Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: jlLfmm4NQOivHzotGn4xAioenjPJtIY9meMzbsBhydw=
Subject key identifier: 3D:1B:F9:5A:A8:08:30:58:22:CB:8C:04:8B:E1:B7:09:2C:15:39:77
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 019A0290C9517DE2F83C9DCCC73B13E8881D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 16ED
Signing time: Mon 20 Oct 2025 17:00:34 +0000
Manifest this update: Mon 20 Oct 2025 17:00:34 +0000
Manifest next update: Tue 21 Oct 2025 17:00:34 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: MZSvp1FoVGv29nKlf6K4v6Hegvb6bl+qg0tNSt8c1sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:c9:51:7d:e2:f8:3c:9d:cc:c7:3b:13:e8:88:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Oct 20 17:00:34 2025 GMT
Not After : Oct 21 17:00:34 2025 GMT
Subject: CN=3d1bf95aa808305822cb8c048be1b7092c153977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:d7:d8:7a:85:5d:59:3f:09:3b:ef:7a:18:
19:61:92:a5:3d:2b:85:c2:77:45:e6:65:a1:91:10:
0a:5e:d0:88:71:2f:8b:90:6e:45:66:fb:d2:01:86:
40:f4:02:97:a5:ab:d2:9b:35:df:97:3f:bf:5b:af:
7f:f6:24:c5:68:3f:f8:8f:bd:09:5f:17:28:2e:6b:
12:e0:18:df:86:e9:7b:93:11:4f:3c:d1:02:f7:26:
d0:b6:4c:aa:79:f6:a7:e4:6f:dd:5f:4f:9a:8e:31:
74:67:18:76:db:e7:8e:c2:01:a5:da:b7:a3:b0:97:
b2:ef:dd:06:88:3e:bb:06:a0:0c:25:a5:59:e2:7d:
a7:28:9f:5e:b5:1c:b9:03:6f:8d:22:93:8f:52:39:
6c:f9:8b:f2:1e:81:c0:6c:7f:df:50:10:64:02:3f:
f0:b6:40:ec:33:5b:d2:aa:b4:f2:d2:39:1a:88:5d:
c2:7a:5c:ae:50:6c:d2:5d:1b:6a:30:ea:dc:fb:cf:
1b:3d:cf:e4:e0:89:04:25:25:72:9e:29:d0:ab:17:
84:20:30:00:f8:e0:71:a0:e2:51:0e:93:bf:9f:6e:
f9:a7:7b:81:14:e3:e0:16:a2:e1:d8:44:37:cf:d3:
d7:51:e7:43:37:b4:92:0c:41:3e:d1:26:ae:75:5f:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1B:F9:5A:A8:08:30:58:22:CB:8C:04:8B:E1:B7:09:2C:15:39:77
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e6:f0:d6:4e:bd:95:cf:99:67:b1:f9:69:66:4a:f8:42:25:
db:b5:49:d2:6d:b5:0f:2c:56:24:a7:ed:9f:c8:0c:2a:ae:60:
7b:49:27:8b:8e:a5:8b:70:cd:0c:c0:98:81:63:b6:03:01:44:
1e:5c:17:3c:10:99:ad:3f:8e:2f:f0:63:64:05:7f:ef:8a:2e:
b3:6f:5c:e6:22:0e:44:c3:6e:8b:72:dd:fc:bb:ac:71:d3:fd:
88:d8:69:69:43:72:d4:f2:30:2f:8f:46:d9:27:98:ad:af:f8:
dc:eb:c6:20:03:e1:ed:6a:05:81:57:54:b9:27:3a:f7:43:a9:
bb:f2:46:e3:49:c2:39:54:fe:b8:32:90:2f:7b:89:de:68:ab:
d7:f4:c4:3f:5e:e1:81:97:a1:74:0c:b2:87:22:05:42:6d:c6:
a9:6a:2b:fa:98:5b:52:aa:3b:42:be:51:b1:d8:73:1f:a8:e0:
f7:b6:83:41:4d:7c:74:a0:c4:d5:ed:ce:99:21:93:ce:4c:ee:
34:3b:1c:d5:6c:8a:a2:1e:c3:1c:6e:62:c1:f2:a3:15:4f:d1:
4a:95:ed:df:63:0c:c1:0b:09:1b:ff:8d:b0:66:83:ed:f1:b1:
e8:55:3d:b7:c3:37:8f:3e:53:a9:1d:3f:3b:a9:45:cb:b7:ca:
02:fe:99:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:25 2025 by rpki-client