Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: daMy1rRYFefhaQDmSyJ41M7afVpl5piChqQjh+jEVYg=
Subject key identifier: 52:76:EA:09:DA:28:13:02:B3:26:14:A4:23:CF:97:58:E4:DC:19:1B
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 0198A0BB254C881D3BFF337C6E339CA09A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 0FA3
Signing time: Wed 13 Aug 2025 00:01:15 +0000
Manifest this update: Wed 13 Aug 2025 00:01:15 +0000
Manifest next update: Thu 14 Aug 2025 00:01:15 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: 1uT8FvmFnjQsrBOCxRX/4UNXs84LrKKKOJvo3XlO97w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:25:4c:88:1d:3b:ff:33:7c:6e:33:9c:a0:9a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Aug 13 00:01:15 2025 GMT
Not After : Aug 14 00:01:15 2025 GMT
Subject: CN=5276ea09da281302b32614a423cf9758e4dc191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:d5:38:8e:72:7c:4c:5b:33:69:b5:61:4a:
62:5c:e2:0b:c2:1a:79:10:78:20:9e:f5:67:38:fc:
fe:02:6a:0a:8b:41:9c:6e:b7:57:b3:28:ec:40:e7:
e0:e8:6e:91:e9:48:4c:99:f4:d6:84:b6:b4:6f:b4:
68:cf:da:85:2e:22:bd:27:17:82:5d:ef:9f:a4:c8:
d5:27:dd:55:27:72:22:aa:8c:33:16:f0:43:50:98:
5a:50:39:82:a5:2f:42:6c:f4:f3:8d:b6:7b:e8:31:
0b:16:0d:be:85:3e:0e:ef:4c:98:c3:c7:ad:82:63:
d5:3d:79:52:3e:81:46:d5:58:18:ec:3f:89:87:49:
3a:3a:28:fe:9c:2b:bf:ae:db:91:c5:45:c0:19:59:
55:4f:b6:55:5f:be:41:9f:5b:f2:06:96:29:5e:df:
64:ac:d7:b5:a2:ea:28:3d:8b:fe:ca:ac:19:ef:c3:
58:41:a0:83:87:5e:2a:a1:cc:9a:40:97:50:d6:62:
0d:b9:c2:98:6e:a8:bd:99:3f:d4:9e:eb:ee:5a:ad:
7a:f4:aa:b9:b9:15:a1:9e:79:c7:83:9d:f1:46:b5:
39:3a:74:76:ab:2f:67:35:b7:53:24:ed:14:22:c7:
aa:72:59:c3:9a:d3:e6:aa:55:d8:f3:d1:14:20:6d:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:76:EA:09:DA:28:13:02:B3:26:14:A4:23:CF:97:58:E4:DC:19:1B
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:44:31:6b:03:1e:40:c2:72:c0:b5:34:f8:97:16:0d:b1:22:
64:fa:09:90:d0:c1:02:d1:ee:f7:65:40:d2:74:63:95:c3:82:
5d:f5:a4:61:ff:86:73:bf:6b:81:85:50:9d:3d:20:ab:99:ee:
72:dd:0b:20:a5:ac:52:7b:5f:6d:df:0b:2b:4d:5e:46:6d:ca:
60:4a:7d:9a:d1:25:fd:a3:3c:14:64:23:07:01:e9:71:7b:b9:
b5:82:2e:34:2b:c0:1f:be:e8:d4:02:10:b9:be:d9:b3:bc:ae:
fb:23:0f:06:e1:8b:60:52:95:9d:d7:81:db:0b:c6:e5:04:c6:
9a:9f:6e:74:c6:75:6e:64:56:07:c7:db:ee:75:19:c8:dc:fb:
8f:94:c1:fd:04:ad:98:20:e3:cb:94:30:44:e2:9d:35:7b:e1:
f7:7d:9d:8a:d8:da:9e:80:c9:a3:e5:36:f0:db:46:e1:ec:21:
80:89:1f:19:55:1c:51:ed:3d:d2:ca:ee:ca:92:ba:74:a0:d3:
a5:2d:2c:cf:09:1a:27:1d:10:4f:c2:c4:b2:89:2b:31:19:76:
f2:a2:21:1e:04:ce:98:70:2e:6e:72:64:91:47:af:f3:be:6d:
78:50:df:58:8c:81:81:1a:ef:b3:d0:1b:ce:0c:07:98:d2:da:
1c:7f:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:35:44 2025 by rpki-client