Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: lv5hDBGWK+krHsBjscNGjWhEeWrEVTwLNNjr7LksUME=
Subject key identifier: 36:A5:7D:7C:2F:58:DE:CD:1E:69:24:99:75:30:39:BA:E2:6C:76:A0
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 0198D6604A543D38F532E9FE13103B5100C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 0E68
Signing time: Sat 23 Aug 2025 10:01:31 +0000
Manifest this update: Sat 23 Aug 2025 10:01:31 +0000
Manifest next update: Sun 24 Aug 2025 10:01:31 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: yf7Zi4qfV5J/6gMwawyOHWOnBUn/OGL5jQpUl41gO9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4a:54:3d:38:f5:32:e9:fe:13:10:3b:51:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Aug 23 10:01:31 2025 GMT
Not After : Aug 24 10:01:31 2025 GMT
Subject: CN=36a57d7c2f58decd1e692499753039bae26c76a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:98:c0:0e:4c:11:6b:35:d6:4a:80:bf:55:
ff:ef:10:52:85:31:d1:66:b1:00:ad:96:78:8d:ab:
83:1c:d5:a9:ce:a9:20:1a:f0:3e:a6:83:1b:b2:ef:
a9:5c:4a:e9:5e:75:2e:ea:52:18:e2:b4:f4:3c:09:
32:98:39:dd:e6:fa:e8:2c:28:eb:1f:5d:e4:8c:c3:
4c:80:95:ed:48:20:13:86:2e:00:50:9b:a0:69:51:
ab:91:55:83:20:55:33:5a:eb:72:f0:e6:d8:95:f8:
bb:c8:0a:9e:36:ca:99:7c:21:05:ce:c3:f3:1b:be:
2b:04:1f:7b:5e:70:ba:1a:8f:2b:ff:e0:34:19:2f:
55:0e:59:1e:14:40:7a:97:21:f5:67:af:61:ec:88:
c5:79:d6:30:a9:8a:b2:1b:ef:f6:4d:6d:54:16:8f:
9e:68:73:ac:61:ca:6f:79:e5:26:db:c5:bb:5c:b8:
12:37:22:80:34:13:72:eb:fd:85:4f:d9:73:d9:01:
e4:d8:ea:1e:df:ed:bc:ef:13:99:7a:68:55:5a:8b:
44:f5:cb:a5:35:b6:52:bc:d3:62:cf:01:5e:9a:b6:
5a:16:47:8b:33:b6:1c:72:9a:37:ab:e7:a4:83:ce:
2e:73:61:35:8c:9e:03:de:91:30:a0:fe:47:15:60:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:7D:7C:2F:58:DE:CD:1E:69:24:99:75:30:39:BA:E2:6C:76:A0
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:de:f6:28:37:c2:02:a4:3e:84:87:52:cc:d5:fa:5a:36:aa:
f4:bf:ae:b5:f8:09:26:84:b4:5d:db:cf:59:37:93:a7:91:5a:
ad:f2:d2:be:6c:54:8c:9e:4d:e8:f4:6f:ef:2e:2d:2d:8d:f9:
4d:b0:97:9d:83:d4:b0:8e:5d:f5:10:90:c8:99:6d:62:be:42:
85:77:25:c6:1e:ae:f3:a7:c4:b5:44:ad:bc:23:f2:9b:df:6f:
e4:2e:a0:a1:c5:b9:95:34:3c:83:55:3a:cd:06:0c:2a:4d:64:
a6:d8:7a:2b:90:07:19:b7:4b:24:e9:47:8e:8a:28:93:dc:aa:
ea:a1:e8:c3:4f:99:5d:eb:1f:57:cc:b5:be:72:08:e7:ef:77:
05:61:42:71:04:e6:b0:11:70:6b:48:dc:bf:c2:4f:36:08:0f:
1e:25:59:62:e5:1c:2d:4f:18:86:59:b9:40:09:90:6b:2b:2d:
6b:61:fd:93:22:2b:6d:4f:98:f2:37:2a:78:1e:f5:f7:23:bc:
98:88:6d:d5:41:55:fd:71:25:7a:42:7b:de:4b:5d:85:11:01:
3b:d1:e4:4b:cd:f6:05:b6:7c:33:9a:81:bb:73:a1:03:88:85:
b2:84:88:e4:3c:e2:ef:6b:c4:ed:06:9b:75:46:e5:76:02:82:
30:ac:77:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:36 2025 by rpki-client