Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: eID3k4jLC5DA8Fb3kEmEizNVBicYYL2mtwq/gW9+8Ng=
Subject key identifier: DB:76:39:50:10:F2:CA:C8:7D:96:B2:40:A6:50:87:08:AD:02:36:5C
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 01988BB3D2C8E6EA74B007E7AA6B52B9219D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0C70
Signing time: Fri 08 Aug 2025 22:01:14 +0000
Manifest this update: Fri 08 Aug 2025 22:01:14 +0000
Manifest next update: Sat 09 Aug 2025 22:01:14 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: /3t9zYFqNcTYQrPrrOOSXG9F2PtVdvHkYtK0kst4vWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:d2:c8:e6:ea:74:b0:07:e7:aa:6b:52:b9:21:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Aug 8 22:01:14 2025 GMT
Not After : Aug 9 22:01:14 2025 GMT
Subject: CN=db76395010f2cac87d96b240a6508708ad02365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:2e:cd:2b:b5:a4:3f:8f:39:2b:13:46:df:
0c:08:6e:48:22:4e:f3:16:32:20:b3:28:0d:f4:76:
98:65:eb:25:85:19:29:0a:c8:45:cc:c9:0c:58:a7:
14:0b:01:38:8b:32:c0:de:b4:ea:fa:33:ce:16:0e:
88:d5:a5:9a:d0:62:16:bf:67:de:e7:cc:5b:1c:32:
89:08:8c:48:7d:05:fd:2e:54:fa:83:49:4f:de:29:
17:a7:ef:ce:b0:41:49:10:1c:3c:a7:0a:6a:10:87:
c3:ec:5f:ed:13:69:e1:ca:0e:2f:d1:43:f6:af:83:
ad:63:f0:d0:68:e8:ca:72:59:af:c7:61:4c:03:88:
a8:6c:fb:44:78:66:02:7d:d9:6a:bf:31:a8:ae:4b:
26:fc:13:c8:fe:7b:8b:38:65:e8:e5:d8:1c:f7:80:
c1:03:84:8b:31:55:c0:9c:10:34:3b:5a:92:3d:52:
cd:2f:8f:c7:42:b4:3a:18:75:c9:d9:f2:d2:46:7a:
60:ad:3d:6f:a5:b8:17:90:e5:08:a1:28:3c:6a:8e:
42:13:c6:c6:e5:71:83:c7:51:c2:2a:cf:24:a0:83:
69:8b:aa:e1:b1:a7:ff:10:fc:a9:2c:33:ca:e2:fd:
32:06:58:18:84:35:90:b6:09:a0:b1:61:55:e6:27:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:39:50:10:F2:CA:C8:7D:96:B2:40:A6:50:87:08:AD:02:36:5C
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7b:ae:b2:7d:cd:07:e9:93:7d:17:ed:a6:d4:e1:e6:95:e1:
28:3b:fc:a5:a2:2b:e2:0e:4f:6a:50:b6:a0:01:ab:38:35:48:
5f:52:b2:70:b1:c6:5d:92:67:f7:c4:8b:e5:7e:c2:f8:dd:73:
e7:af:ac:46:13:b4:be:74:4e:ad:e4:54:cd:f7:21:cc:1b:3d:
81:e3:f4:c7:a9:93:6c:e7:4e:9a:01:75:7a:73:df:5a:8d:a6:
e0:a0:7b:0d:31:67:e3:0f:9e:db:88:89:89:a8:6c:2b:48:1a:
ee:47:a3:99:ba:5c:9b:05:52:78:89:07:d3:62:70:65:d9:6e:
f9:e6:e7:50:3f:a8:09:e9:48:d7:22:ad:77:18:57:3f:3c:75:
92:8e:6c:69:cc:85:9d:b3:fd:0e:af:8a:89:e3:10:47:46:c2:
14:97:3b:57:ca:fb:16:53:ca:e5:80:3d:06:23:4a:87:7d:a5:
e3:f0:9d:25:f7:c6:e8:1d:ed:0d:c5:0d:dc:76:4f:f1:2f:82:
16:e0:f3:86:21:c4:a4:03:09:cc:57:dc:be:9d:c9:ba:0e:e1:
2c:de:7b:d9:0d:71:f2:b4:03:3f:e2:8c:57:61:d6:2b:98:dd:
16:6f:65:0f:5f:80:b8:e7:40:eb:6b:13:87:20:8d:a2:73:c1:
13:20:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:49 2025 by rpki-client