Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: NIgccJ+gp/pVCttaugsWtbQZPB0mrxK66YR2FvHnx74=
Subject key identifier: C3:00:7B:DD:D2:C1:B0:C6:78:0D:EC:3E:D0:A6:EC:86:4C:47:FB:FF
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 0198A1967D79AD667795BD85138F5E08E4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0C9E
Signing time: Wed 13 Aug 2025 04:00:50 +0000
Manifest this update: Wed 13 Aug 2025 04:00:50 +0000
Manifest next update: Thu 14 Aug 2025 04:00:50 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: n7nZyp+m+Dlu/R+14vzGMbEncOjqQLqurRA0yt+vO/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:7d:79:ad:66:77:95:bd:85:13:8f:5e:08:e4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Aug 13 04:00:50 2025 GMT
Not After : Aug 14 04:00:50 2025 GMT
Subject: CN=c3007bddd2c1b0c6780dec3ed0a6ec864c47fbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:ee:9c:99:96:c7:21:3b:00:f3:ec:d7:3b:
66:22:9e:30:ff:87:f6:32:a1:59:08:75:61:74:bf:
34:d9:b8:f3:2c:00:2e:05:84:a6:e4:84:9d:a2:ce:
00:c4:e0:4e:6c:a9:01:45:fc:ab:89:8c:e7:f3:aa:
60:b6:80:88:c1:60:de:5b:2f:be:48:25:22:de:01:
fb:d9:4e:08:73:c6:73:f3:48:e5:00:d1:98:cf:37:
60:3b:7e:3a:ab:da:cc:09:8f:41:41:9e:d4:ac:3c:
40:fa:aa:52:a4:ea:3d:d2:da:ca:2b:a2:49:a5:34:
f7:b1:93:c8:52:96:47:e3:8b:d8:3d:56:93:41:80:
69:96:92:64:25:e3:76:eb:5f:dc:22:09:f4:10:28:
99:bb:27:29:a7:0a:95:a4:3f:f8:f1:4a:7a:55:47:
51:7d:84:a3:3b:5a:e1:f4:79:8a:31:ef:8c:a2:80:
b1:df:03:c8:ce:64:34:bb:13:4b:ad:b0:c4:f0:6e:
b3:bb:6d:72:ad:03:9a:a3:94:03:06:93:d3:53:f0:
a8:37:2d:77:ac:24:c5:df:33:d2:08:03:32:66:3f:
f3:77:41:63:24:46:aa:aa:3a:b7:74:98:d0:d2:0f:
76:de:56:79:52:37:1a:cd:f3:d5:c2:8a:4f:bc:be:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:7B:DD:D2:C1:B0:C6:78:0D:EC:3E:D0:A6:EC:86:4C:47:FB:FF
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1b:68:0e:2a:24:ef:de:20:da:93:d1:c3:06:b1:66:59:6d:
3c:6d:01:98:5e:3f:ce:2b:5a:0c:b3:39:64:83:3f:e9:26:e9:
09:6e:38:33:c5:fa:43:09:3f:79:16:af:69:d7:5b:bc:48:a5:
c3:22:a5:23:d8:c3:d5:df:3c:14:fa:b6:b4:95:45:5a:52:16:
07:75:b9:20:77:74:a5:66:4c:a2:92:e1:3e:18:73:06:f4:03:
59:6a:ae:f9:24:06:13:0c:f1:5f:49:1b:1e:a5:2c:4f:4a:37:
3a:04:d7:12:2c:16:1c:17:7e:60:1e:25:fe:c5:19:7d:58:b8:
82:13:cf:77:67:cc:65:cc:38:d1:02:1b:d9:09:00:84:00:cc:
48:dd:e0:94:b5:c0:90:2d:6a:bb:3e:96:26:75:25:f6:13:d8:
80:92:33:86:41:e1:cf:96:30:6b:ad:3e:46:a4:91:1a:70:14:
0a:6b:ef:73:45:c3:94:17:02:c2:7b:2e:8c:21:be:80:84:f7:
9b:35:d2:ad:54:88:e2:55:30:0b:74:dd:60:4e:d7:ee:5b:b0:
c9:41:6f:d8:bd:b6:fd:7a:b4:01:62:97:bf:a5:42:95:31:d9:
d4:5e:4c:bb:c3:15:b1:90:a4:25:2c:f4:c4:91:6a:b4:90:32:
96:5c:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:30 2025 by rpki-client