
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
File: zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft (raw, json)
Hash identifier: wgkE3dbayWu1jYi/oa+zTqFU8ExXGxFr/jrOnqZeizk=
Subject key identifier: 86:6E:CF:07:A6:56:BF:70:8A:11:50:AF:A7:8B:9D:1D:2E:6E:CF:D5
Authority key identifier: CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
Certificate issuer: /CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Certificate serial: 0198D583C58BEC56D2F640E50CA322C6874A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
Manifest number: FB
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl (hash: 0EPop2aHc4TD8cb5u3WhGNlvHMSlYktCiLueWYjtBrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c5:8b:ec:56:d2:f6:40:e5:0c:a3:22:c6:87:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=866ecf07a656bf708a1150afa78b9d1d2e6ecfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:93:e9:40:6c:32:49:e5:db:f2:85:20:de:
75:51:a8:c0:b7:22:cc:f2:50:7b:8f:4d:8a:53:92:
b9:92:f3:86:5f:f6:6a:1f:4b:37:d6:5b:56:f9:52:
6d:00:1c:aa:14:03:9c:ea:73:c7:3e:92:9f:c4:1f:
03:1d:d2:67:d8:48:87:d8:0d:1e:99:76:c5:fc:de:
65:72:c4:f2:7b:28:9b:16:8f:6f:d0:33:e3:58:e3:
c1:1b:97:99:bd:df:cc:64:6b:fc:ad:51:04:58:c0:
3e:98:0e:32:44:2f:4f:28:a8:69:49:a1:b4:b0:bf:
34:27:db:02:77:0f:32:94:4f:95:0b:9b:31:56:93:
e0:1c:ce:7e:c7:64:f5:3d:65:38:33:65:b8:05:9a:
ca:c0:1f:09:a7:f0:4c:b1:84:da:c4:0c:ec:33:2d:
84:46:c7:3d:2c:a2:2d:53:d4:4a:dc:e1:9d:f7:d7:
36:ad:69:49:63:b2:ad:54:12:1c:f5:60:20:c7:8f:
6c:0f:fb:96:56:5b:4c:04:71:06:97:6a:fa:fc:19:
9e:51:cf:a6:f3:ac:83:b5:46:19:1c:9b:6c:3d:40:
35:3f:f0:d3:2a:2e:68:cb:e6:0c:6e:56:5a:a9:86:
e8:10:6d:d6:b7:9e:e8:c0:cc:cc:cf:e3:a7:9c:09:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6E:CF:07:A6:56:BF:70:8A:11:50:AF:A7:8B:9D:1D:2E:6E:CF:D5
X509v3 Authority Key Identifier:
keyid:CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a0:6c:6b:22:40:be:2a:e6:4e:00:cc:27:78:c7:d4:ef:1e:
28:77:ce:97:56:d1:f0:e8:68:b7:b3:d0:a2:62:48:ba:6c:b8:
79:54:17:11:85:c7:eb:8d:69:4b:0f:ff:b4:02:20:ce:58:8e:
05:a3:ec:46:ad:0c:78:1b:69:5f:74:7d:0a:3c:8f:8d:98:75:
3a:fc:31:7e:5a:b5:30:1c:5d:dc:51:57:7f:02:5a:e2:15:b9:
02:85:01:1d:03:50:f8:29:1a:3c:7e:48:a2:79:25:e0:30:f3:
fd:8c:2d:1f:de:8a:ea:dd:15:1c:1f:b4:91:e6:8d:54:da:e4:
d4:4e:6c:32:16:70:4b:18:25:b6:25:9e:a4:04:7b:5d:ac:bf:
da:72:e4:66:04:1d:0d:60:ef:20:8c:b8:46:4c:ba:b5:f4:2f:
97:0b:9b:89:c4:a6:93:5d:76:9d:9c:6b:8e:0a:20:c3:56:9a:
a9:6d:02:bd:4d:25:ce:aa:89:7a:77:8f:9d:1f:02:6e:cf:aa:
d7:8d:11:4f:d7:81:b3:80:e7:e9:95:e0:1a:47:4b:fa:45:0f:
83:97:38:6c:b6:18:a1:32:4a:df:b1:72:7c:ea:70:58:ee:ff:
24:ef:b2:5a:fc:2a:22:48:38:27:31:cf:1e:b8:65:05:ff:36:
eb:b3:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:42 2025 by rpki-client