Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: 5Fywj8V8Pj1Nb5Nw7XI69raFbXum+SBI+Jhf36/OB5s=
Subject key identifier: CC:A0:DF:7D:5F:78:A1:96:8A:E9:49:24:A6:0A:2C:C9:5B:4D:F3:C1
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 01988CFCB93689AAE49C64A5A856C032AA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 0378
Signing time: Sat 09 Aug 2025 04:00:29 +0000
Manifest this update: Sat 09 Aug 2025 04:00:29 +0000
Manifest next update: Sun 10 Aug 2025 04:00:29 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: N1xAx3qVAS7ia4Z2bcAt4VU7aUBMeyHXau7HsiWYyxU=)
2: 5KVSG33DPZC1TKz5q9NlgQSJY8U.roa (hash: GwSKpHIjNmK499qIKezXAfYrejsXUCWzE4VXptKGrTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:b9:36:89:aa:e4:9c:64:a5:a8:56:c0:32:aa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Aug 9 04:00:29 2025 GMT
Not After : Aug 10 04:00:29 2025 GMT
Subject: CN=cca0df7d5f78a1968ae94924a60a2cc95b4df3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:3f:ea:6f:70:61:23:65:22:3b:d8:2b:fe:
f3:5e:f0:d0:77:47:fc:62:7d:ac:0e:82:10:81:c1:
c7:96:01:c1:22:ed:d2:fb:92:87:c9:98:5d:cd:ff:
e4:a0:59:2d:af:3f:a2:32:7f:e4:2d:05:18:c6:b1:
ab:f1:4f:aa:8d:8e:70:80:f5:f2:cf:e1:8c:b2:63:
8c:0c:4f:83:60:28:07:d5:4f:e8:f3:e6:17:b8:a2:
02:6a:51:a1:8b:45:eb:e9:dc:13:34:0b:fe:5c:33:
03:22:29:43:9f:31:c4:6a:47:16:60:ba:84:18:71:
65:b3:de:a9:08:43:c2:00:35:ec:45:f7:12:4d:10:
e4:3a:2c:4b:e8:37:d8:89:33:64:69:ee:73:63:b1:
89:e6:2e:83:bf:47:d9:83:36:b7:88:07:45:6a:c4:
6b:12:8f:40:56:de:ff:e4:98:37:b3:ff:07:ac:ea:
98:1e:fe:d5:23:bd:4d:a4:bb:6c:45:3b:c1:e8:47:
4c:91:9b:89:f0:a1:be:67:0d:b5:3f:53:1d:29:36:
c3:87:59:16:41:1b:0c:9b:88:8c:47:f8:50:ba:b3:
fd:a5:00:c7:ed:c0:63:11:dc:78:c3:7c:71:ce:2a:
1e:d7:2f:64:69:f6:d6:64:0b:e5:7a:c8:df:aa:1b:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:DF:7D:5F:78:A1:96:8A:E9:49:24:A6:0A:2C:C9:5B:4D:F3:C1
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:3b:36:08:ce:09:e3:6c:cf:c0:c0:b3:b7:21:7b:d7:79:
0c:5c:fc:72:47:78:66:5a:e4:29:b8:5e:a2:b9:d6:60:ef:b0:
fc:8a:23:00:c4:86:28:c6:ed:1d:7d:cc:7b:9c:1a:d0:0d:7a:
29:14:a2:4f:00:7e:9d:ab:d3:4e:2b:80:ed:b0:50:97:24:bf:
18:9b:15:6d:fd:63:53:59:ae:4d:dc:88:d0:ee:39:d5:ec:d3:
68:58:a7:c8:4a:0c:0f:73:2f:66:b6:fe:3a:79:fb:f4:74:4e:
f4:c5:c3:e4:b6:bb:41:61:97:41:80:8e:96:f3:a6:53:75:9e:
df:b3:f6:00:ad:e1:68:f3:84:55:c4:f1:9c:c6:62:94:17:b8:
78:8b:74:74:c9:14:bc:41:d9:17:8d:b1:fe:0a:d8:c0:6a:fe:
37:9b:ce:60:2f:dd:b9:c4:6e:ae:fc:09:04:5a:d5:aa:8c:55:
c5:f1:e1:e5:ba:b8:ad:11:57:05:f6:04:60:fa:e1:ac:95:dc:
c1:c2:78:09:d2:e4:90:fe:c5:4a:02:1d:2e:fa:ab:e4:67:a2:
0f:31:32:41:04:7a:f8:95:cd:ab:fd:06:1b:bd:7e:bb:d7:a6:
4d:66:66:1a:60:8e:8d:9e:26:44:14:77:29:5b:45:8d:a5:7a:
5d:27:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:24 2025 by rpki-client