Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: P+KnTbUKsHZDAJADaELT+6SBAb4o0ewT5NDaib4KLuc=
Subject key identifier: D4:5D:CB:89:48:DC:F3:DF:1B:B8:3B:17:26:1D:97:2E:10:76:54:10
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 0198D5833DD6290FA85DE3AE7B6DB77D4117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 05AB
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: f7ak1NEr3cfZCwjjC6E/nIWijkLtWZ4hDKJEa9ye844=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3d:d6:29:0f:a8:5d:e3:ae:7b:6d:b7:7d:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=d45dcb8948dcf3df1bb83b17261d972e10765410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:2b:ab:aa:b3:7d:10:34:86:91:ea:fd:e5:
95:08:48:fa:93:8c:65:b4:1d:ed:8c:22:06:f6:d8:
7d:18:e9:28:c5:1c:c6:b1:c3:14:3c:c2:af:db:f6:
f8:51:63:2f:2c:5e:10:9e:f8:b1:b9:46:7e:53:17:
79:57:11:90:1d:a8:27:59:71:e0:ee:0b:f3:5a:36:
17:f0:a5:fa:d0:90:26:a4:c0:ba:7b:94:0b:a3:b4:
c9:e8:66:a0:01:b9:53:e9:c1:5b:2b:d0:53:0f:61:
c1:fa:51:65:57:e9:82:72:8c:fe:f5:8c:11:ae:de:
a3:5d:1e:a1:48:4c:19:c1:ff:23:1f:cb:47:a1:9b:
d2:3e:e0:c5:d5:b4:0f:37:95:c9:b7:99:e1:08:6f:
00:ec:2c:8f:74:06:4c:fd:85:79:4d:e0:cb:dd:e6:
21:e6:5f:c9:e3:8f:fa:9c:6c:93:2f:d3:b8:13:66:
41:eb:3e:53:59:e9:98:28:66:c7:d6:f7:19:03:00:
73:05:b8:fa:64:60:19:4c:cc:69:9f:a7:fc:a1:d7:
41:44:3b:2b:fd:9b:d7:69:b2:96:62:87:5d:63:e3:
52:78:cf:26:42:3c:cf:59:2a:a7:1a:17:c4:ec:eb:
af:76:df:cf:3c:ed:2d:e4:c1:65:a7:13:7e:0a:bd:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:CB:89:48:DC:F3:DF:1B:B8:3B:17:26:1D:97:2E:10:76:54:10
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:36:15:53:46:50:59:14:61:c2:c7:01:99:a9:3f:a8:2a:9d:
73:b8:e9:22:22:17:6e:1e:85:42:37:50:8d:13:e5:d0:37:3f:
5e:4e:77:12:3d:81:e3:cb:d6:4b:97:bb:b2:08:a0:2d:16:ca:
45:b5:9c:60:f2:29:d5:87:b8:de:76:cd:ef:81:74:d6:a2:88:
56:ee:67:be:a9:1d:85:a4:9f:d1:ff:35:6f:d3:b9:ba:74:e7:
08:0d:5f:7f:a2:97:ae:e2:91:e5:80:75:b1:00:19:9b:51:06:
4e:e3:ca:de:e1:62:98:d9:78:23:7c:d0:9d:33:3b:22:22:8d:
8f:2e:89:0e:91:75:2b:b8:52:2c:8f:c9:f9:8f:ba:88:ba:4b:
6a:d1:20:ed:ce:f5:14:e4:9b:41:57:a0:1d:52:a9:b2:c6:11:
ab:52:3d:aa:96:e9:06:3e:84:c5:18:77:48:89:88:2f:11:ce:
20:43:d7:82:af:e9:13:2a:b0:25:01:77:13:4b:20:7a:77:95:
e0:07:0f:97:42:9c:97:a4:4c:fa:69:e3:8b:2c:d4:57:00:b4:
9b:ce:e2:94:62:71:dc:96:23:d5:6a:47:72:31:1b:cf:8c:82:
e1:37:b2:7f:a0:1c:46:12:9d:bc:3f:08:f6:a1:68:a2:a1:d3:
16:66:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:49 2025 by rpki-client