Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: s1+kwuOVigJiaEBybAisgqnmVtGLu2R4DnndfU3lb34=
Subject key identifier: EC:94:54:81:90:F2:F9:DB:48:A0:EF:FB:5F:5F:D1:7E:C6:09:79:F4
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 0198D6CCDC8ABDC5834A70350E5268776DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 0DDC
Signing time: Sat 23 Aug 2025 12:00:06 +0000
Manifest this update: Sat 23 Aug 2025 12:00:06 +0000
Manifest next update: Sun 24 Aug 2025 12:00:06 +0000
Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: w9blLnrQdkgV6s1asFv0MvisReMqacXkoy4luubDsCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:dc:8a:bd:c5:83:4a:70:35:0e:52:68:77:6d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Aug 23 12:00:06 2025 GMT
Not After : Aug 24 12:00:06 2025 GMT
Subject: CN=ec94548190f2f9db48a0effb5f5fd17ec60979f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:40:8e:fd:82:a9:f6:5b:e3:fe:54:c7:fa:
b2:92:30:a5:e6:33:1b:bb:25:61:fd:9a:fd:f5:c0:
6d:b3:3e:02:87:75:51:80:54:ae:d6:8f:06:71:ad:
7c:ad:ac:01:80:83:17:ad:6d:52:15:0b:c6:c5:47:
81:10:ed:58:73:a7:5b:d7:8c:99:fa:ae:a1:ea:af:
a8:27:ae:18:98:17:3d:ff:9f:3f:ff:f4:f2:5f:c7:
f1:c2:c8:76:1f:ef:85:fb:3f:ef:2b:08:5e:1e:2f:
18:10:a5:79:61:5b:85:25:9a:06:1e:3c:5c:33:e3:
75:06:ce:03:e0:b4:1e:9d:86:81:b2:a8:35:3b:05:
30:7a:74:79:03:dd:c1:05:65:a2:71:28:34:0a:f1:
86:7c:d2:6a:86:ff:3e:bf:9e:3f:44:c5:20:4a:24:
49:ee:1f:5d:6a:05:eb:e0:b0:ac:a4:5b:68:d5:f2:
ce:62:03:24:ef:8d:f1:af:1c:f5:fe:b3:64:10:45:
ff:ab:74:d3:e3:b8:5a:77:d9:71:d4:bb:fa:54:1a:
18:02:4a:3c:69:18:59:c8:13:91:0d:d3:9a:92:ae:
d0:44:99:c8:e8:b1:5e:49:88:40:4c:4d:ff:7c:d0:
79:90:b8:5b:6d:c6:23:5a:cc:5f:b9:eb:e9:de:bf:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:94:54:81:90:F2:F9:DB:48:A0:EF:FB:5F:5F:D1:7E:C6:09:79:F4
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:98:1a:03:ff:2b:0d:08:94:a2:b5:d4:39:af:83:56:92:
77:9a:70:aa:2c:01:4a:ba:77:f7:a4:25:79:c2:f0:4f:50:cf:
95:51:5a:4b:2d:03:7b:54:31:88:0a:d7:b6:91:f1:06:b2:02:
3b:f2:a7:2b:49:d6:66:96:f7:ea:54:bb:97:d7:43:54:de:cf:
0b:60:c8:b7:06:ef:af:72:a1:61:f8:7b:a9:43:3e:2f:41:15:
b0:ed:44:ca:61:75:d4:ef:21:04:b7:2e:96:55:93:ef:e4:49:
20:1e:a3:2a:67:60:61:e4:d3:04:63:21:9f:3e:9e:2a:61:20:
9b:0a:f7:49:ed:3c:94:e6:0e:26:78:5a:80:48:f8:aa:00:6b:
fa:a0:a2:a9:cf:43:af:32:8b:9c:f5:de:16:ed:11:aa:a5:0f:
60:79:a1:0c:e7:67:87:41:f3:60:fe:69:b2:a9:8a:82:3a:35:
e2:38:2f:b0:1f:28:87:10:21:ea:26:f4:b1:e7:b3:80:a7:5d:
70:31:05:62:24:1e:4f:b7:ec:c8:68:cd:57:69:ce:a1:ec:9b:
6c:29:01:62:9c:6d:10:07:f9:62:ca:0e:7a:ff:2c:ba:3a:2f:
05:04:cc:c2:e9:da:b8:50:50:9e:d8:5f:4a:df:4a:d9:39:a5:
50:ae:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:09 2025 by rpki-client