Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: HhXhuxP3p3sinxfzS98+zjIYjDC75ZoJrNbqprhZDfM=
Subject key identifier: 50:95:84:D2:80:39:AE:73:95:54:36:5A:06:8C:02:61:4D:84:BC:B3
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 0198D4E088833F8FE4159EE5359E6F227462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0D6A
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: AMxQUAaMoyDhgT209I+dPbZt2ZtQtEl82o4Spyb7+/0=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:88:83:3f:8f:e4:15:9e:e5:35:9e:6f:22:74:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=509584d28039ae739554365a068c02614d84bcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:f2:4c:49:67:38:73:08:65:ae:bd:4f:dc:
94:03:29:26:4d:c0:c9:3f:f1:71:3e:f0:09:10:08:
2d:47:d4:f4:31:2e:91:6e:1a:0e:f6:b4:9d:02:7b:
c7:b8:08:87:7c:4e:99:03:f4:c6:46:5f:55:12:3e:
f5:2d:e0:19:3c:61:6a:fe:76:bb:9c:eb:e9:08:dd:
74:07:7d:4a:cb:5d:64:89:fe:6b:78:3f:99:78:ba:
a4:62:90:78:33:c1:bd:fc:4d:3f:96:31:70:99:c3:
8d:77:37:5d:39:56:ca:8f:10:09:8a:65:3d:4d:1d:
83:e8:8c:1a:76:59:c6:e8:3f:47:3a:1d:70:e5:9b:
f1:46:9c:49:6a:73:16:62:77:7b:4c:f9:18:ec:fb:
49:b6:20:46:68:11:7e:5d:3c:5e:e4:de:3f:b1:88:
9d:a8:14:c4:db:fa:59:97:21:c4:4e:7d:34:3a:c3:
d4:eb:cb:f6:37:9f:62:18:68:8c:85:a4:97:08:43:
14:72:2a:34:f1:dd:8d:ad:17:77:64:28:96:11:51:
8c:58:96:77:e3:f8:b0:aa:e1:de:6f:06:21:69:d3:
31:39:86:52:07:f7:9a:44:5c:6b:5b:1d:27:31:49:
10:09:32:08:a0:c7:e0:e3:d3:96:5d:e5:58:07:90:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:84:D2:80:39:AE:73:95:54:36:5A:06:8C:02:61:4D:84:BC:B3
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8c:5b:ae:8d:20:a8:b2:64:6d:75:ea:3d:02:44:29:2e:fb:
57:4b:02:72:55:32:e9:5c:ad:a9:f2:1f:a5:44:ee:45:cb:47:
e4:41:01:d4:5e:92:95:4a:ea:c1:5a:da:d0:f9:76:7d:36:27:
5c:55:ed:04:b6:0f:64:73:6b:ef:b0:e5:5d:2d:f9:70:47:aa:
cd:12:c8:df:03:22:89:63:da:3a:08:ad:1d:44:14:e7:c8:5c:
c7:a1:10:92:6b:64:df:86:19:f3:e8:1c:81:57:50:11:3e:e3:
0d:04:8a:53:c9:a9:e0:86:0a:e0:cc:81:e2:71:eb:48:77:17:
20:ec:70:ec:3b:dd:18:a1:ad:83:26:b9:0f:cd:5b:49:c3:a5:
0f:c7:91:5e:ef:81:eb:fc:df:08:ba:61:c2:f7:ac:00:41:af:
61:70:64:f3:15:37:a7:6d:d6:d3:cc:8c:ee:31:50:27:42:93:
20:6c:ee:f4:fd:95:08:43:2c:15:db:95:7b:6b:bb:67:90:70:
b2:35:03:11:c2:af:c1:39:9c:23:41:92:aa:f3:fb:3f:d5:ff:
61:9c:7e:96:86:42:6f:17:a4:49:ce:f3:ec:ff:c0:95:da:32:
f8:46:60:f4:5e:6d:a2:f4:3b:bd:fe:55:00:de:9d:51:4b:e7:
7e:ac:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:11 2025 by rpki-client