Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
File: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft (raw, json)
Hash identifier: +skN3Mt7pB9Ku/KNlsYB2mvvBkaYCoBm8/b91EwZH9g=
Subject key identifier: 68:E4:B0:07:75:D5:5D:26:07:65:24:8B:42:13:90:2A:FB:18:2B:F5
Authority key identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
Certificate issuer: /CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Certificate serial: 0198D65FDEA773A9A58C6FDC6FDBB3C7B9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
Manifest number: 03C4
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl (hash: nfVhHV2ADWo7AW02JhmWNYlvS6fVHH/tFX0mQ+wKAzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:de:a7:73:a9:a5:8c:6f:dc:6f:db:b3:c7:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=68e4b00775d55d260765248b4213902afb182bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:3f:cb:01:8b:b8:e4:72:b7:8a:fa:cb:8c:
dc:d3:02:8f:57:8f:f9:82:8a:e4:41:e2:2d:d7:06:
5f:1f:6f:14:a3:1b:ee:5e:c0:b3:77:ab:d7:b3:26:
1d:a8:53:3c:ce:48:ee:75:69:7e:3a:b6:88:25:dc:
14:dc:23:9e:94:e5:9e:ce:30:9c:66:fd:6b:e3:b6:
a8:5d:d2:af:f6:8f:05:4f:86:97:4f:29:fb:32:de:
40:a6:ed:e0:c2:5f:a6:8c:d1:46:b8:df:e2:c3:17:
69:36:0c:60:2e:46:94:99:b7:e3:ec:c9:76:db:d2:
9d:8d:86:7f:9c:52:64:fd:62:8a:99:f0:15:c5:7e:
13:29:ef:6a:69:e3:95:11:28:db:2c:c9:99:bf:15:
09:2e:eb:8c:55:75:8c:ad:70:00:d0:ac:88:39:ff:
85:b4:a2:07:7b:8d:70:58:bf:aa:57:cb:a7:4e:50:
58:25:0f:ef:86:9a:24:b1:89:36:e7:bd:7d:22:3e:
a2:14:f1:1b:95:92:4e:a6:3c:73:54:fc:4b:d3:2e:
71:54:d5:3f:fd:5f:58:95:a2:2c:8c:95:d8:8f:c7:
b9:34:2f:b8:e4:39:aa:dd:00:b8:9d:d7:4b:d0:fb:
d6:4e:82:70:75:9b:a9:b2:15:f1:7a:cd:8e:fb:2c:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E4:B0:07:75:D5:5D:26:07:65:24:8B:42:13:90:2A:FB:18:2B:F5
X509v3 Authority Key Identifier:
keyid:CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e0:47:09:1b:9e:2e:d6:ff:f2:3a:42:11:f8:65:f5:0e:f2:
29:83:35:7f:da:35:d3:13:c8:1e:0b:5e:ac:75:b6:9f:bd:06:
73:b6:00:7e:ca:e2:f7:5f:1a:62:0c:b1:a3:6c:15:d7:f7:d3:
15:fb:90:65:3c:f7:58:f4:d7:75:7c:2c:ec:cb:5e:1a:0b:4f:
dd:4b:81:fb:81:ac:51:2b:f7:89:bc:f0:7f:aa:8e:bf:4a:d6:
7d:a7:3d:53:b9:12:5a:eb:b3:25:8e:ca:c7:53:10:c2:05:19:
9f:8d:b3:2f:63:06:c9:1f:45:9c:23:23:89:21:99:b2:ad:c6:
90:52:15:6f:81:b1:29:05:44:50:a3:63:6c:2a:22:65:95:74:
1f:27:ee:46:72:e9:0d:4e:f5:35:00:28:f7:37:04:57:42:26:
83:59:44:3d:43:cc:02:e7:c3:3c:5b:0d:1c:bb:2b:6e:d2:1c:
aa:82:b9:1f:be:33:a5:db:41:45:a4:26:4d:f3:b4:c2:5e:6a:
03:3d:24:49:3f:6b:09:7e:d3:a0:c4:d1:68:a8:c4:cf:2a:2a:
1c:52:81:bb:bb:22:15:97:da:31:69:12:32:61:26:6a:37:98:
30:cb:30:73:12:8f:d5:1e:d1:7c:69:b7:34:5e:86:0b:11:79:
dd:f2:35:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:42:09 2025 by rpki-client