Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
File: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json)
Hash identifier: +lLvYSgMb1jnlW841xJ3w7cL9n7/cQH5a9M+cNA7d98=
Subject key identifier: A1:3A:C7:5B:4A:88:40:EB:99:E8:8B:20:20:C6:B6:FD:78:B5:E2:56
Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
Certificate issuer: /CN=65a07d492468228aa306a66b056a0228c552ec5c
Certificate serial: 0198D4727FA3D47C069164C61534FF01CD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
Manifest number: 0D5E
Signing time: Sat 23 Aug 2025 01:02:10 +0000
Manifest this update: Sat 23 Aug 2025 01:02:10 +0000
Manifest next update: Sun 24 Aug 2025 01:02:10 +0000
Files and hashes: 1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: cZXCNcAkXC0cHnLj41r5DUBI2oEgU86h5grU54S5sFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7f:a3:d4:7c:06:91:64:c6:15:34:ff:01:cd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c
Validity
Not Before: Aug 23 01:02:10 2025 GMT
Not After : Aug 24 01:02:10 2025 GMT
Subject: CN=a13ac75b4a8840eb99e88b2020c6b6fd78b5e256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:44:2d:3c:5a:91:de:00:75:1b:c3:1a:15:
a8:95:9f:c7:76:81:1b:13:30:8b:3c:ef:8e:30:22:
d1:9c:c0:d5:a9:2d:b4:75:c4:5a:62:89:a5:25:22:
5b:43:c5:42:29:b4:db:ba:3f:72:45:05:b6:10:b8:
ef:e6:4d:74:06:f1:e9:c7:83:6a:96:47:c7:96:2a:
3c:43:64:12:ff:6e:81:71:28:20:99:72:d5:31:b2:
a8:a0:bd:07:a3:6a:db:a1:76:90:46:b1:92:fb:be:
01:07:83:09:78:29:a4:23:5b:5a:c2:85:45:03:60:
13:8e:c3:19:fa:ce:f7:3a:89:cf:b8:76:81:f2:e1:
a8:e9:20:94:a3:3b:2c:2b:50:4a:2a:f7:47:55:7b:
27:72:28:9c:bc:74:17:f5:8c:a7:52:7e:e8:25:a3:
39:c6:3b:61:ba:23:4f:d8:ef:c4:be:83:f9:4f:bb:
cd:bf:67:cd:e1:f0:71:ba:65:59:22:7f:c6:9f:af:
c5:e5:af:b7:3e:a2:7d:8d:17:92:ea:4f:b4:33:d0:
53:54:71:46:43:30:fa:62:a8:25:32:bf:05:02:17:
a1:d7:b7:f7:c9:aa:4e:81:4e:7a:28:0f:10:64:d1:
61:97:36:26:1b:10:1d:2c:cf:49:b1:3c:02:4f:6c:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3A:C7:5B:4A:88:40:EB:99:E8:8B:20:20:C6:B6:FD:78:B5:E2:56
X509v3 Authority Key Identifier:
keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e1:34:54:5e:99:ab:de:b9:d6:7a:cc:69:70:9c:ab:c2:4e:
95:10:71:16:ac:1e:08:12:f9:30:a4:45:4d:48:1b:56:9b:e0:
8b:7e:cb:49:07:69:35:8f:9d:f4:53:43:80:ad:51:f5:37:0a:
4a:e9:5c:52:cd:04:78:99:48:82:16:56:b1:b2:b1:40:cc:34:
7f:df:e3:67:0b:ca:20:50:d7:29:e9:e4:79:45:16:b0:68:4d:
cb:99:05:4c:9e:81:ea:f9:4a:69:6a:bf:86:97:9f:cb:19:09:
f6:0d:e2:7d:00:8d:83:24:f0:2f:05:3e:84:b2:a1:fc:5b:ea:
52:f8:c3:46:ca:f3:e4:fb:ce:79:33:0f:db:04:6d:68:51:17:
4c:24:88:71:47:3a:2c:23:75:ac:89:bd:b6:54:97:50:7a:0f:
47:c7:ac:94:a6:6c:fa:e2:f0:fc:b4:ab:50:38:7c:f5:02:bb:
ce:cd:93:41:ee:97:24:4b:8a:61:1c:2e:4f:8f:6c:82:a5:ac:
33:fc:1e:48:f6:94:1b:fb:3b:8b:3c:fd:8b:ba:c7:dc:82:33:
6e:39:2e:12:bf:45:96:fd:54:1e:8d:79:67:21:20:6f:a2:90:
51:15:93:24:df:48:b1:a1:c2:a1:58:9d:28:67:13:9f:0e:7a:
9c:42:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:05 2025 by rpki-client