Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
File: Z3NwPrTqs2ernekaKsQe4yAUAw8.mft (raw, json)
Hash identifier: OxUXGqWlVAA0JPxh0KV09NdkvKC33n1XdIFGOL2UEq4=
Subject key identifier: 29:8F:88:F8:10:31:AB:2F:2B:9F:D6:99:36:BF:16:0D:D3:0E:7C:03
Authority key identifier: 67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F
Certificate issuer: /CN=6773703eb4eab367ab9de91a2ac41ee32014030f
Certificate serial: 0198D65F86F16EF4AFBAD22C04967A69E3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
Manifest number: 0912
Signing time: Sat 23 Aug 2025 10:00:41 +0000
Manifest this update: Sat 23 Aug 2025 10:00:41 +0000
Manifest next update: Sun 24 Aug 2025 10:00:41 +0000
Files and hashes: 1: Z3NwPrTqs2ernekaKsQe4yAUAw8.crl (hash: AbSVQVCirwTyA0Ph4nPi/jTiD1nkd/OjZMGRbYv88+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:86:f1:6e:f4:af:ba:d2:2c:04:96:7a:69:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6773703eb4eab367ab9de91a2ac41ee32014030f
Validity
Not Before: Aug 23 10:00:41 2025 GMT
Not After : Aug 24 10:00:41 2025 GMT
Subject: CN=298f88f81031ab2f2b9fd69936bf160dd30e7c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:12:b2:0b:5e:79:ae:59:c0:a4:4a:26:a5:
ec:49:6e:75:aa:e4:79:55:b7:2d:0c:21:bf:41:5b:
a6:0e:4e:fd:57:2d:56:e4:24:0c:99:60:0b:4f:14:
22:5b:ef:b8:ac:f5:94:10:22:9a:23:10:2b:d2:38:
2c:21:8b:da:51:f0:30:59:15:d1:6c:01:f9:23:15:
b8:99:10:46:f9:04:7e:07:01:2f:a1:d5:dc:d6:bf:
a0:61:d9:3b:49:72:d9:a1:26:f3:7d:e6:96:8b:77:
bf:ee:11:e2:d4:5e:ce:86:33:9a:96:68:bd:27:a3:
8e:b4:4e:fe:1b:9e:f6:61:b2:7d:a6:30:a0:c7:8b:
1f:70:72:71:8d:1b:2e:97:2d:67:3b:44:96:23:76:
59:89:4e:a1:8c:ed:ce:01:2e:16:4f:b3:27:8e:e7:
42:ed:21:87:9c:91:e6:2e:bc:5e:47:80:a6:b8:d4:
cf:3c:68:da:01:f6:f1:ba:c8:cc:90:db:14:09:a5:
83:f1:1e:fd:a4:1c:10:04:4f:a9:df:40:48:4e:4d:
c1:9f:16:95:ae:46:d5:e2:6d:f3:db:f8:7b:6f:bb:
2a:19:60:4b:56:83:45:46:6a:15:71:cc:2b:3a:4e:
41:86:dc:eb:d7:78:52:2f:71:73:dd:ff:74:b1:0f:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:88:F8:10:31:AB:2F:2B:9F:D6:99:36:BF:16:0D:D3:0E:7C:03
X509v3 Authority Key Identifier:
keyid:67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:36:3d:8c:da:e7:f9:9f:1e:ee:8d:b5:e3:50:c0:de:73:36:
52:a1:4d:68:42:ca:a6:18:04:c8:12:ce:24:e2:3e:38:fd:50:
1c:ce:b8:ae:05:f3:9c:b2:34:0d:c6:d4:e8:e9:0e:93:8f:3e:
43:5f:d4:d2:67:42:84:b4:c8:8b:20:12:6c:d9:89:21:1d:8d:
f4:8c:14:5e:14:46:86:d5:0e:44:11:eb:c5:3d:69:47:c0:ab:
57:80:d4:34:ef:bd:18:07:72:6e:b5:ad:2f:e5:a7:09:d9:02:
a8:33:6a:ae:5b:34:52:8e:ac:41:20:63:21:26:7b:ac:55:3e:
ec:62:b3:44:8e:0b:bc:b7:c6:dd:f6:2b:c7:f6:86:15:b8:41:
82:68:e7:4f:76:e0:4e:7c:95:43:fa:b2:22:b6:20:ea:ed:00:
94:90:29:d2:14:0c:7e:4a:60:78:01:93:6a:5c:a3:28:48:8d:
df:e8:75:52:97:b2:9e:22:28:1c:b0:2a:ba:89:4e:78:42:87:
8c:43:ce:46:ae:ec:a6:3f:f3:8f:0f:90:fe:5b:c2:30:49:b1:
81:a5:10:02:88:32:dc:66:d1:d7:99:3a:52:4f:58:0c:2a:e4:
f5:32:7f:1c:ee:37:46:2a:84:f2:87:b6:d0:1d:86:8d:df:25:
98:e1:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:37 2025 by rpki-client