Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier: DOM5rQIY1QUunIVNPIDGdqZ9OeRCM6H8C0mwTlpEHO0=
Subject key identifier: D7:56:03:C2:B3:BC:CA:47:68:68:E7:E6:D3:50:EF:E7:BC:4B:61:67
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial: 0198A0F1D55D3D5A185788A330DED02C8060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number: 01C3
Signing time: Wed 13 Aug 2025 01:00:59 +0000
Manifest this update: Wed 13 Aug 2025 01:00:59 +0000
Manifest next update: Thu 14 Aug 2025 01:00:59 +0000
Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: bUXhgs5K+HRDRL+wSMfhjv1NdGgEHNQrrl4c1jJTFRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:d5:5d:3d:5a:18:57:88:a3:30:de:d0:2c:80:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Validity
Not Before: Aug 13 01:00:59 2025 GMT
Not After : Aug 14 01:00:59 2025 GMT
Subject: CN=d75603c2b3bcca476868e7e6d350efe7bc4b6167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:f0:78:c3:e7:80:34:87:a5:1c:3e:ff:21:
8d:48:28:40:e0:cb:6e:ab:72:f8:f9:e8:21:d0:95:
3b:7b:cb:2c:95:97:fa:37:01:20:0d:cf:bd:cc:db:
1a:d4:ca:6e:a9:6e:9e:14:0e:8c:7d:dd:82:5c:19:
54:1f:29:ad:16:4d:86:14:ec:57:05:43:9d:50:9d:
dd:9b:06:95:2c:6f:ce:45:c9:09:1a:51:99:eb:c8:
01:18:ba:83:c4:e1:07:7b:45:b4:ab:31:ae:e0:5a:
8c:4b:80:e3:3a:ae:a8:3b:8a:d1:d8:62:14:9d:7c:
37:f9:12:0f:3a:43:ea:32:32:1b:2c:b0:ae:8a:25:
d0:e2:8b:3b:a0:bc:67:73:38:63:b0:6f:71:30:71:
f9:1f:bd:a1:d6:8d:18:26:7a:eb:96:87:f1:7a:03:
3b:48:68:50:c4:8d:87:c0:6b:84:25:bb:6b:cc:96:
3e:5e:69:84:2c:58:f9:a1:c9:4c:4a:f0:9b:16:50:
49:94:a4:93:7c:8c:9d:97:77:54:94:a3:42:36:2c:
2d:3e:21:c5:46:14:29:70:cf:34:e3:ff:35:9c:37:
1a:3b:1d:cd:db:e7:92:c0:98:bf:1b:c7:db:af:b2:
5f:08:d7:b8:18:7f:5c:a1:f5:4a:da:30:8d:21:c9:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:56:03:C2:B3:BC:CA:47:68:68:E7:E6:D3:50:EF:E7:BC:4B:61:67
X509v3 Authority Key Identifier:
keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:05:11:72:d3:05:e1:d1:3e:95:44:e5:06:cc:31:e0:6d:9f:
16:dd:8b:9a:7a:e1:9c:7f:ab:c7:b4:c8:b7:ae:e4:36:93:2a:
41:b1:85:be:ee:af:92:ad:a9:83:5e:fd:2e:04:26:bd:6e:00:
57:c4:26:d2:ae:bf:5f:c4:a8:1e:bd:83:9e:33:2e:d0:19:23:
e3:19:a3:d3:ab:7f:83:15:7c:8c:f6:e1:d7:c4:6a:01:7a:8f:
09:dd:85:94:71:6a:33:8f:43:65:1e:ff:1a:b1:cd:6c:6b:78:
60:4b:ac:42:96:d7:23:b4:aa:66:16:df:ed:d2:47:29:c1:18:
af:15:99:88:ee:9d:ac:81:58:66:52:c1:b0:fa:41:c3:38:da:
99:3d:95:1d:bc:54:a9:49:18:d6:5f:a7:1a:b9:96:e9:8a:99:
a5:d1:2f:bb:3e:d7:0b:f5:7b:7b:40:ff:bc:21:0a:65:34:52:
21:d0:4d:4e:b4:86:26:6e:0e:c8:1f:35:a6:7b:db:bc:61:ae:
b6:bd:55:74:99:8c:dd:05:4a:26:6a:06:91:37:e0:27:64:85:
82:45:9f:4a:72:66:e6:25:0e:51:40:95:c3:06:30:7d:46:27:
06:58:fd:6a:52:5c:a9:2a:98:81:a2:fe:14:87:f1:ee:70:37:
28:e9:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:22 2025 by rpki-client