Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: algEyUVBL8iSLYnQXdQ+93llUAWyA2Im5uE8qmkAYiE=
Subject key identifier: 0D:E7:27:61:6A:84:CA:43:3B:D6:DE:E9:33:80:DD:BD:6E:31:71:6B
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 0198D54E6556986AE148A1BCEACD36EDEFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: aG3AB7IQLIZkayZxyk2S+c0WJ9QYRQZNTlBaf3A8G6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:65:56:98:6a:e1:48:a1:bc:ea:cd:36:ed:ef:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=0de727616a84ca433bd6dee93380ddbd6e31716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:7a:95:e1:5c:0f:77:bb:63:42:bf:15:1b:
c7:04:5c:ae:0d:28:69:ff:5e:7e:cb:b8:6f:79:7a:
b8:de:1c:a1:b6:21:4b:96:d9:db:77:6b:7d:c3:c4:
0d:26:06:e9:4c:c1:e8:ee:fc:dd:99:36:6b:3c:26:
71:0b:4a:de:eb:74:5b:ad:b2:81:63:7e:71:e6:6f:
89:45:4b:00:07:5f:27:db:ab:66:0d:a2:3b:ab:39:
ea:a0:3c:f5:a1:2e:1a:fa:25:a9:35:23:27:6e:b0:
2b:07:70:38:11:7b:4c:e6:21:7d:51:95:21:ec:a2:
25:0a:bf:aa:3f:15:24:d7:72:f5:13:b6:bd:ee:70:
ca:d9:d2:41:47:99:d0:a7:76:c9:44:a1:dc:6a:a3:
a7:b5:42:4a:dd:80:4a:91:ce:8b:92:12:30:2c:f0:
60:16:48:c5:f2:c3:a1:a6:13:57:d3:f0:5e:40:86:
6c:5f:e5:d4:b8:6d:29:07:8c:7e:b6:f3:8c:82:a6:
ea:b5:a5:c9:03:3d:c3:1f:c6:c7:98:8b:d0:a1:c1:
cd:75:c7:f9:fb:c4:74:bb:00:87:3b:31:de:07:2b:
57:dd:76:ee:e2:66:16:b0:1e:15:f2:74:b1:ad:13:
7c:a3:ee:38:ba:c6:f9:09:8d:4a:77:1d:48:70:a7:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:27:61:6A:84:CA:43:3B:D6:DE:E9:33:80:DD:BD:6E:31:71:6B
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0f:7d:92:33:d1:e7:a3:08:5d:9b:e8:1e:f1:eb:3c:83:38:
7e:2b:dd:e0:b8:91:90:65:d0:a7:d5:29:e1:b1:54:25:52:cb:
7e:8e:3d:7f:af:f4:2e:e9:7d:a8:ff:bb:41:c5:64:62:e5:38:
30:54:d1:0a:1a:1f:9f:74:24:cb:a9:3b:b6:eb:0f:fe:03:d9:
ac:00:be:23:9f:60:a2:42:2a:01:59:de:4e:ba:a4:72:f2:6c:
83:66:f6:2b:4f:59:ff:f2:b7:e5:da:90:b6:ae:7a:b2:dc:c5:
53:cf:35:1f:e5:05:02:53:6a:0f:bf:9a:1a:87:78:75:2e:9f:
34:79:52:75:c1:11:76:7b:de:fe:fa:ec:55:df:d9:ca:ed:f4:
75:05:2b:c3:0b:bb:e2:7c:9e:77:10:e0:44:7c:71:b6:10:8f:
42:87:13:12:a9:ae:8d:91:23:0e:2a:5d:d4:eb:3c:2e:b5:92:
eb:15:82:1a:9e:ad:2b:37:aa:5a:bb:ff:73:89:f6:a4:fb:ee:
49:93:b2:4f:25:c9:ef:0a:26:65:e4:7f:e7:ef:c9:7c:3b:4d:
0e:e4:e7:dc:b2:5a:e5:0a:be:92:3d:47:7d:81:e1:81:71:8c:
e2:d1:0f:1f:f9:16:ab:22:a3:61:d5:04:be:ae:47:fe:10:de:
c4:c1:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:14 2025 by rpki-client