Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: HEBm3PYSwaL8GY9kaL/JPTAWhXrVfNRxJXcm9OPtdkU=
Subject key identifier: 55:32:3F:AA:62:C7:7C:1C:2C:9D:34:80:20:76:C5:B1:A8:23:7F:46
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 0198D4E06F8887F17818ECB5F5AA03DE61C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 1602
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: 1F7c9TAsX3BTmYqUr7ueoXETzEDPUpIgmfdOxKORtS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6f:88:87:f1:78:18:ec:b5:f5:aa:03:de:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=55323faa62c77c1c2c9d34802076c5b1a8237f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:2b:c9:5a:c6:1f:33:aa:d0:04:87:c4:79:
dc:fa:73:bf:a6:2f:13:64:e0:e0:59:c7:c0:4b:04:
19:1d:7c:6d:ce:a7:27:fb:ef:92:62:fe:67:84:a8:
0e:1d:6e:ad:6a:f8:de:04:92:9e:6d:c3:73:d3:f6:
34:20:97:a8:4f:ba:04:e2:04:9f:c1:01:06:b1:1e:
a6:e6:67:56:90:9e:9f:f0:fe:5a:b5:ba:38:39:43:
2d:f1:22:40:6e:98:33:08:5f:57:6f:6c:ab:86:52:
68:55:32:4a:f9:9c:73:58:4e:80:62:c5:f5:1b:c0:
f0:f3:63:9f:10:d0:d6:9b:f6:7c:b3:0b:0d:1b:3f:
9b:55:70:c9:8c:e2:d7:73:31:14:94:74:df:41:78:
d1:37:94:fa:ce:54:26:69:a5:84:af:3c:bb:99:52:
de:df:27:0d:e8:9a:66:ab:63:0b:fd:5c:01:48:ce:
ea:d6:65:b0:74:0a:a0:81:2d:85:94:7d:9e:fc:3e:
5a:1a:41:e1:f3:f4:a6:17:83:d4:33:56:19:2d:02:
cf:7e:d3:16:da:1f:e8:09:24:a1:9a:b0:7e:45:fe:
2a:be:89:54:1a:54:f6:76:10:24:2c:80:ba:27:f2:
34:a6:ae:64:5e:15:15:49:89:a6:70:96:6f:db:8a:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:32:3F:AA:62:C7:7C:1C:2C:9D:34:80:20:76:C5:B1:A8:23:7F:46
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b1:2b:22:09:5b:4b:6e:74:ce:44:1d:6f:54:1b:a1:f9:8e:
66:fd:22:ac:9d:76:b2:26:ba:54:80:ef:06:f7:37:0b:c2:c1:
da:4c:5e:0e:00:bb:7c:a1:f4:89:bb:85:7a:6d:a8:95:c5:0d:
ae:e4:19:3c:44:ae:45:13:af:5b:3b:a4:58:e5:65:fa:2d:73:
e0:79:c5:78:1a:cb:1a:b2:91:57:0e:c8:7f:3a:ba:fd:28:84:
cc:96:60:64:3d:c7:8d:5a:90:5d:3b:ba:d2:b6:cd:ca:01:e3:
43:ba:66:6b:88:4a:ad:f5:12:1f:01:e0:32:b5:a1:bd:36:e7:
4f:73:6f:57:0e:da:21:9c:4b:89:31:c9:d3:1e:36:4e:f2:32:
0c:3d:89:d0:e2:98:a0:0b:77:25:7b:5c:49:20:2b:de:7f:bc:
09:3c:73:53:57:bc:94:68:f1:7b:18:0a:1f:b8:b5:64:9d:d4:
69:5d:38:2a:48:2e:6b:66:1d:08:42:98:cd:2d:be:69:bb:5b:
1b:06:8f:6e:e8:91:fd:e9:f8:f3:f8:82:01:94:6d:d8:92:70:
cf:98:41:ae:31:61:2a:cf:5e:2d:82:b8:e5:4e:73:64:9e:a2:
57:a8:3e:92:ac:bb:a9:27:8d:63:61:89:76:16:82:10:85:04:
0b:cc:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:09 2025 by rpki-client