Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: cylOsFERBa9yCZLeU8L7uuUwdApIytGEq5HvK9GXirs=
Subject key identifier: 8C:DB:6C:3D:DA:2E:9D:96:EA:DA:B4:C3:D4:05:7B:D0:0B:0B:1D:C0
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019894B79BF2561572FAF5C05B642563663D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 16:01:57 +0000
Manifest this update: Sun 10 Aug 2025 16:01:57 +0000
Manifest next update: Mon 11 Aug 2025 16:01:57 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: zqXZNzpX0evi1DBuJss3KOl7IGvqob5o09dfaGzDNKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:9b:f2:56:15:72:fa:f5:c0:5b:64:25:63:66:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Aug 10 16:01:57 2025 GMT
Not After : Aug 11 16:01:57 2025 GMT
Subject: CN=8cdb6c3dda2e9d96eadab4c3d4057bd00b0b1dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:5e:bf:7c:95:5a:f2:51:15:b2:a5:e9:08:
e0:02:03:2e:56:d0:fe:24:d7:ec:20:b6:96:25:74:
b2:a9:fc:e6:72:21:32:c4:f6:c0:41:1d:c7:e2:f7:
70:53:4a:08:9f:a6:aa:37:74:54:64:ff:8a:88:9f:
b3:8e:ec:cd:3c:cf:9b:f4:5c:ec:f9:75:96:56:72:
96:93:ea:eb:1b:1d:f5:d9:e9:57:0b:8b:6f:c4:93:
1f:d3:67:08:c1:1a:a3:3d:c0:7b:16:bc:bf:bc:11:
7c:aa:68:c1:ce:0b:6b:aa:b5:34:9d:8a:9b:95:b4:
99:cf:6a:70:95:31:58:29:d2:38:71:b3:88:7a:3f:
66:fa:47:f5:d9:ab:1d:ff:f1:e1:de:39:30:2f:24:
5b:ea:cf:9e:b5:78:76:0c:d7:88:d9:e8:30:03:5b:
6f:19:39:8a:43:e6:2f:b6:1e:44:6f:1e:54:ba:87:
44:91:61:f4:85:af:8a:c9:73:74:fb:a4:a8:40:22:
f4:03:85:45:a8:10:5e:2e:a7:37:55:d7:c6:26:0d:
67:52:41:16:dd:41:b3:2e:c2:c0:d3:3c:ff:68:16:
a0:ff:80:fd:04:88:8e:b7:91:3e:81:cf:90:a0:e8:
d6:59:15:a6:e0:94:88:01:08:90:d6:45:49:f4:f9:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:6C:3D:DA:2E:9D:96:EA:DA:B4:C3:D4:05:7B:D0:0B:0B:1D:C0
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5f:76:fd:27:18:1f:41:a6:a7:80:f1:32:16:6b:01:b3:c4:
69:2a:c8:b5:fa:dd:c1:9f:74:51:5a:21:f0:1f:86:51:0d:9a:
e9:29:99:82:c3:76:ce:d1:2b:7d:24:bc:1a:59:2a:36:57:80:
36:c4:90:d6:4d:d3:5b:b3:64:75:36:c5:8e:65:b9:56:35:f8:
7c:b2:1c:e7:03:d6:4a:d0:a2:74:18:61:ad:55:17:54:d1:28:
86:c2:ab:92:e4:64:aa:2d:f6:61:05:c9:2e:96:a4:d1:bd:9f:
2a:8b:13:f9:43:e1:01:58:45:49:f6:f3:12:60:de:e8:7e:30:
07:7b:ec:29:ad:42:ef:c5:c3:14:9c:1d:5c:42:62:2c:c4:22:
62:53:d5:ca:b4:9c:b6:fd:23:4a:77:09:48:e0:9a:4a:96:72:
c5:b3:89:1d:fc:8b:d4:9d:5a:60:35:24:3c:22:60:5c:be:24:
fe:d2:04:d1:aa:a1:f9:66:53:19:ad:77:ab:e5:ae:ca:95:64:
cc:bf:31:e3:f1:09:a0:45:fd:08:de:75:6f:7f:aa:4c:51:9e:
42:18:6e:0d:12:74:04:5a:fe:cc:49:d1:5a:8f:45:61:d4:65:
ba:63:a5:69:80:b2:fc:32:48:b8:2b:da:cb:a1:23:31:13:be:
df:2d:89:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:14 2025 by rpki-client