Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier: 7B1M8ft9+w+d4M6Szj029JkQAOSJE9I7OIDFw5IRlHE=
Subject key identifier: 6A:1E:A0:D8:1B:86:5D:AB:AD:AF:FA:2C:C0:4B:D5:55:E8:4F:81:A1
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial: 01987A5207F321A6520DF8B597CB10E29F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number: 0278
Signing time: Tue 05 Aug 2025 13:00:52 +0000
Manifest this update: Tue 05 Aug 2025 13:00:52 +0000
Manifest next update: Wed 06 Aug 2025 13:00:52 +0000
Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: J3g1poXxM9Nbg6aPCeYnn2HSFyeQ4ly09MTN8ZO8bWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:07:f3:21:a6:52:0d:f8:b5:97:cb:10:e2:9f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
Validity
Not Before: Aug 5 13:00:52 2025 GMT
Not After : Aug 6 13:00:52 2025 GMT
Subject: CN=6a1ea0d81b865dabadaffa2cc04bd555e84f81a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:67:b7:91:ec:10:42:72:ca:b6:e3:c6:78:
02:09:a9:0b:60:d1:8c:dc:6e:f2:32:90:ea:0d:40:
b2:53:5f:a1:32:bc:75:2a:9e:7d:7d:87:42:ce:ec:
30:82:12:f2:39:e2:86:34:69:72:31:6f:37:d1:13:
ae:7c:7f:fe:b6:8a:49:4f:9f:26:ad:3c:61:b1:e0:
5e:cb:7a:0c:03:2c:a6:56:fb:13:c0:1b:38:ea:ad:
b4:9b:bd:9f:f2:ba:12:27:2c:25:76:f5:b1:fe:89:
47:59:39:56:f9:21:be:57:ea:1b:fd:0a:c5:6e:36:
2f:1b:74:28:2a:9b:94:84:57:c7:e8:84:c0:80:1f:
23:63:6c:4d:2b:40:5d:f9:5b:72:a3:f7:8d:10:58:
9f:36:fb:e7:8b:f7:fd:02:c9:cc:74:06:a2:7d:05:
55:38:6f:a8:f5:f1:18:37:44:60:cf:0c:9b:42:b7:
e5:90:5b:9f:cc:8c:4e:cb:e6:b1:57:3b:6a:98:e9:
6b:e8:be:9a:f6:a8:ca:61:dc:7f:67:a9:f6:01:ea:
49:f5:6c:16:e5:5d:40:1f:e7:cf:c0:8d:d8:07:e1:
f0:0f:a6:b2:ac:f0:c3:37:1b:74:5d:7b:b0:de:76:
90:23:6c:ea:36:44:ac:18:dc:3c:27:f4:d8:ee:df:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1E:A0:D8:1B:86:5D:AB:AD:AF:FA:2C:C0:4B:D5:55:E8:4F:81:A1
X509v3 Authority Key Identifier:
keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8c:2e:32:d4:1e:7a:ee:21:b4:78:d6:4b:f4:ac:8c:82:fe:
4e:18:98:1e:8f:83:63:4b:80:a2:67:95:43:c7:59:0f:a0:b5:
3a:2e:03:c2:92:7c:f5:c2:55:91:9d:0a:11:95:7c:a7:fb:f9:
bb:5e:2f:15:55:5b:e6:9a:4b:92:46:ea:e0:98:42:81:29:94:
35:0a:3c:ce:3e:8f:a4:75:ec:9e:8e:bc:29:f9:a3:27:1d:a7:
69:84:79:dd:dc:38:fc:36:f1:9f:d3:e8:1d:96:55:52:77:f0:
e1:5f:71:67:28:e1:44:26:96:64:11:79:1e:10:80:ef:d4:c4:
0b:38:d5:9d:d7:be:99:ac:12:29:00:0f:71:4b:3c:c2:ca:94:
9d:da:46:ae:f8:18:76:df:90:3d:a0:4a:96:1a:fa:0a:d7:54:
86:1f:fc:0e:5b:02:b2:98:a2:fd:00:e3:20:9f:89:29:43:66:
e4:d9:18:c7:90:1d:bd:d0:61:a9:c1:bd:b5:6a:11:81:43:4e:
4d:85:36:2d:b2:c1:28:74:e7:97:c2:51:b2:df:7c:e3:5e:60:
cd:b8:f3:2f:2d:f9:a8:8c:9a:da:a4:5b:f0:27:dd:1b:9c:2f:
59:5d:04:74:b7:02:86:21:eb:f6:5d:1c:78:8d:8e:8d:49:4a:
dd:3f:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:25:29 2025 by rpki-client