Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: /YueIz6eo+PUsHWjFdxOQeV+AeuI7/oc+Sx49gG4chM=
Subject key identifier: 9E:54:85:B3:5C:7B:53:E0:DE:6A:D4:DD:55:EB:5A:81:4B:49:5A:8B
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 0198D5BBDCCA72A2EC78B0CEB5A4AFED5A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 0566
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: W+CdtbRNyXr7NzM/pauRtgMyGuQWed5xGBwQq/COg8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:dc:ca:72:a2:ec:78:b0:ce:b5:a4:af:ed:5a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=9e5485b35c7b53e0de6ad4dd55eb5a814b495a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:8d:70:08:13:ee:a7:3e:24:9a:ac:c0:e3:
58:5a:30:eb:43:a2:ac:cf:16:35:da:5a:5f:21:e4:
ff:4d:92:0d:e8:fd:62:ce:79:e4:d5:5a:9c:30:46:
29:09:a1:aa:ff:e2:d1:09:44:01:76:2f:b2:3a:b0:
01:29:43:ba:7d:fc:04:c5:13:e0:17:83:1a:25:12:
46:4a:01:26:63:22:a7:3b:e5:4b:a4:8a:a8:8f:a4:
30:c0:15:8e:d0:fd:99:95:aa:c7:ea:9b:ba:6b:d2:
99:89:9c:1e:7d:f5:5d:d3:68:cb:09:86:07:ed:45:
57:6c:91:b7:96:23:12:1a:81:67:ca:34:cf:60:bb:
98:e0:ec:c8:c5:56:eb:87:17:1b:c0:62:01:88:35:
62:c1:76:af:27:42:78:3a:34:9c:77:8b:bf:53:41:
9e:89:73:bb:8a:4b:a5:15:0e:a0:c9:0b:99:69:a3:
fa:a1:04:88:f4:a6:8f:2e:d5:c8:16:a8:d0:aa:dc:
8a:ed:2b:db:61:b1:21:a1:bf:51:1a:dd:9c:16:e2:
34:26:35:c0:48:10:51:31:16:60:eb:b9:78:20:c2:
69:51:7f:47:9a:49:8b:3e:ab:b2:f4:7e:83:d0:30:
c1:b1:34:d4:8c:63:13:a1:98:db:16:7a:40:ea:ef:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:54:85:B3:5C:7B:53:E0:DE:6A:D4:DD:55:EB:5A:81:4B:49:5A:8B
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fe:3a:5e:1c:e7:49:ae:05:37:9c:61:58:75:fa:6e:00:eb:
0d:79:7d:52:d1:b6:a9:a1:6c:a3:6e:ee:78:bb:96:97:5a:d3:
d3:b3:30:2c:02:0f:9e:b9:65:5f:79:45:e4:de:85:54:bd:ea:
96:44:c4:52:8f:aa:f5:10:84:b9:2a:f2:a9:ef:21:55:4f:15:
c6:0a:11:1c:74:9c:ea:3b:2e:95:87:54:cd:11:29:6c:c5:81:
59:e4:52:07:d6:a7:cf:1d:a4:b9:77:66:b2:31:f9:c0:9c:4c:
7e:ef:75:21:b2:30:fa:dd:c5:97:4c:1f:38:db:f7:98:ce:a4:
1e:49:94:ca:ed:f9:8d:85:49:df:ff:28:ae:41:e5:35:4e:1b:
e2:5d:49:43:a9:5a:bd:2b:47:17:9b:85:e2:89:d7:df:ea:19:
bb:59:4c:cb:45:8f:a8:26:b7:1f:76:c4:29:6b:e1:d0:21:25:
05:5a:23:1b:0c:2e:9a:bb:73:28:a1:a0:35:04:1b:83:4e:22:
e7:10:3e:57:9f:a3:c0:39:16:79:cc:6f:06:ff:37:e3:4c:34:
3c:56:9b:56:7f:6b:8a:cb:dd:44:fd:29:50:9d:8b:ae:e7:0c:
90:40:cd:0d:d8:8c:63:2d:11:ae:9a:c2:19:be:87:1e:54:d1:
f8:7c:c1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:35 2025 by rpki-client