Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier: Dz/bRunDnQNqht6tPwfWigynkkzE3RuPCR2SCL+5cSw=
Subject key identifier: 9A:CF:8D:65:60:02:16:68:24:6B:28:78:EC:6D:D5:D3:6C:69:D1:6D
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial: 019892C8326F063573B74F4001AB1E3EE284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 07:00:50 +0000
Manifest this update: Sun 10 Aug 2025 07:00:50 +0000
Manifest next update: Mon 11 Aug 2025 07:00:50 +0000
Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: QB/TBMeqAwPtHbtd3wwusECSkYIrQzQ6ld+oGOJRZxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:32:6f:06:35:73:b7:4f:40:01:ab:1e:3e:e2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Validity
Not Before: Aug 10 07:00:50 2025 GMT
Not After : Aug 11 07:00:50 2025 GMT
Subject: CN=9acf8d6560021668246b2878ec6dd5d36c69d16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:f3:4d:d7:7b:3b:06:89:11:06:c9:5e:5f:
37:76:bc:dc:1f:3e:cb:2e:cf:ba:5d:f7:ca:f8:23:
18:8e:06:a4:30:a1:29:99:2c:0f:c5:0b:13:8d:dc:
c4:39:25:6a:ff:98:51:d2:94:8b:0d:4b:f1:40:8b:
08:ff:7c:64:01:ba:55:c1:e6:81:1e:9f:81:49:5a:
ca:f9:b3:e3:8e:8e:d7:cd:99:cb:de:c2:df:22:fb:
b8:b3:14:09:c1:23:73:f8:f7:eb:09:6d:87:63:f1:
ee:be:37:fc:ff:e4:ff:bf:69:df:37:4b:2e:df:c0:
63:47:95:e2:78:72:09:97:31:bd:aa:2d:94:2d:c6:
ae:b6:67:1d:da:87:ef:ae:5c:c8:59:b8:6d:a4:b0:
1f:12:ef:29:51:e1:df:90:57:10:73:21:f2:30:0f:
0f:4f:6a:3a:b6:56:9a:91:47:48:1f:2e:c4:44:89:
e6:5c:39:90:8d:af:49:63:7b:ce:d7:62:58:44:39:
e2:17:1e:a5:20:67:9c:fa:62:91:05:93:1f:fd:ca:
81:fa:86:06:3e:7b:d1:da:7d:07:80:4c:33:95:43:
9a:c3:8d:9e:e3:9b:a9:8d:bf:1b:7f:42:e2:27:e6:
eb:bb:a8:79:9d:a3:5a:4e:bb:f0:a0:58:8a:47:c6:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CF:8D:65:60:02:16:68:24:6B:28:78:EC:6D:D5:D3:6C:69:D1:6D
X509v3 Authority Key Identifier:
keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:f4:fc:f0:7a:1d:4e:12:eb:1b:a5:dc:c2:14:62:f3:5f:
4a:f6:55:e9:5b:00:6e:03:42:0d:a7:10:45:21:ca:d3:68:41:
87:29:7b:81:86:58:50:b4:81:72:86:1d:90:2c:38:b4:fc:ac:
07:cc:c6:26:7e:b4:8d:b6:b8:76:08:5a:b4:39:79:24:40:43:
63:1f:6b:87:2c:9c:26:21:aa:1a:06:02:c9:9d:65:5f:73:14:
96:3e:24:84:4a:21:de:62:e9:74:0e:5a:da:7e:a4:a6:f8:54:
03:aa:4e:d7:bf:7e:44:bb:0d:fb:bf:19:a4:39:dd:dc:25:82:
56:63:48:ed:af:ce:61:33:dc:65:bf:0a:a4:ae:31:4b:50:80:
d1:ff:ce:5d:00:ee:1e:71:07:59:c6:ea:47:15:c2:83:ce:2b:
61:65:13:25:ef:cb:0f:87:3f:ac:3a:f5:cf:45:71:92:9a:31:
87:31:2c:14:fa:8d:5b:3e:a1:dc:cc:09:aa:5d:d5:5d:ab:4d:
29:eb:7a:3c:22:21:ba:c4:57:e0:d4:c1:a3:50:cc:98:ab:2f:
42:f8:d5:eb:e4:17:76:40:81:a9:6c:ad:c1:b3:28:49:64:e1:
d0:59:e1:75:0b:13:18:1c:f4:d8:3c:53:0b:ad:cc:8c:48:ca:
bd:f5:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:10 2025 by rpki-client