Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: KKWmGXCvVhSIwNjUOb5eNafsj2P7PoWYlRQLYloayFs=
Subject key identifier: 04:53:24:D0:F8:C4:2D:CD:76:BD:93:E9:EC:5F:80:BF:02:F5:6F:5E
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 0198D5BBBFD2A5EEE5E8E7AB17738B43CF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 10F7
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: XgynVTD9Y0gh9uVPRa78xyPXNx/btp1FzpzMLGla50g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bf:d2:a5:ee:e5:e8:e7:ab:17:73:8b:43:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=045324d0f8c42dcd76bd93e9ec5f80bf02f56f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:2a:a5:a9:6f:e8:db:d0:a9:91:ee:b0:68:
db:45:c4:de:7c:54:19:eb:6f:26:c0:58:b5:d9:80:
7f:f1:50:ba:41:2d:c2:19:eb:e1:d4:35:c0:c0:aa:
e8:d5:e4:e4:7b:c3:68:46:eb:d9:3c:50:fb:65:85:
30:96:bb:2f:bb:03:e9:52:ec:55:ac:ed:c3:9d:50:
02:94:8b:f1:3e:c0:81:77:55:8f:96:b7:86:f7:b2:
bd:e8:00:52:99:8f:c9:9b:25:5e:fa:b1:d0:e4:ef:
0e:2b:e9:8a:08:68:5e:d1:4e:b3:26:13:43:da:2f:
1a:00:10:68:98:c6:82:7b:d0:54:bb:60:e5:7c:99:
1d:5d:bc:54:48:5b:88:85:30:17:f5:b5:a8:3f:9a:
e9:da:49:a7:59:80:06:a3:00:a7:1b:de:07:d8:4b:
ad:74:af:a5:4a:90:93:8c:77:35:35:64:9f:12:ed:
42:05:c2:be:19:c9:b5:cf:4e:4e:60:de:a1:d7:a8:
e4:23:73:3f:d6:c1:66:c6:41:16:0a:39:f7:ce:5b:
e3:0e:c3:fc:81:fe:15:4b:d0:00:af:e3:7f:87:31:
f7:54:e0:9b:7c:ea:fc:da:37:3f:33:6f:3c:c9:ce:
08:14:fd:df:2b:63:56:8a:70:79:26:8e:af:84:06:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:53:24:D0:F8:C4:2D:CD:76:BD:93:E9:EC:5F:80:BF:02:F5:6F:5E
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c3:39:4f:5d:09:5a:3b:d5:24:d9:90:2d:1e:99:73:53:3d:
1a:44:a2:23:78:c9:2b:a3:56:d0:58:52:86:4f:97:4f:58:0d:
47:80:dc:86:65:9f:85:90:6d:ee:39:11:21:8d:49:58:b1:49:
80:3a:13:79:8d:59:53:8c:2a:89:9b:15:15:8d:f2:54:5d:4e:
92:6a:75:d1:86:14:c8:0b:b9:f2:76:1f:79:2c:22:71:94:7a:
ce:18:49:7a:75:17:f9:d1:26:93:bc:d1:e3:ca:87:6d:9d:0e:
a9:29:c4:30:78:6a:5a:f3:53:fa:2e:b7:b9:5f:c3:41:d5:16:
39:f2:43:0d:6b:2a:7b:24:da:70:18:e6:0f:05:38:91:25:c4:
3f:bd:da:0e:08:88:cc:02:fb:70:a1:29:9f:a3:a4:d8:20:39:
6b:a1:fb:22:2d:85:7a:d0:cd:2c:c1:0a:4f:c9:26:e2:15:27:
bb:15:78:ea:af:e4:f2:22:ee:2d:9c:c8:72:68:46:51:2b:94:
43:66:c1:17:62:f8:98:27:e7:0b:2e:cd:f2:05:1b:90:3f:54:
c2:eb:4d:c0:3d:69:db:a7:ff:93:0a:c7:b9:a0:ae:98:25:0f:
71:51:4b:9a:29:3d:d0:f0:50:1e:8e:6d:cb:53:a5:5c:25:e4:
95:f2:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:50 2025 by rpki-client