Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: 3+L7NHJkMHKmg3Lb0PJmmgCxjln9OpQXmg+Gq84GakY=
Subject key identifier: 07:F9:D1:31:C8:86:78:62:51:63:C8:E5:90:CC:30:53:F9:18:6E:72
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 0198D661617562E6BCB1A52A3D364B2EE2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:42 +0000
Manifest this update: Sat 23 Aug 2025 10:02:42 +0000
Manifest next update: Sun 24 Aug 2025 10:02:42 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: v4gFOYiXQp+VzA06cTqGwdto+Z8G541KCHHYbzx4T6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:61:75:62:e6:bc:b1:a5:2a:3d:36:4b:2e:e2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Aug 23 10:02:42 2025 GMT
Not After : Aug 24 10:02:42 2025 GMT
Subject: CN=07f9d131c88678625163c8e590cc3053f9186e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:8f:35:84:6e:b7:09:13:8b:ed:17:87:b7:
6f:6d:8d:49:96:13:f9:11:e4:3b:05:cb:28:b5:86:
d1:97:23:42:34:8f:3e:be:ec:06:c4:27:bf:f8:8d:
c5:d3:e5:01:6e:28:97:c9:9d:09:02:49:9a:ac:90:
6f:8b:32:dd:6c:05:90:e8:a0:53:bd:d9:3b:0e:89:
b2:b6:8f:10:eb:59:73:37:cb:0e:9b:b1:44:6b:9a:
2f:fa:f1:cc:eb:98:17:3e:73:19:98:e3:65:97:d3:
10:eb:f9:ee:01:74:12:c8:3e:1b:5b:c1:ff:4d:6a:
c8:c8:00:21:a2:0c:72:d3:90:34:29:b5:2c:2c:2c:
cb:6a:27:5e:05:14:16:6a:92:11:ba:80:ed:1a:18:
e7:fe:61:b7:0e:4f:13:3b:80:8b:18:be:8e:db:b9:
b0:1a:12:d9:c7:dd:c1:de:06:81:7e:d7:83:0c:b2:
a2:c3:10:21:c9:ef:ae:71:cb:f2:51:18:15:dd:e9:
87:58:55:98:c8:e6:0e:04:a5:53:d1:3b:9c:7d:6e:
1d:09:05:c5:11:4d:09:f6:2d:16:9c:69:f8:58:55:
65:7b:79:89:5e:a7:6a:00:06:1d:13:91:41:7c:a8:
8b:57:bd:ad:b0:45:48:5e:19:35:c2:db:10:a8:4d:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:D1:31:C8:86:78:62:51:63:C8:E5:90:CC:30:53:F9:18:6E:72
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:07:00:18:aa:46:73:0e:b1:69:1a:a6:84:8d:ee:6b:2b:36:
74:27:d4:5a:23:4f:78:b5:95:8d:10:40:ef:5a:8b:96:f9:93:
65:10:b8:03:fe:ed:a6:98:9f:0b:bc:26:fa:fc:fd:ca:59:0d:
3e:32:e5:1c:1f:1f:be:aa:72:af:e2:42:83:2e:bc:b7:81:1a:
02:7c:10:d1:c0:92:a1:3c:dc:18:18:3b:47:2c:6f:8f:95:37:
e8:0a:04:e9:0b:6f:dc:45:11:a8:1b:e9:9f:05:6b:4a:51:1a:
23:7a:3d:d4:ec:12:8c:51:3c:94:07:23:72:bf:cf:4a:3b:e5:
13:27:69:50:a0:28:e8:13:84:6f:8f:7b:5e:cb:b2:f6:8b:bc:
b9:c7:b6:3b:46:3f:8b:ba:b8:68:5d:d7:24:6e:91:aa:40:9d:
49:de:ba:76:cc:91:02:0f:e2:47:a9:e8:24:92:43:05:e7:7e:
76:05:a8:b4:92:3d:24:bb:09:7f:9d:c8:a6:24:31:4d:47:03:
c8:7e:da:8e:f7:82:73:40:bd:36:41:d3:a7:e3:a9:c9:d2:63:
a0:5b:f6:19:62:db:8e:b6:3c:1c:e7:2c:90:14:e6:ff:36:03:
e8:b4:0e:95:fe:44:1d:42:39:12:09:06:e9:6f:1c:b5:37:4a:
8b:7f:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:58 2025 by rpki-client