Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: T8dT7cwiZmAvYtlg+iPq1yzGUg2wO5pOO1bAAEwvGT4=
Subject key identifier: EB:75:6A:2B:2D:18:6C:D0:95:90:31:6E:7A:F4:F8:49:02:59:AB:42
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 0198D84F7EBE458831A14502478D6B970DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0FA2
Signing time: Sat 23 Aug 2025 19:02:25 +0000
Manifest this update: Sat 23 Aug 2025 19:02:25 +0000
Manifest next update: Sun 24 Aug 2025 19:02:25 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: 4TiNWKjcimSIA0rJBAQYE1G++kNrbobNJWxvWitPAnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:7e:be:45:88:31:a1:45:02:47:8d:6b:97:0d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Aug 23 19:02:25 2025 GMT
Not After : Aug 24 19:02:25 2025 GMT
Subject: CN=eb756a2b2d186cd09590316e7af4f8490259ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:1a:07:ad:6d:b8:17:09:4c:4d:ac:93:5d:
d8:27:7a:bb:6b:e6:de:2e:d2:03:fa:c0:a9:90:65:
bc:6f:97:ca:ce:2b:65:78:17:c6:de:27:40:d6:38:
fa:7f:53:60:24:c5:67:15:fd:c2:92:d4:96:70:a7:
ba:f6:39:80:23:f7:23:2d:ac:8d:0c:17:87:5f:7c:
f6:f5:5c:5b:8c:06:42:77:04:22:e0:bc:d4:e0:1e:
93:35:c2:72:9d:e7:c9:81:eb:d8:a5:e2:29:5a:77:
dc:c5:fc:2e:78:f9:f0:31:ec:6a:db:c3:6e:69:de:
8b:20:aa:14:01:1a:bc:28:89:cf:d1:14:6a:a4:14:
b8:8b:70:c8:9d:e4:32:23:a1:1a:7c:94:e0:98:aa:
42:3e:8f:16:6e:b6:d7:1c:00:90:47:e3:c4:dd:73:
68:1e:a0:be:23:ce:74:8c:3a:73:96:4f:7e:5f:fb:
0e:ee:48:cc:5f:4a:4c:99:b5:a3:40:17:df:7f:6d:
3a:34:49:1d:10:aa:ab:02:ca:81:19:4f:7d:47:40:
0c:8d:59:d5:1f:08:2d:3a:97:fa:65:20:a8:55:d9:
0c:83:58:cc:16:f3:0b:b9:d9:fd:c8:fc:a4:c8:c9:
5e:3d:80:c3:a6:c4:76:1f:bf:67:03:f2:31:d9:fa:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:75:6A:2B:2D:18:6C:D0:95:90:31:6E:7A:F4:F8:49:02:59:AB:42
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ac:d5:e5:d3:d0:ba:c8:a7:47:03:c2:2b:59:1c:4d:fd:c1:
62:5e:ff:f8:9a:62:9f:a2:20:88:61:de:71:68:3e:4c:20:fd:
74:dc:a8:cc:05:00:a4:ea:2f:13:6e:df:9a:f7:f5:f5:ed:e1:
2c:f0:d1:1f:af:97:f7:2d:a1:6f:7f:40:65:6a:78:3d:d8:3f:
09:3c:51:c5:93:a5:e0:9c:81:27:bf:54:e8:05:58:95:49:04:
2c:6a:31:e2:10:89:31:34:02:b5:6c:4b:97:b4:97:c2:0e:06:
9a:06:97:a0:bd:27:39:0f:bf:45:1a:3c:fe:62:8a:36:82:9f:
bb:57:17:52:40:ed:1e:d4:96:92:eb:04:69:1e:6f:ec:15:75:
c6:bd:94:fc:9b:95:75:c7:f5:d9:b4:26:ed:a1:29:71:e3:ab:
76:1d:a5:82:c4:2f:f7:08:22:be:0b:09:3c:04:e5:04:a0:d7:
79:b6:f7:00:3a:ef:13:00:44:59:0a:76:79:20:6f:06:2e:e5:
6e:ac:3b:7f:ee:7c:dc:bb:92:95:9c:9b:da:10:84:11:6b:88:
23:7c:cb:19:0f:77:dc:e0:f7:d9:46:b8:61:34:d0:ca:85:e2:
5d:d6:1b:cc:37:ec:12:74:72:15:ea:d8:7b:d6:a2:a6:97:59:
1e:16:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:39:16 2025 by rpki-client