Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: 2c7iXho5k/XvE83DmJZSWwhCgf0v1Pwg4tSCUwa6t5U=
Subject key identifier: 07:2F:9E:D9:EE:E7:A9:0B:B9:A3:49:29:A2:56:54:DB:8A:EB:5A:EF
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 0198D5BC2FDC1E2DF66DA5305717317B2341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0A97
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: mPS85lhS/mY5Bx81mtyp3NFkcjcEcW++CAD4L81YqhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2f:dc:1e:2d:f6:6d:a5:30:57:17:31:7b:23:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=072f9ed9eee7a90bb9a34929a25654db8aeb5aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:af:04:49:e8:09:81:2a:21:b5:9d:85:08:
de:45:f4:0e:15:a3:b5:fc:d0:31:c0:ef:38:44:bf:
fa:27:8b:48:62:a5:4e:00:ff:e3:72:28:ac:f4:b8:
62:ac:3d:4b:6b:1b:5a:37:dc:ce:b1:bd:32:a0:7e:
d2:ba:00:81:04:6b:e7:cb:c7:23:a4:7c:55:24:89:
c0:e8:a2:a5:ee:61:a4:7d:46:95:2b:13:4d:3f:f0:
fc:1e:53:02:ef:00:9c:fe:72:36:2b:ac:02:65:23:
68:41:6a:d5:5c:9a:d0:ee:03:19:d8:89:1a:12:f9:
2a:c0:12:6c:05:58:f5:3d:22:4c:68:1d:f2:29:fa:
a2:93:2a:ff:f3:47:9f:35:c0:b1:3f:a3:46:e8:e1:
fe:74:c7:7c:f5:6d:c5:20:e6:f5:dc:10:3f:00:56:
28:1a:cd:ff:d7:e5:80:b3:ff:aa:86:3c:34:45:83:
07:a8:03:96:10:64:91:b2:38:83:30:66:10:8c:4a:
ef:33:67:65:75:2b:9c:26:2f:f5:ea:7f:b7:4a:3e:
4f:c6:06:f1:7f:87:8c:73:20:02:d9:3a:57:ff:ae:
4a:3c:98:ab:b2:a1:35:6b:f2:89:8f:c6:b2:ad:ae:
dc:ab:a1:1c:4b:eb:a1:69:b4:b5:ec:79:df:ee:63:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2F:9E:D9:EE:E7:A9:0B:B9:A3:49:29:A2:56:54:DB:8A:EB:5A:EF
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:79:4d:83:29:9f:55:76:cb:0f:e7:d2:c7:c0:a1:15:c8:5a:
e8:5a:2b:08:83:9e:77:63:c3:6a:7e:ee:c8:82:c4:14:36:cb:
c2:78:a8:90:5d:15:7f:e7:95:4c:56:ff:01:d2:4a:15:a1:37:
f3:2b:c5:52:4f:96:72:72:08:d1:7b:ec:03:01:1f:a8:9d:3f:
7a:33:69:14:85:79:0a:46:81:b5:70:0a:3f:8b:1c:a7:72:9b:
f7:74:62:46:06:64:43:a4:b3:16:6f:4b:54:e0:ce:8b:a0:55:
52:3f:36:3b:97:9e:61:16:76:40:17:02:ad:99:5f:89:3b:76:
c2:ad:f9:b9:bf:b9:05:7e:17:ad:4a:3c:75:59:cd:2f:e5:ec:
3c:5b:e9:04:34:fe:cf:f6:6d:5d:b2:af:19:4a:52:3d:67:31:
8d:6d:6a:89:c8:2a:94:92:8d:92:0b:00:3d:34:cd:cf:67:3d:
6e:8b:4a:f9:12:4f:46:e1:de:cc:4a:45:f6:ac:a2:bf:32:7e:
ae:fc:a0:23:4f:88:7f:97:a7:c7:ee:e4:d3:4f:c5:4e:60:43:
4e:38:6f:65:b3:fd:e8:b3:d2:7f:74:e5:b8:0a:8f:50:6c:df:
6b:b5:5d:80:ac:31:71:fd:54:77:f5:6e:00:ee:49:3c:b3:7f:
4c:47:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:53 2025 by rpki-client