Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: HehKQU2QKygABJ+UCw0mzKbeKh2lYguXa/V5o8yS44g=
Subject key identifier: 57:F5:84:50:04:F5:C4:73:52:0D:79:21:4A:23:9A:EB:21:BC:FF:67
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 0198D472F28E0C5B99A040319573B48648A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 0DE2
Signing time: Sat 23 Aug 2025 01:02:39 +0000
Manifest this update: Sat 23 Aug 2025 01:02:39 +0000
Manifest next update: Sun 24 Aug 2025 01:02:39 +0000
Files and hashes: 1: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: RSkhCKkpGYua6v9rwvGB1NiHuJrsYnHQetgCQjAmtrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f2:8e:0c:5b:99:a0:40:31:95:73:b4:86:48:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Aug 23 01:02:39 2025 GMT
Not After : Aug 24 01:02:39 2025 GMT
Subject: CN=57f5845004f5c473520d79214a239aeb21bcff67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:95:c3:e6:0c:f2:35:93:76:de:41:cf:c8:
c8:c2:0f:86:2a:3b:21:5c:65:0b:83:81:08:e1:c6:
66:7a:24:c1:e1:e3:79:16:65:4f:04:d2:4f:07:61:
2d:5d:2c:a5:62:06:f3:8f:17:13:63:64:19:00:cd:
29:6d:e6:d3:1e:61:45:6a:9a:53:c6:6f:3c:96:e5:
8a:0c:6f:31:9e:a2:74:dd:47:b4:f7:55:a9:46:d2:
b5:5b:f6:30:1e:4a:92:d8:7b:b3:bd:0f:52:a6:1e:
5f:64:1b:4f:65:4c:d3:cd:76:07:1b:5e:89:f5:cc:
95:92:e5:10:90:b4:12:46:a4:75:43:5d:77:e0:cf:
17:a7:0c:df:fb:23:df:d4:24:17:d0:86:49:bf:8c:
cc:80:85:14:3d:73:be:ce:c0:1e:67:e0:f8:7d:15:
ec:0e:1e:42:86:4b:7e:5c:a3:91:5d:73:a5:65:48:
92:d4:f5:44:9c:02:ae:10:ea:90:71:b3:14:b2:f5:
62:01:ca:97:bd:2b:68:c5:8c:46:36:f9:ff:60:34:
97:c4:b5:3d:61:99:21:15:38:50:d6:9e:10:00:94:
ed:df:d5:d6:a9:f7:82:a5:8d:7e:2b:43:8e:5f:e1:
d6:d1:2a:ef:1b:c0:6e:53:99:e1:b5:f1:8e:c5:de:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F5:84:50:04:F5:C4:73:52:0D:79:21:4A:23:9A:EB:21:BC:FF:67
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c0:bf:d5:e8:34:76:05:e4:5a:d3:11:71:4a:b9:57:c5:a9:
a0:75:52:64:33:b9:9b:67:2a:0d:3f:98:a3:08:09:ed:13:f1:
f5:e0:02:f6:f5:8f:74:c7:76:61:8d:5a:5f:00:f4:41:69:0f:
e3:9d:41:75:62:02:e3:fe:fd:a7:40:69:c4:e4:3e:59:8e:ec:
9b:9f:76:fb:3e:11:57:cd:02:ee:8a:03:36:31:3e:c7:74:e3:
fd:e8:5e:cb:b9:e3:35:3b:cb:f1:e5:d9:43:04:40:3c:50:3b:
9a:55:1a:93:15:0d:3f:45:fc:65:47:e2:ab:4d:65:b2:e4:b9:
da:04:81:7d:6a:e1:fc:56:09:6c:5d:2e:bb:ed:bd:de:83:0e:
e1:ef:59:76:43:12:d6:3c:8b:fe:17:5c:b2:cf:60:cc:64:08:
6e:41:b0:2d:e7:cb:43:6a:67:2e:98:fc:97:41:a6:92:eb:68:
09:e6:9a:c6:6f:b1:59:c5:51:94:ea:e5:1b:28:47:e8:9d:81:
13:01:e4:77:c9:68:25:9d:3e:7f:87:f0:bd:35:ff:8c:5d:c7:
00:8a:db:28:ea:1b:7c:f1:87:89:a5:6d:34:8c:a8:3e:08:27:
00:ef:73:68:39:69:2d:04:3c:d0:7a:ac:9a:23:b6:41:f7:ad:
11:49:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:53 2025 by rpki-client