Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: TguL59q2B+CpjaxoDKsuom/quWn0sW/DqEH0JPlBErs=
Subject key identifier: 61:CD:E7:5F:1C:ED:59:85:A5:67:2A:AD:1B:CC:44:2A:EF:CA:7D:14
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 0198D4727D1C7BB18F49AD4334162A1D97C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0A55
Signing time: Sat 23 Aug 2025 01:02:09 +0000
Manifest this update: Sat 23 Aug 2025 01:02:09 +0000
Manifest next update: Sun 24 Aug 2025 01:02:09 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: kS2YP3LeqgXW03GVp89ljqNefPJsS0uabobhir+4a9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7d:1c:7b:b1:8f:49:ad:43:34:16:2a:1d:97:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Aug 23 01:02:09 2025 GMT
Not After : Aug 24 01:02:09 2025 GMT
Subject: CN=61cde75f1ced5985a5672aad1bcc442aefca7d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:a6:08:9e:d6:f3:cb:34:c9:c9:55:7e:8f:
3b:ee:42:95:95:53:07:37:6e:1a:9c:6c:7b:7f:24:
b6:25:76:03:73:e6:f6:7b:11:fe:bd:5a:f2:2e:df:
83:c7:0d:77:4c:4f:7f:d2:88:5c:77:5f:40:24:53:
7d:04:22:72:b9:28:a6:69:71:5a:a8:f2:ee:1d:fc:
be:43:b7:2b:69:86:10:bc:b7:26:2a:d3:f3:2a:cb:
9a:ad:6a:90:67:91:0e:18:11:e0:e4:b8:f3:34:da:
d6:0b:b1:d9:6c:ca:60:35:be:85:a1:ed:9d:90:58:
23:02:ab:bf:45:00:c1:e7:c1:d5:bb:b7:02:db:a0:
e1:64:4c:16:c4:d5:61:f1:54:e6:ec:02:bf:07:7f:
f0:4a:68:4c:7a:80:c5:d0:61:49:80:4f:ea:07:46:
d7:98:a7:72:eb:ec:05:c7:74:9f:fa:51:d0:d1:9d:
e7:aa:df:9c:a1:d6:fa:ba:1f:3c:42:04:5f:a5:d4:
53:84:9c:b9:9d:43:c0:e6:03:9f:94:33:4c:25:b2:
cd:37:c1:d3:e6:ba:e8:18:d4:48:73:22:b2:8e:5e:
54:47:e2:9f:14:16:6d:60:22:a8:32:b5:76:ed:5c:
3a:26:08:36:de:fd:c0:65:95:92:96:21:7b:68:c4:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CD:E7:5F:1C:ED:59:85:A5:67:2A:AD:1B:CC:44:2A:EF:CA:7D:14
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ca:ba:ee:fd:45:7c:d7:b3:03:33:c3:cc:e3:8c:2b:7b:09:
94:9d:80:7f:5c:d0:f5:bb:ff:91:2f:6b:4a:29:a7:e6:6d:ea:
ff:64:a5:78:12:88:21:79:d9:4f:b1:33:13:11:ca:26:1e:45:
d5:f2:4f:9f:3f:a7:b0:c5:10:9f:43:52:b0:80:1b:f3:4e:4a:
11:85:3c:4f:be:32:f7:f7:59:a5:a2:3a:09:06:bd:87:6d:a2:
08:bd:80:3c:a3:8e:a7:0a:a1:37:8f:58:c0:d0:a4:2b:9b:7f:
0f:a0:e4:e4:af:d4:b1:ed:f4:83:ab:89:6c:37:6f:e6:a4:69:
a4:f9:9c:98:55:c9:a5:c2:3a:1b:cd:c9:fd:ad:8a:c7:a4:9d:
fa:29:ff:75:56:a0:1f:88:52:d8:f1:8e:e5:b4:c8:84:b1:f3:
f3:58:33:55:e7:c9:57:ab:2c:f3:c9:39:16:91:7e:84:e8:6c:
7e:53:8d:78:2d:93:c8:3e:e0:b8:ef:f2:83:ac:25:28:5f:ca:
80:e9:56:af:b8:6e:22:c5:7c:b6:d3:2e:86:0b:2d:73:c4:e3:
31:9f:da:9f:56:09:94:bf:d1:4d:f2:97:d9:a2:62:05:ee:10:
d4:ca:de:fe:ed:a1:86:bc:76:3c:97:fd:b6:e9:6e:ec:44:40:
2e:bc:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:48 2025 by rpki-client