Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json)
Hash identifier: fLACwhqkeiuY4F3Hw4s6EaTP93ks2PDmFoHuacVpxys=
Subject key identifier: 29:DB:9B:0F:69:9E:3C:74:E1:F6:C6:F9:54:C9:F9:DB:7B:3F:7C:1B
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 0198D583FE40615489931C5654D3102A267F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
Manifest number: 26
Signing time: Sat 23 Aug 2025 06:00:54 +0000
Manifest this update: Sat 23 Aug 2025 06:00:54 +0000
Manifest next update: Sun 24 Aug 2025 06:00:54 +0000
Files and hashes: 1: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: DkFrol+F0XRwD9gJ/pLvTWidS2HM2ZttJb10w+CeUMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fe:40:61:54:89:93:1c:56:54:d3:10:2a:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Aug 23 06:00:54 2025 GMT
Not After : Aug 24 06:00:54 2025 GMT
Subject: CN=29db9b0f699e3c74e1f6c6f954c9f9db7b3f7c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:24:b6:12:7e:2d:31:1e:66:1e:f0:5e:d9:
e0:d1:83:ff:a4:31:71:8d:1a:22:a5:29:e2:a2:3d:
f5:0b:9f:35:42:c9:e9:db:25:c8:cc:31:85:5c:d4:
2f:e2:79:ab:61:0c:ce:40:46:2d:84:ff:3a:3f:4e:
05:b2:c8:72:00:33:27:51:2a:f8:fb:2d:2c:88:c4:
01:12:d8:a8:6b:4c:c6:42:39:9e:df:4c:f5:40:b0:
f7:22:a2:4d:5e:cf:e1:48:25:d1:51:ef:b4:55:f5:
cf:68:3d:de:21:ba:bd:7d:10:4c:5c:6e:b1:08:53:
90:9b:f8:9c:33:55:88:d9:7b:b2:98:0d:a5:9f:3e:
86:42:87:2b:da:06:95:2f:3b:ef:36:8d:84:80:ff:
64:43:85:d3:f4:5a:5c:d7:bf:3e:1c:48:7b:8a:13:
67:0e:33:bf:2f:54:4c:92:03:8f:f5:ba:06:4c:3f:
e4:14:62:0f:80:7f:dd:f1:e8:cd:76:c6:38:3b:2b:
a8:7c:b2:1e:af:7a:b6:42:7d:e0:27:a0:c0:c4:93:
05:f9:d5:fe:16:88:d6:fe:e0:ed:24:f3:0d:0d:4b:
ac:f0:c0:21:25:d4:ac:38:7c:12:0a:0d:ef:e8:6d:
d7:f0:bc:c0:0f:0b:77:f0:f2:ea:0b:54:a4:d3:1c:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DB:9B:0F:69:9E:3C:74:E1:F6:C6:F9:54:C9:F9:DB:7B:3F:7C:1B
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:76:88:c5:82:52:0d:6d:1a:f2:72:45:0a:19:83:b0:8d:2c:
b9:b0:1d:37:2f:4c:97:74:b3:a9:9b:d6:e3:76:c9:70:18:d2:
da:af:db:cb:1c:49:75:c9:e1:9b:ab:d4:cb:2d:a0:79:b4:6c:
40:70:c4:c5:79:5e:8e:57:2b:4c:ee:2a:03:a5:13:aa:2e:49:
03:d1:c7:30:24:d5:5d:45:d6:78:5b:e2:0b:a1:ea:4e:d6:f6:
95:1d:9c:6b:b9:ac:78:e4:b3:d3:04:26:7b:10:bc:48:17:e7:
85:a5:ec:29:d4:cf:73:94:57:33:4d:2d:e4:6d:a6:f8:df:eb:
d2:b9:b5:fe:80:8b:9c:c8:d9:c0:54:f2:73:c3:c2:2b:03:9b:
31:d4:ef:83:99:41:45:30:13:49:b4:32:af:34:bb:5c:91:ed:
77:67:e3:ae:f1:64:da:bd:3f:1a:c3:77:b3:2c:de:14:26:4f:
8a:15:df:a9:88:e0:43:64:f6:ba:50:1e:fd:ff:ce:46:9d:a9:
14:26:49:10:01:da:b7:56:1f:cf:06:9f:a0:05:a2:92:56:5a:
5e:96:5d:cc:4f:a7:1e:f0:56:4e:d4:84:25:ca:ec:86:c8:5a:
a9:77:d1:50:ac:8b:41:f2:4d:13:59:c4:50:3e:99:9a:b4:8c:
d3:fc:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:38 2025 by rpki-client