Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: I+C+f1o7CGQezr9UKYOMdIiWeyWZbCMdaozU/dbk5jI=
Subject key identifier: 81:F2:46:F1:09:C9:56:56:36:AD:DE:0D:6E:1F:71:F7:E8:11:96:5A
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 0198D65FEDA2EA6C4CB9CC94790929420AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 10:01:07 +0000
Manifest this update: Sat 23 Aug 2025 10:01:07 +0000
Manifest next update: Sun 24 Aug 2025 10:01:07 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: WxVd7efqPTuAzwjvP672Kh6l/0JJdfQKKPDzQMd+8NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ed:a2:ea:6c:4c:b9:cc:94:79:09:29:42:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Aug 23 10:01:07 2025 GMT
Not After : Aug 24 10:01:07 2025 GMT
Subject: CN=81f246f109c9565636adde0d6e1f71f7e811965a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:92:12:01:c0:1d:fc:1f:87:a0:2f:df:5f:
b7:8d:88:55:07:b8:d9:c5:86:1c:b2:4e:19:ed:1e:
24:f3:b9:d1:b1:14:85:d4:44:5e:37:4b:e9:14:32:
fe:d5:f8:33:2b:34:f6:f6:2d:8c:19:96:6c:c2:55:
fa:1f:e0:52:23:a0:00:d5:f2:a1:bb:f6:8a:b7:df:
e0:0f:3b:0b:30:3b:26:d2:90:f5:40:fa:c6:ce:eb:
b0:88:bd:cc:55:81:d9:f6:d2:37:88:83:52:61:d1:
63:d8:9e:4a:93:64:9c:03:c7:3e:da:61:93:7b:ac:
b3:dc:55:4b:cc:d3:7f:93:b0:46:4d:95:80:73:44:
6a:64:27:32:60:79:f3:5c:6f:a0:65:30:66:1f:df:
ab:5c:f1:e3:5a:7a:e3:01:59:52:79:da:0a:e7:3c:
31:16:dc:4f:10:3e:06:40:b5:a6:34:b1:ab:2e:fc:
ce:5d:85:56:e8:a0:f9:a2:1f:4e:14:9e:c6:f9:d3:
33:10:a2:79:55:6d:3c:1f:82:81:79:cc:7c:f4:85:
39:71:f4:2f:fc:55:c6:08:49:60:88:bb:8a:10:d7:
87:33:c8:40:b0:d5:e9:36:90:51:5f:fb:26:f2:7d:
57:77:7a:a9:3d:e3:8c:97:c9:4b:f3:58:39:fd:54:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:46:F1:09:C9:56:56:36:AD:DE:0D:6E:1F:71:F7:E8:11:96:5A
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0a:fe:cc:25:d5:51:1f:15:64:1e:e8:2f:7d:3b:6a:87:28:
08:8c:cd:5d:27:60:67:df:a8:12:4b:37:2d:32:ec:92:11:00:
d4:19:c9:d6:6a:be:00:c2:46:cc:b7:95:51:ff:ee:63:a4:65:
ba:e6:5c:3d:5d:4b:b8:a7:02:15:14:7f:1e:e4:15:05:46:9a:
88:07:2d:15:a6:2a:a0:e2:1f:6e:ce:a5:87:ef:09:c2:59:cb:
00:93:b6:cd:50:88:8a:87:14:80:12:af:c1:b2:2d:a3:34:a9:
6e:3a:77:d2:a6:17:58:27:ee:fa:3f:a4:95:43:b0:80:6c:15:
05:d1:fc:8d:3e:72:e9:c6:4b:f6:9f:cd:f4:67:a4:e4:57:dd:
39:cf:bf:fe:9b:fe:3c:2f:95:07:81:b8:b0:e9:60:98:be:0f:
8d:6c:2d:68:96:e7:77:52:9d:80:c2:d8:83:50:dc:28:25:73:
82:14:c9:f3:b9:aa:cc:54:dc:21:90:96:e2:b1:5a:5c:80:ee:
5e:15:49:22:77:e8:83:8e:8d:ac:e1:b7:fb:82:bf:89:b4:71:
87:bf:e6:8f:cf:9f:e1:4d:05:2d:f1:c7:e1:2b:21:7a:5b:d5:
ba:16:96:bd:bd:f2:96:21:bc:47:3e:4d:3e:1e:0b:3c:7f:dc:
06:4c:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:17 2025 by rpki-client