Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: sVYGtTlbe+6r5hOjlirH2oLTYwyxinNT2iyZd/tgZjg=
Subject key identifier: D0:EC:0D:79:03:45:18:04:FC:2A:7B:93:32:9F:4A:4D:3B:3A:07:3B
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 019896A6DF19727CE66E1EF826722E61B385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 1625
Signing time: Mon 11 Aug 2025 01:02:55 +0000
Manifest this update: Mon 11 Aug 2025 01:02:55 +0000
Manifest next update: Tue 12 Aug 2025 01:02:55 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: YX9mf3zkujzSvT1m4Os9pprkhFX1aFIykEcOXwt7urE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:df:19:72:7c:e6:6e:1e:f8:26:72:2e:61:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Aug 11 01:02:55 2025 GMT
Not After : Aug 12 01:02:55 2025 GMT
Subject: CN=d0ec0d7903451804fc2a7b93329f4a4d3b3a073b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:8c:81:88:66:c8:1c:d0:19:6e:ea:82:11:
08:75:72:84:d4:54:00:d6:64:20:4c:42:ab:d6:8a:
9d:73:7d:7a:6d:6e:6e:98:24:06:14:da:d7:e0:64:
77:7f:b7:f9:63:29:79:c6:3b:26:58:57:ee:15:f6:
b9:a9:85:3f:17:9c:33:1f:e3:3a:a3:64:d4:64:ab:
14:0b:de:fb:10:28:4f:fe:4e:63:00:b6:c1:ad:5b:
f2:fa:86:5f:6b:ca:e5:69:b5:af:5a:c7:1b:f7:8b:
f6:14:43:6b:0b:16:f1:9a:af:69:3c:4a:33:72:e3:
c4:93:fa:be:96:f4:af:84:32:8a:ff:77:0f:83:83:
88:ef:74:67:22:c7:8c:f3:32:02:16:03:08:9a:7c:
a1:f7:c9:03:18:a8:ac:52:20:1d:59:88:12:c4:d1:
1a:9c:7a:14:7e:da:a2:d5:9a:53:02:0c:60:0a:d2:
0f:31:02:ac:7b:2a:a0:57:6c:c0:d9:a7:c0:3f:7d:
04:50:cf:63:74:c9:f4:94:5f:f1:ac:6e:c5:3b:48:
55:b2:f8:9b:0b:d2:10:f1:96:c6:d2:1c:40:f7:02:
66:57:21:69:24:ad:77:20:78:a9:96:8c:4e:cc:dd:
f5:2a:39:9c:7a:e1:fe:4e:c8:9a:dd:b3:06:a5:b5:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:0D:79:03:45:18:04:FC:2A:7B:93:32:9F:4A:4D:3B:3A:07:3B
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:1a:46:9b:d5:0c:7e:1a:79:df:fc:08:f7:d9:76:7b:66:
9e:fe:d2:76:e9:32:f3:63:1d:53:5a:60:6a:f8:c2:cf:b1:56:
f8:8b:0a:1e:d0:22:0c:e0:d9:8a:c7:6b:43:94:70:75:04:bd:
8d:ef:5e:a1:5e:00:aa:48:71:18:94:e0:3f:8c:ac:55:da:80:
84:aa:56:c2:44:76:7f:c2:70:14:98:94:7c:c2:dc:d8:4f:de:
ce:6c:c9:71:80:86:70:8d:dd:3c:a3:88:4d:d5:f2:48:5d:b8:
b1:98:9f:de:6e:83:6c:07:5a:bb:aa:7a:87:dd:94:00:12:98:
3f:4e:01:ca:d7:e5:9f:70:47:7b:d4:f5:20:9e:12:1b:1a:bf:
06:a1:06:74:70:25:5c:82:38:90:ee:dc:11:80:6d:38:1c:a6:
86:ee:88:19:c2:71:a8:c1:46:dd:be:9c:94:37:e9:25:c8:03:
58:be:dd:9f:94:a6:7b:d1:18:b3:28:2f:f4:2f:8d:9a:2b:1d:
83:17:f6:c8:8f:c6:01:26:7c:4b:9d:08:96:b3:c1:e7:ad:79:
97:6d:12:75:6d:4c:0c:7d:03:09:d7:63:9b:d6:ab:2d:f7:37:
17:f6:6e:e5:68:62:28:20:d3:73:7f:0a:a2:ad:e3:6d:84:e9:
a8:19:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:36 2025 by rpki-client