:d6:b4:e4:61:bb:7b:a4:44:71:47:78:47:
55:7d:47:52:3a:a5:3c:61:f5:d5:29:8a:15:27:36:
0e:40:f9:4a:9c:c5:75:f9:6e:fb:88:b8:f1:f4:a6:
74:7d:ca:9d:41:bd:01:2d:77:ea:65:67:32:83:76:
f6:69:e7:72:e4:d5:07:63:ad:9a:9c:e6:18:22:e8:
5d:a0:e4:56:1a:97:97:87:43:9f:38:71:04:78:44:
c9:dd:56:ef:30:23:c0:40:9f:d3:c0:b9:a3:cc:c7:
aa:44:bd:56:5b:2f:cd:ad:43:45:5e:37:7a:06:c9:
ae:9a:05:3e:c9:99:90:6f:c5:b2:fd:3e:4c:94:eb:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F3:66:7D:FA:37:40:D5:86:F6:3D:D5:77:C8:F9:B0:79:8B:EC:9D
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:bf:1b:53:b8:27:a8:fc:90:79:e8:9d:af:59:f6:cb:e2:
1c:4a:a6:bf:cd:af:bd:9b:66:3c:d1:2b:f0:9a:f2:12:31:40:
70:f9:00:1d:48:bc:dd:9a:1a:fd:e7:c8:6a:be:ac:7b:d4:aa:
04:a0:6c:d5:40:99:48:e0:e0:1e:23:7e:17:1c:22:24:e3:11:
1e:92:ea:10:ad:71:e6:4e:07:94:1b:a8:ff:11:be:fc:91:9d:
4d:f8:d2:4c:0d:9b:e5:79:5a:b7:99:9c:08:db:ee:80:b9:8b:
2c:c0:f6:29:fc:d7:73:eb:1e:23:de:55:bd:99:c1:48:73:d9:
db:e9:a4:2d:47:49:0d:82:3d:e0:88:e1:50:fe:08:23:21:35:
cb:c9:8d:e9:7c:5c:66:d0:9d:e2:39:ce:71:53:1f:74:33:cf:
44:93:f3:24:9e:9d:72:0f:5d:38:12:b0:1c:fd:cb:8f:9e:b4:
eb:53:79:4a:5e:3c:ac:4a:57:c7:a6:32:3e:68:92:65:ed:9c:
cd:4b:a1:ed:86:26:b5:00:06:47:c2:44:1d:f7:f9:11:c4:58:
cb:e6:8f:92:52:c7:1d:8b:90:fe:23:f1:52:b5:17:9a:39:ea:
eb:dc:6c:21:b0:69:20:65:34:ed:2b:df:34:4e:3e:2c:c8:2e:
67:ab:6c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:15 2025 by rpki-client