Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier: UKJMrXZrLXbWdWxmYSchfx0qpLZxgsI1FE2mWfQ2emI=
Subject key identifier: BD:FC:91:D8:96:9F:12:01:27:F3:CE:40:FA:F8:B0:BA:9A:F0:80:BE
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer: /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial: 0198D6CD858F9E878DD9919CAD7DACF006CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number: 0CCB
Signing time: Sat 23 Aug 2025 12:00:49 +0000
Manifest this update: Sat 23 Aug 2025 12:00:49 +0000
Manifest next update: Sun 24 Aug 2025 12:00:49 +0000
Files and hashes: 1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: Cvyg3iRO45O7Wxo2qyN5b3OO2nk3epaAYEn8q5HGvVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:85:8f:9e:87:8d:d9:91:9c:ad:7d:ac:f0:06:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Validity
Not Before: Aug 23 12:00:49 2025 GMT
Not After : Aug 24 12:00:49 2025 GMT
Subject: CN=bdfc91d8969f120127f3ce40faf8b0ba9af080be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:e7:a9:b0:4a:7e:6f:f6:b9:39:14:2a:69:
cf:5d:46:92:32:73:f1:f9:69:c0:71:2d:6b:17:37:
0e:ce:e4:fe:0d:7b:02:cf:71:c9:50:47:b3:34:5b:
ab:6b:e2:64:71:df:a4:53:b1:38:2b:1b:3e:33:81:
86:56:63:b1:64:77:85:7e:61:64:cf:3b:7b:f1:09:
bb:7d:1c:6f:83:2e:29:2d:60:99:06:ad:6b:40:59:
23:49:28:36:e1:d4:5e:dd:1f:ed:69:f5:8a:68:4b:
97:15:73:5c:cc:8c:03:b0:73:dd:c8:c5:59:b7:15:
77:e6:ff:86:92:98:06:3d:6c:b0:aa:8e:8b:ef:e0:
92:27:a2:df:22:85:0f:4f:6f:ca:e0:9c:0f:6a:0b:
03:79:af:d9:2c:b9:03:77:6b:2a:23:f9:ee:df:80:
b7:3a:9f:83:f0:25:83:fe:15:e8:03:cb:9e:16:c9:
4b:89:f4:d9:2b:99:07:c5:3d:4c:50:a7:c3:28:cc:
a9:c0:a9:97:bc:4a:b7:28:35:6f:0b:3c:04:ce:74:
0d:d8:2c:69:b1:f8:b0:08:4e:dd:ca:76:73:9c:cc:
f2:32:22:3b:ec:f7:2f:cb:cd:01:5d:c0:3d:1f:69:
ba:73:20:4a:dd:06:70:90:a3:a0:36:4a:da:7d:11:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FC:91:D8:96:9F:12:01:27:F3:CE:40:FA:F8:B0:BA:9A:F0:80:BE
X509v3 Authority Key Identifier:
keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d0:2e:e4:4d:09:d1:3c:46:b7:c7:67:06:fe:d1:93:a7:30:
05:d6:3e:e8:de:28:2d:88:61:41:69:81:15:2e:61:71:71:c9:
c5:93:88:2a:16:4c:13:ee:40:6d:b3:47:50:1d:a0:d0:0c:f8:
b9:08:28:de:ad:96:80:af:92:c6:cc:12:32:f6:16:4b:05:4e:
4d:f4:cf:fd:4f:8f:14:35:72:60:47:a3:53:9e:f7:c3:7d:31:
0a:2c:f4:34:18:bc:ff:48:b3:a5:ae:44:a8:bd:ff:5a:73:f7:
59:bb:46:42:83:3b:4b:ad:1a:0e:5e:c2:0c:08:ce:9d:63:c2:
c5:38:e3:8f:7e:73:4a:c4:9c:4c:91:25:3c:38:3a:f2:d7:98:
aa:ca:85:1e:a0:e9:44:5f:e6:e5:53:df:ca:b1:d0:06:ec:96:
82:06:2e:dc:2b:5d:33:ab:4e:7b:37:d8:53:d9:be:2b:22:33:
46:fd:07:e6:f1:03:f3:1b:7b:d3:00:95:47:d6:15:e1:10:dd:
c1:11:a3:50:68:4a:f5:e5:ae:e1:7d:a1:02:87:dd:83:ac:69:
8f:08:b0:c9:3e:cc:82:60:30:5c:83:63:7b:43:5e:45:5e:4e:
5b:48:cf:c1:a7:eb:f4:3e:4a:99:70:01:3a:e3:10:ff:ce:9e:
ab:be:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:06 2025 by rpki-client