Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: 9Xjo1pVhjDDZm71XIShIwGgg1XZhyviosffFA46KEmQ=
Subject key identifier: 8A:3A:DE:ED:18:CE:46:77:5F:7B:06:37:FF:79:EE:4B:99:AB:E8:A9
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 0198D4737E50B5ED7F30D999395FA782B1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0FD6
Signing time: Sat 23 Aug 2025 01:03:15 +0000
Manifest this update: Sat 23 Aug 2025 01:03:15 +0000
Manifest next update: Sun 24 Aug 2025 01:03:15 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: ft6z+nwtdkjQ0MuEycNaqngcvA3a5qzRjWkTP7k8IWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7e:50:b5:ed:7f:30:d9:99:39:5f:a7:82:b1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Aug 23 01:03:15 2025 GMT
Not After : Aug 24 01:03:15 2025 GMT
Subject: CN=8a3adeed18ce46775f7b0637ff79ee4b99abe8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:ec:4c:06:4c:3a:56:af:d4:44:31:d4:fa:
2b:0a:19:37:fa:5d:5a:e3:20:5b:fd:3b:b1:7b:45:
56:ab:63:32:f8:ba:5e:f6:4a:74:07:ae:1e:00:eb:
8d:52:ec:22:1e:af:db:b3:66:5a:b3:04:48:05:8a:
24:bc:d1:30:de:2e:60:fd:16:29:c1:08:83:b9:86:
f3:ef:3f:62:3f:fa:62:8a:1d:dd:bf:70:cf:5d:4e:
48:d0:d2:76:d1:0c:b1:3f:2f:68:2b:04:c7:a8:7c:
a3:2c:16:45:c6:ff:d8:a1:cd:6d:de:45:6e:62:40:
34:3d:5e:0a:bd:aa:bb:dc:8d:22:e6:a2:0b:68:cc:
ea:83:be:1d:5d:eb:07:13:a4:bf:4e:21:c7:0f:07:
fc:89:c6:51:33:a2:9a:e1:a5:2f:0e:6d:53:2b:cb:
fc:ce:37:ce:20:4d:bb:49:63:0c:0a:a6:39:01:17:
4a:42:c9:61:35:30:49:36:25:b4:77:ce:f6:db:3c:
c4:84:c3:c9:f5:ff:09:5e:32:b7:a6:68:54:d2:ac:
fd:b3:ea:a8:a4:79:ff:4a:ca:a3:4d:cc:9d:c9:15:
60:27:84:55:14:0e:9c:1e:9d:c4:98:24:74:d5:42:
05:26:ea:48:87:2c:78:49:bd:6d:ee:4d:f9:f7:f8:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3A:DE:ED:18:CE:46:77:5F:7B:06:37:FF:79:EE:4B:99:AB:E8:A9
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:df:0c:18:12:7e:dd:b5:6b:07:f2:f7:8c:42:5c:7b:3d:a1:
84:69:93:fa:02:4e:78:c2:e6:a9:58:7c:31:88:da:a2:65:ac:
69:28:08:0c:67:98:41:f9:e0:44:20:d3:ea:07:7b:e0:7d:18:
af:50:20:13:23:b2:a8:6e:d6:2c:de:10:56:29:43:1d:89:b1:
bd:c1:c5:89:ce:ec:4a:75:75:62:4b:70:64:4f:d9:7d:60:fd:
8f:91:86:88:ff:66:ab:7c:d2:25:38:1d:93:85:63:67:f7:ed:
ee:44:75:de:b9:06:0f:50:df:76:41:f0:9c:ce:22:4b:67:96:
6c:2f:83:d0:2e:74:b7:2f:44:05:e5:27:1b:71:cf:d2:0c:33:
f7:85:da:34:7a:ff:ed:91:e0:8f:0c:03:72:ec:c3:a3:1f:14:
fa:41:5b:52:d0:d9:9e:77:0d:e7:b9:53:47:51:be:52:35:c9:
27:06:05:f9:43:09:5f:01:4a:a8:c9:83:0d:3a:e4:c8:45:d9:
df:12:35:5e:c8:4c:bc:1b:b2:82:31:ff:88:03:4a:a8:7d:44:
5e:63:8c:38:4a:62:f6:44:73:93:4b:a1:bb:fb:e3:9c:9d:19:
8b:de:84:f2:79:ab:6b:dd:81:22:2f:b9:89:a9:47:bd:0e:9f:
ca:de:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:47 2025 by rpki-client