
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: pASwe8Ug1msFbrpySRmhwry2cbteFfof28rHmwuMeek=
Subject key identifier: C6:1A:AA:6F:0C:F5:0A:48:27:59:89:D7:94:33:5F:A4:7C:67:CF:E8
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 019873E23A49D38166D4279AF736F39F09C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 11C8
Signing time: Mon 04 Aug 2025 07:01:02 +0000
Manifest this update: Mon 04 Aug 2025 07:01:02 +0000
Manifest next update: Tue 05 Aug 2025 07:01:02 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: m0qmjx9YczllcB0f7576P5WADq8KNVfqlHgn9vQxd74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:3a:49:d3:81:66:d4:27:9a:f7:36:f3:9f:09:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Aug 4 07:01:02 2025 GMT
Not After : Aug 5 07:01:02 2025 GMT
Subject: CN=c61aaa6f0cf50a48275989d794335fa47c67cfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:a0:43:7d:6b:41:c2:8c:15:33:ff:7a:e4:
7c:de:d0:f0:2e:ac:db:fa:a5:88:9d:d6:22:9b:e5:
6b:28:50:b4:e4:d5:9a:ee:2f:49:7a:eb:00:e0:16:
46:c3:79:ea:75:93:1b:4e:16:ce:a2:13:17:74:54:
c0:ba:d0:16:37:68:6b:d6:be:3b:50:1f:2b:18:12:
4f:bd:7a:94:60:b6:37:a5:94:01:be:70:73:0e:58:
fa:d7:5b:2e:61:93:d4:7c:92:5d:5b:73:e0:d6:bc:
c8:33:0e:86:34:b4:15:79:e0:f9:29:aa:a9:21:1b:
40:cb:a4:c6:82:bd:a9:9a:56:26:b4:b2:88:04:64:
5d:d9:42:c0:a7:1e:1b:7f:27:48:fa:69:f1:cd:bb:
04:ca:c4:af:b3:e6:72:eb:16:22:5b:06:0a:80:fa:
2f:a1:30:bd:76:4a:02:51:52:26:5a:2a:9e:49:01:
9e:09:b0:8b:48:86:b9:ca:55:a8:cf:7a:c5:87:fc:
c1:ce:09:74:c1:15:92:18:da:83:49:16:0a:b0:20:
9a:e0:dc:77:aa:53:a8:05:fe:4c:c5:f2:29:73:dd:
d4:99:2f:3b:5f:a1:13:32:23:1b:0c:16:5e:c4:b9:
c7:20:80:5f:e8:6e:48:e4:49:a8:3f:9c:3e:85:11:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1A:AA:6F:0C:F5:0A:48:27:59:89:D7:94:33:5F:A4:7C:67:CF:E8
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:bf:4e:ae:c7:9a:27:80:28:80:32:d3:8f:c9:4b:44:54:cc:
93:f4:b0:a3:a4:1b:7b:97:ad:7c:68:91:a7:9c:ad:f1:df:ac:
d7:5a:aa:84:62:74:30:06:93:14:25:f5:9c:77:fe:f1:db:5c:
6b:16:3d:67:ed:17:18:07:06:4b:97:a3:2c:26:a9:71:b7:1b:
39:be:82:50:9c:04:b6:e8:d1:5a:74:b6:9d:d5:e2:e6:ce:4c:
f6:b3:81:bb:a0:c4:28:b6:b3:73:f2:b3:ff:65:f4:8a:16:3a:
e4:5a:64:07:58:0c:f9:af:37:4a:e6:2a:72:7d:8e:74:32:ce:
25:d8:4b:f8:0b:a1:33:37:dd:9a:a9:c9:d4:b3:62:94:2d:11:
c2:07:b4:8d:3a:6c:7f:85:83:05:4e:39:71:bc:eb:74:cd:6d:
81:a9:af:16:70:82:61:da:99:98:2d:e4:ad:25:ff:b0:64:be:
21:a0:57:fb:db:ce:c7:10:61:fa:6c:1c:ab:f2:f5:47:18:5e:
4a:08:6f:66:2b:94:69:63:1e:d3:ee:0e:9d:61:79:f7:cf:76:
3b:23:60:8e:cd:f6:8c:7d:bc:65:66:cf:fe:a0:5c:e2:a3:2a:
68:35:da:23:2c:dc:4e:a3:1d:c3:2f:66:6f:b0:c9:90:08:9f:
7d:0a:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:46:05 2025 by rpki-client