Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
File: zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json)
Hash identifier: 29yU3mFKs67ZYXOc26il45hvniG9ulld9yZQ/1lVP1k=
Subject key identifier: 17:81:72:3A:2E:86:EF:EA:93:49:9F:46:77:C3:4D:5A:8C:D4:CC:D1
Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
Certificate issuer: /CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Certificate serial: 0198D6CD4A6AE81BF8A28F9DAD9C03B3F5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
Manifest number: 0146
Signing time: Sat 23 Aug 2025 12:00:34 +0000
Manifest this update: Sat 23 Aug 2025 12:00:34 +0000
Manifest next update: Sun 24 Aug 2025 12:00:34 +0000
Files and hashes: 1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: 3/j4DIvVuKi2RI1me406GrCFyB11x63x9a5pR5mfdhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4a:6a:e8:1b:f8:a2:8f:9d:ad:9c:03:b3:f5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Validity
Not Before: Aug 23 12:00:34 2025 GMT
Not After : Aug 24 12:00:34 2025 GMT
Subject: CN=1781723a2e86efea93499f4677c34d5a8cd4ccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:30:b3:0a:8d:bf:94:ae:8f:7a:d5:e4:61:
74:55:49:b8:d3:cb:18:66:da:df:93:30:84:bb:2f:
4c:3d:c8:ce:69:78:c3:61:69:11:d0:9b:19:b5:49:
db:f2:de:fe:c8:e3:86:d8:d6:4a:61:ef:9b:96:28:
9d:b7:31:b9:57:8c:7b:71:a1:f2:53:fc:90:df:3d:
34:23:ba:bd:cd:f9:1b:96:03:55:5c:29:33:8a:c7:
5c:19:8b:7b:1e:f5:1a:90:fb:56:f2:03:32:ee:03:
d1:98:08:40:20:da:6d:e6:41:4c:88:43:21:b4:c2:
be:82:f2:a5:76:08:f6:68:45:93:9d:f6:20:0d:a2:
79:e9:e3:f1:44:18:e0:42:82:47:6d:8e:6d:a5:0c:
34:98:1b:3d:67:13:d5:29:93:0f:89:06:c0:e7:a4:
54:82:5f:e6:39:0a:cf:c9:48:b4:ab:e5:3a:de:1c:
b6:4a:0b:bf:74:1d:d7:b1:52:50:fb:9b:80:dd:f3:
1b:e6:90:87:1d:32:4b:fa:97:d6:5a:6f:93:76:de:
67:57:eb:c7:ce:0d:ce:10:eb:65:79:ac:9d:d2:e7:
c8:dd:8c:5e:ee:1e:cb:35:07:f1:34:53:77:2f:e8:
3b:6b:bc:dd:10:ec:a0:a8:ec:cb:46:da:c4:ac:73:
44:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:81:72:3A:2E:86:EF:EA:93:49:9F:46:77:C3:4D:5A:8C:D4:CC:D1
X509v3 Authority Key Identifier:
keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c3:e3:fc:0b:99:3f:6d:c5:b3:1d:1e:70:05:d7:69:9d:94:
17:40:1e:09:cd:7b:c8:0b:81:ac:9b:d8:4d:e7:33:4a:33:5e:
6e:09:60:4a:ea:89:73:a9:23:02:50:9c:e6:47:d9:c6:a5:30:
c6:ad:41:a0:9f:a4:08:62:6b:82:57:6f:90:9f:7c:27:55:52:
c9:2f:48:be:05:a1:cc:a9:19:a6:94:9b:d1:a0:b6:cb:f8:4a:
70:01:c5:c4:8a:99:a1:90:fc:f9:3b:96:f6:db:b1:05:94:ad:
a2:5f:6a:af:93:c4:2c:4a:1c:9e:70:4d:8a:38:97:82:8d:6a:
be:3a:8f:34:f4:58:40:0f:3e:9d:51:d5:a2:9e:02:ce:b9:1f:
9f:32:dd:d6:dc:9f:38:30:04:44:1e:bc:99:d5:b5:98:72:d7:
12:19:6e:f3:f4:1c:55:a2:56:71:c8:79:8b:49:4f:d2:14:27:
b5:17:32:07:79:96:08:c9:ea:bb:c9:dd:40:a9:ee:d7:50:48:
9e:54:a0:f7:a9:24:aa:f9:17:5f:20:b9:6e:71:9e:22:41:53:
b4:ee:32:56:30:e3:a5:04:76:a5:bc:44:01:af:46:ed:47:b0:
c4:e8:3c:95:af:f0:20:08:4c:2c:2f:a8:46:a1:64:c0:88:64:
12:79:aa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:31 2025 by rpki-client