Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: eXu4+aaBlNecLj7WpbNwxZt8qiavGB3h7AD29jaMS+M=
Subject key identifier: EA:22:98:2D:FE:59:4E:58:15:11:86:52:24:63:B9:1F:72:5F:18:88
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 0197B7EA1C78F6F4CC873BB67269C9F16330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 04D2
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: cQtlrpt61aSaPzgs56J+ZQdoJiJ31S3b001gKcMbzB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1c:78:f6:f4:cc:87:3b:b6:72:69:c9:f1:63:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=ea22982dfe594e58151186522463b91f725f1888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:77:d9:de:72:78:47:df:1c:c9:af:b5:ff:
57:26:c0:d8:c1:d8:44:0f:a0:e2:1c:bb:6a:bd:97:
41:c2:62:4d:7f:e4:20:f8:ba:53:62:a7:59:03:12:
dc:a0:c4:ba:7c:ed:e9:a1:63:8d:56:5e:db:5a:98:
64:ed:c0:50:31:50:6f:87:ed:bd:37:7a:3a:bd:9f:
b5:2c:a9:75:f9:bb:e0:ee:a8:a6:17:90:37:5d:12:
4f:c5:96:67:b4:83:dd:43:b1:58:12:2c:37:06:37:
13:7b:62:df:d5:ee:f0:bb:5f:00:66:f2:fd:a7:c2:
7f:9a:63:b0:20:e8:1e:8e:47:5a:58:d1:cd:a3:04:
d2:3b:6a:b9:a2:82:27:a6:73:db:48:01:2e:68:32:
59:ce:0b:77:36:d1:e0:f7:a4:d0:12:50:11:59:b3:
34:39:fb:56:5d:47:e5:d6:30:e6:db:ef:9e:09:55:
61:d0:aa:62:ae:b0:1c:d1:fd:68:2e:36:68:a5:28:
d1:09:3e:7a:6b:da:da:2f:6d:a1:11:d9:07:d3:90:
a5:ea:65:8b:5c:02:bb:8e:1c:5d:67:de:f9:a6:b0:
ff:12:30:99:3a:b7:6e:64:3e:3f:53:2b:18:97:60:
a1:5c:40:cf:af:6d:62:53:1f:8b:89:04:3a:59:84:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:98:2D:FE:59:4E:58:15:11:86:52:24:63:B9:1F:72:5F:18:88
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:19:0f:23:4e:2b:b6:c9:84:b8:d2:f8:0d:41:54:d3:16:19:
08:21:25:a9:83:e3:06:cb:ff:6b:d9:35:db:0f:ca:c0:f6:6b:
d3:e6:f2:26:e3:39:29:02:96:98:1e:3d:e5:ca:1b:d8:a2:42:
b8:ae:aa:61:61:3d:5c:6b:95:03:85:9b:a3:e3:58:18:c6:13:
06:5f:9d:70:02:91:8b:ea:a8:4e:b1:c5:ba:13:fe:1b:74:fe:
16:17:18:fc:40:40:3f:b0:7f:96:59:a4:66:52:13:29:06:db:
bf:fe:d7:f7:79:47:62:83:b4:36:b4:81:1e:30:65:72:e0:80:
a9:67:62:a8:cc:ba:c7:69:96:bf:73:33:d8:11:aa:18:6d:fa:
df:58:fb:76:66:ee:ff:a4:af:e0:f9:73:ff:5a:50:f1:38:d3:
ba:63:c2:24:30:05:41:26:57:9d:ed:43:41:50:4b:54:ce:c9:
31:64:38:c7:3b:a2:ae:52:75:96:57:6a:54:cc:97:f8:2e:81:
c7:70:0b:ef:16:d7:d9:fc:7d:dc:85:41:46:f8:9f:22:4f:eb:
2f:8b:5a:6d:37:5b:52:e2:09:1d:16:8d:5c:51:8c:a1:5c:43:
ac:4a:e2:e1:2c:95:bf:d4:08:1d:99:d9:8c:1c:a6:8e:ce:a7:
32:81:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:16 2025 by rpki-client