Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: ep4Ypg55oL5Gqnyw2H06rgA/gbbnvm7wkYNnrEwxWzI=
Subject key identifier: DB:75:54:60:CC:4E:67:50:B0:97:84:91:89:55:EA:7F:79:9F:FE:B0
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 0198D73B5EBA1ACC7217F0EEF130C5822F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 0E14
Signing time: Sat 23 Aug 2025 14:00:48 +0000
Manifest this update: Sat 23 Aug 2025 14:00:48 +0000
Manifest next update: Sun 24 Aug 2025 14:00:48 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: aEM8mpCUWxLXldyohn2DGyGkGf0/jksQqAJNERogS1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:5e:ba:1a:cc:72:17:f0:ee:f1:30:c5:82:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Aug 23 14:00:48 2025 GMT
Not After : Aug 24 14:00:48 2025 GMT
Subject: CN=db755460cc4e6750b09784918955ea7f799ffeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:c1:89:07:6c:3a:05:dc:27:fe:b0:ec:6c:
06:35:d0:ec:4a:8b:e8:24:8d:8d:00:aa:07:e4:70:
9b:a0:bd:30:ca:c8:27:6e:fa:0c:1b:52:3c:d7:fb:
18:ae:13:46:cc:7f:09:61:05:8a:b7:c5:a8:1f:0e:
f2:2b:f0:a2:15:99:e4:c3:03:3e:ce:05:83:bc:6e:
61:a8:9d:95:1c:fa:3b:80:ad:ed:b5:1e:06:e3:7e:
17:e5:99:49:fd:0c:f7:6d:cf:10:42:2e:71:32:17:
55:bf:68:44:90:9e:e7:b5:ce:43:b3:94:b7:26:6c:
1b:64:50:6b:53:0e:e5:c1:5e:43:a5:15:ec:67:90:
7c:fe:86:f1:b9:6d:62:cd:f3:6a:c6:95:79:a7:66:
47:91:57:16:8e:59:67:3c:13:27:a0:af:a3:61:6a:
76:b6:4d:ef:a7:3d:80:aa:c0:6f:71:a8:d0:26:f8:
f4:d3:55:7e:11:98:6e:e4:45:64:80:0b:3f:c9:00:
ce:96:d8:e8:23:9f:61:c2:47:cf:ff:74:ba:0f:03:
e0:05:9a:ff:8a:9e:58:60:8f:dc:5d:f9:43:4d:92:
97:e8:a3:60:26:27:a3:95:81:fd:28:36:28:43:7f:
98:df:7a:d7:43:e3:a0:45:d8:1f:a5:0d:04:ab:2c:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:54:60:CC:4E:67:50:B0:97:84:91:89:55:EA:7F:79:9F:FE:B0
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:44:b3:26:e2:2b:09:88:22:00:9b:b9:34:4b:14:48:c3:c7:
69:79:92:07:fa:ab:1f:fc:a6:96:d1:22:dc:68:a0:dc:8a:30:
ec:5a:6e:89:9b:2a:c0:4c:66:33:a8:5e:fd:f2:28:f5:32:05:
e0:29:26:90:7a:d0:e0:fe:7f:40:23:cb:44:8a:48:68:ec:04:
64:6a:5f:6c:64:a1:7e:be:5d:18:f6:e9:4e:8c:7f:e3:06:1e:
bf:87:d4:16:4d:dd:be:8e:ba:b5:92:6f:c6:24:04:6f:55:49:
5b:85:2e:c3:5e:2d:4e:aa:52:a8:d9:f2:a0:72:4f:0c:e9:65:
7b:94:97:3c:f8:dd:93:1b:36:e7:5d:ee:8a:4e:44:eb:5e:18:
12:9a:f3:02:2d:2a:c8:50:32:00:03:dc:b4:0a:53:f3:16:a1:
b1:6e:58:10:09:33:d1:ae:ac:4d:22:f8:42:f4:f3:d4:f2:4b:
ee:63:00:a9:7e:63:9e:4d:cd:8e:f1:5c:06:39:fe:a9:c9:b5:
24:aa:19:5d:dd:2e:a1:5b:99:3d:14:e3:92:90:da:de:54:59:
95:d3:d2:41:e6:eb:e0:1c:99:20:5f:44:59:0e:0f:6c:09:79:
13:b7:b6:80:39:f4:3b:46:de:59:4f:4f:3a:b0:76:8f:cb:64:
28:b3:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:46 2025 by rpki-client