Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: cH6w7mnDAH92W/kWzLkGxPhbgo5x1QNHV+/e1QLj1Zw=
Subject key identifier: 13:23:8F:49:77:89:A4:EB:7C:3B:B2:0B:33:24:B1:B3:E2:C2:0B:9C
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 019892C8F4D708587F0174A2DFA90A350CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0C22
Signing time: Sun 10 Aug 2025 07:01:40 +0000
Manifest this update: Sun 10 Aug 2025 07:01:40 +0000
Manifest next update: Mon 11 Aug 2025 07:01:40 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: 9OBvqV1Gap+D4socTG/+2LguugXaHIQ2ouLNWMAv7us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:f4:d7:08:58:7f:01:74:a2:df:a9:0a:35:0c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Aug 10 07:01:40 2025 GMT
Not After : Aug 11 07:01:40 2025 GMT
Subject: CN=13238f497789a4eb7c3bb20b3324b1b3e2c20b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:7c:ad:7a:8d:bc:18:34:6e:2b:08:ef:8f:
21:d5:32:c5:e2:62:de:70:72:2c:81:12:15:09:5a:
38:32:fc:12:c8:e8:a4:87:d2:1b:35:21:86:ec:30:
89:2d:76:37:40:fb:0a:a7:cc:a9:fd:ce:3b:8f:68:
a0:3f:49:93:e2:3b:64:f3:4a:d2:30:de:2c:4f:3b:
24:ad:f3:da:85:0f:6d:d8:1d:37:8c:c5:a6:56:c0:
33:93:80:df:b5:33:cb:dd:da:78:2e:9d:8f:02:7b:
21:94:ac:12:62:a9:97:07:e2:c5:0b:b0:31:6b:38:
cd:99:70:f7:9b:55:7f:70:2c:9d:fd:a0:32:c9:6e:
ee:e5:99:dc:67:6f:72:81:74:ba:a8:76:f5:e3:93:
65:16:bd:6f:06:3d:6b:c1:0b:15:00:e2:d6:b4:62:
c0:c5:0b:75:95:27:e3:c6:73:3a:2e:57:44:fd:51:
26:a1:6f:21:39:0f:0e:98:80:b6:7f:6e:d3:72:c2:
b5:90:1b:fd:8e:30:9e:f5:a5:67:3a:30:64:02:99:
7f:15:d2:6d:70:09:54:9e:ec:34:e0:2c:dc:ca:90:
fd:a2:fb:01:e1:89:6f:4a:d5:ff:7a:33:8a:ef:20:
28:9e:db:ab:5f:23:7d:76:95:8c:7e:a1:30:46:51:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:8F:49:77:89:A4:EB:7C:3B:B2:0B:33:24:B1:B3:E2:C2:0B:9C
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6b:47:76:79:4a:8c:40:57:d1:1c:f1:9d:ec:ef:d3:9e:27:
08:87:de:39:7f:ed:fe:8d:b6:1a:20:2e:43:8b:27:c8:fb:fa:
05:a8:fc:50:57:1d:57:d4:4c:46:41:0d:d8:19:be:04:a6:03:
af:ba:af:81:dd:c3:c7:5f:c1:1e:f1:90:78:bf:c3:c4:af:b9:
d4:30:24:b6:15:db:c0:e5:c1:a9:4c:fd:e6:47:80:56:41:22:
db:ea:44:ea:cd:5e:47:9f:88:b3:7f:16:71:d3:73:00:6e:de:
2b:99:46:ac:5b:91:a1:9b:b0:c5:5d:f0:96:04:d6:bf:21:19:
d9:12:ff:c5:23:b1:ad:f8:8a:c3:e7:85:87:1e:a2:e5:5e:ad:
bb:43:c0:e1:e9:d5:65:bf:b0:43:4f:26:b8:85:55:cc:62:cf:
46:f9:cb:82:ca:da:61:46:35:a3:c0:89:26:3d:18:91:d5:b8:
89:12:66:78:95:3b:2e:2d:82:5c:d5:fc:c5:e0:95:6e:c9:2e:
4f:5b:d9:fb:27:15:9d:c7:3e:b3:ce:7b:0b:ce:64:f1:5a:05:
86:21:9e:5e:53:27:d7:60:d5:e3:e6:4b:9e:68:af:36:93:bb:
b0:3c:88:81:1a:7b:7d:18:ea:87:b9:13:81:4e:d4:ba:86:0f:
e7:d0:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:12 2025 by rpki-client