Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: ZbOZw7gCMe62Mej41wZdDgBffWVbVWilzUuu9SQddaw=
Subject key identifier: 9C:CB:1D:4E:25:E2:86:01:C7:E2:B5:39:D5:2D:77:D3:9A:99:86:1D
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 0197CBE021469E0155FC4F7E029DFA7E2563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0DBD
Signing time: Wed 02 Jul 2025 16:02:32 +0000
Manifest this update: Wed 02 Jul 2025 16:02:32 +0000
Manifest next update: Thu 03 Jul 2025 16:02:32 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: AurNaCJ0Crw4kkdXk9Lr2BD0wbKHg0+1tbasmvU7xA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:21:46:9e:01:55:fc:4f:7e:02:9d:fa:7e:25:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Jul 2 16:02:32 2025 GMT
Not After : Jul 3 16:02:32 2025 GMT
Subject: CN=9ccb1d4e25e28601c7e2b539d52d77d39a99861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:41:1d:c5:d5:b1:b0:c3:05:18:9b:82:bf:
51:6b:a3:80:8e:af:2b:c1:eb:91:96:49:5f:3b:cc:
d9:84:a6:0e:20:94:91:d4:0d:ff:41:00:2a:36:a7:
e2:27:d4:88:b3:26:4e:65:6a:89:63:92:33:05:32:
6f:d3:e4:cc:b6:b6:05:f0:a9:73:dd:a2:69:f4:80:
d8:4c:ec:47:5a:aa:8e:36:20:87:58:84:28:39:8c:
a5:93:58:9e:d9:a9:c3:e1:fb:16:2f:d6:a2:d4:01:
87:f0:ed:c9:97:70:69:ba:7b:0f:b4:3c:79:2a:33:
ac:47:08:c5:49:45:6f:35:b7:1d:e7:c6:38:24:3d:
8d:77:35:02:91:14:99:13:8b:a4:73:33:d1:e0:ee:
fd:22:08:6b:30:32:f8:d9:87:d9:77:7a:a1:aa:5b:
cb:96:3c:36:ce:4a:24:71:00:02:d2:e5:58:5c:02:
c2:28:ce:61:bc:b5:22:47:13:f8:50:43:58:c7:1b:
64:69:c9:59:f7:05:70:cc:70:1b:0a:9d:de:02:46:
8a:95:4e:a7:28:78:79:e0:a5:19:fd:1a:ef:01:08:
f9:ef:89:da:d2:0a:55:21:a4:8b:02:91:ec:0e:b8:
aa:f9:f9:e6:d8:4d:75:e9:4c:ed:8d:92:0a:51:ee:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:1D:4E:25:E2:86:01:C7:E2:B5:39:D5:2D:77:D3:9A:99:86:1D
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:83:a5:89:8e:2b:06:d1:90:fe:f4:53:1a:6c:f1:9d:0a:db:
45:eb:1d:f6:82:91:aa:a1:1e:e7:05:91:7a:4d:c7:16:c6:fd:
a1:9f:6f:aa:52:01:94:50:7f:2e:87:d6:3c:50:8e:f0:27:bd:
fc:59:6d:db:7a:18:47:15:51:a5:ad:42:d0:19:dd:2b:3d:8e:
08:71:8a:72:83:75:a7:d9:8f:79:6e:29:7b:2a:e1:eb:9e:e8:
f5:1d:90:25:49:b8:ae:f4:a4:b1:5a:93:b8:99:71:e2:09:4d:
99:e2:82:12:6b:6f:3a:c0:7a:9c:80:7d:c8:9a:4e:e0:1e:10:
b2:3c:ec:71:84:f4:a3:39:87:1d:a3:71:73:75:5d:cb:34:3f:
de:ec:26:c0:87:8c:ba:1d:c4:40:9f:b3:7f:14:23:5c:e6:95:
e8:60:51:f9:cb:73:ba:88:78:e4:7e:3c:f4:6b:39:b2:46:11:
a9:ae:e9:c8:ff:88:92:c8:ac:0d:d1:ba:07:9c:56:b9:56:7f:
3e:39:c9:b6:97:2b:ba:04:2a:fe:c8:ce:30:d9:6c:3b:e9:20:
fa:c8:c9:76:84:20:63:d6:0d:0c:4f:8d:c5:c3:0d:80:8c:aa:
6e:2b:25:f8:3f:65:0f:b7:4a:1b:db:fd:da:bc:80:2b:a2:54:
55:21:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:23:42 2025 by rpki-client