Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
File: zQwDKJL2la9ME_sKyoBD0Xsbl78.mft (raw, json)
Hash identifier: EUQBn7fSCfOygrSIRye+G0GAifctY/0wvI99sLG39bA=
Subject key identifier: 23:56:CD:CF:EA:6E:0B:48:A6:0D:F6:03:D5:C6:15:03:01:3F:CC:D3
Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Certificate issuer: /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Certificate serial: 0198D54DD0CBC004809A76FE2E79D5494711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
Manifest number: 09EB
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: zQwDKJL2la9ME_sKyoBD0Xsbl78.crl (hash: qQEUcQefYfP72QVUE0ato2NYLuCg1chnWJuJokfZEVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d0:cb:c0:04:80:9a:76:fe:2e:79:d5:49:47:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=2356cdcfea6e0b48a60df603d5c61503013fccd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:26:b8:37:ec:01:17:15:9a:b4:1f:30:96:
c6:a5:30:b1:0a:38:fc:82:81:57:a8:25:22:9d:24:
84:30:ac:9e:cc:44:c9:80:3a:31:22:fe:57:46:87:
a0:bf:df:47:db:1f:58:65:54:64:63:43:2f:91:6e:
b1:d7:38:8f:39:82:0a:b3:c2:fb:fa:60:ac:63:e4:
2f:c8:21:9a:59:fb:1f:d0:72:31:61:a1:30:24:01:
23:5d:7d:00:ea:87:50:eb:47:c2:a2:40:50:09:4a:
3f:54:d5:e0:80:b0:47:cd:d4:18:b8:6d:9b:f5:4e:
60:42:43:cd:8c:a9:d7:a1:ad:ed:da:92:8b:d1:09:
ab:1d:a8:e9:00:63:a4:ab:2f:de:76:30:01:de:3d:
d9:f0:a5:40:cb:65:a6:a5:9a:e6:f9:c0:bf:ed:6d:
97:d3:0f:db:d1:31:73:3f:66:27:b0:a4:a4:b7:f0:
e4:79:cf:68:59:12:2b:b0:d8:d3:97:62:49:53:45:
78:66:06:d3:13:80:17:34:f6:38:f4:6e:b6:ca:e8:
dd:09:66:83:95:8d:1d:30:13:25:79:3c:73:f8:78:
f7:49:28:e5:11:f4:df:4d:13:0b:e6:9d:2f:87:10:
66:82:3c:2b:f2:81:18:b6:45:b4:af:b8:13:8f:14:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:CD:CF:EA:6E:0B:48:A6:0D:F6:03:D5:C6:15:03:01:3F:CC:D3
X509v3 Authority Key Identifier:
keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:04:3d:7b:4a:cf:87:0e:07:16:fd:80:29:30:24:81:7f:4f:
64:16:b9:52:c9:58:29:99:56:6e:3b:37:df:52:0f:f8:ce:3e:
62:c8:66:a0:59:21:e5:ba:aa:f5:0f:c0:e8:a4:d1:2f:74:99:
4e:fe:0d:60:64:64:86:26:5b:52:3f:2a:76:32:16:b3:19:ba:
29:0d:93:5c:2f:98:95:94:31:d0:d0:fe:72:4b:bb:36:22:0a:
39:e0:ba:87:f5:ab:00:23:2c:b6:c6:f1:20:8b:8d:24:67:21:
b7:e9:a9:7b:5a:76:c2:9b:ed:c1:21:00:d4:2f:3d:96:b5:e0:
fd:ba:38:f8:99:54:2b:4f:d1:33:02:23:c5:09:d8:72:39:2d:
3e:71:0d:b5:69:71:76:a6:c8:c9:ac:bd:7e:3b:c9:7a:11:cf:
4a:37:a7:94:ab:a9:7c:6e:a2:68:c2:b2:46:19:99:f8:7a:cc:
31:00:05:a1:30:7c:ba:ee:27:38:67:2d:56:d1:1e:eb:5e:2c:
0b:03:15:78:49:10:ab:fa:c4:fc:b0:3f:d1:47:d1:71:89:80:
02:c5:a2:20:b7:db:59:cc:16:d3:03:5b:7d:a8:92:55:40:5d:
36:25:e6:1a:41:53:b5:1d:05:87:27:e5:87:df:16:96:a9:51:
97:f6:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:51 2025 by rpki-client