Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: K/iLg5MJF9nEMq7Rgte06ixqpY82uRthbHvLUBS5qXQ=
Subject key identifier: 14:41:47:86:2F:44:7F:0E:DC:23:A8:D4:9A:D6:2D:BC:9B:30:13:13
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 019872CF3F3839A78F168FFBF4B56420E6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0D59
Signing time: Mon 04 Aug 2025 02:00:41 +0000
Manifest this update: Mon 04 Aug 2025 02:00:41 +0000
Manifest next update: Tue 05 Aug 2025 02:00:41 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: 98mw2bQw115at7K+w5QLnhm5RudYjQPQ0VeCtUjEK5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:3f:38:39:a7:8f:16:8f:fb:f4:b5:64:20:e6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Aug 4 02:00:41 2025 GMT
Not After : Aug 5 02:00:41 2025 GMT
Subject: CN=144147862f447f0edc23a8d49ad62dbc9b301313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:8e:c9:26:dc:31:30:88:ed:7e:d0:27:f2:
92:f5:c8:4c:bb:a3:ea:c0:e4:a8:92:25:1e:25:d7:
4a:35:0a:49:52:71:c8:36:10:91:3f:c2:bc:30:d5:
d1:c8:43:35:2b:eb:c6:a1:ed:cb:3d:53:09:a2:3a:
5b:63:e5:83:5b:93:db:98:5c:67:2a:bd:4d:a3:0c:
7e:e0:64:fd:db:47:4e:be:25:9b:61:36:ff:bd:cf:
29:60:07:09:fb:a5:d2:d7:9c:51:2f:8b:ae:5e:6d:
3a:78:81:d3:7d:0e:25:68:46:57:69:c4:1f:50:cd:
ca:a4:cc:f8:c5:95:e9:13:59:d3:48:3f:78:42:1c:
62:b8:fc:89:4e:96:33:1c:b2:a1:b6:ad:96:c5:3f:
4d:29:5f:d1:f7:93:a1:a7:4c:ce:87:8d:3b:c0:85:
b7:de:4f:11:b2:1d:13:0f:d6:c7:86:f2:df:3c:4c:
b5:ef:a6:7a:51:0f:f8:5e:32:49:fb:2d:e6:94:51:
20:af:9d:bb:71:7a:4a:7a:f2:02:7e:4f:58:9c:64:
b8:04:a0:1e:28:21:d9:22:de:03:94:1a:8e:ca:9e:
a9:80:ca:15:a1:4e:5e:b0:9d:9c:d8:be:d1:26:94:
72:38:b7:8b:2b:48:2e:d8:ca:49:2b:5a:4a:09:1e:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:41:47:86:2F:44:7F:0E:DC:23:A8:D4:9A:D6:2D:BC:9B:30:13:13
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1f:97:48:53:c0:e5:79:3d:d6:5b:41:6a:3c:f9:1a:61:5e:
41:fe:17:3d:9d:06:cd:cb:f2:bc:c6:fe:95:86:88:8a:a9:e8:
a6:5a:57:f9:95:09:08:50:84:eb:50:53:20:f0:b1:b5:70:8e:
c5:22:f4:d5:07:aa:f0:69:b7:6d:b3:8b:db:c2:0c:09:e3:43:
6d:5b:7a:59:b4:e6:20:45:95:73:cb:ca:bd:ca:d7:98:d3:df:
50:f8:02:14:e7:2a:06:f7:1e:5c:b1:2c:cd:c0:3b:e2:8f:a1:
cd:00:65:0a:07:ed:19:d7:18:06:f3:c8:3e:f0:27:ad:91:99:
01:ae:9b:5a:56:ba:3e:e1:ad:03:cd:4b:5f:18:4d:e0:d2:c1:
9e:36:a1:48:1e:b9:4d:03:3a:b1:76:24:ed:bb:f9:b3:8a:af:
00:1b:3f:a5:96:e0:53:ff:d0:c0:82:40:fd:c0:09:d7:4b:2e:
e5:92:c9:b5:28:07:66:9c:0b:92:8f:7f:12:b4:f2:db:fe:aa:
1a:29:2a:20:9d:a3:ec:d3:79:5e:07:85:56:bd:71:a7:81:52:
33:3d:82:59:1d:3d:5f:1b:d1:11:95:4b:17:96:1e:45:3d:a2:
a0:9b:15:e2:a0:c2:34:40:86:12:1b:9a:43:a3:6f:30:57:c3:
a7:73:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:33 2025 by rpki-client