Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: NgE0iaJdDu8PK1VXkLiiSmKq6mC5G5KaXIVjRgPmtJE=
Subject key identifier: 60:42:6C:F0:89:39:4D:0C:ED:5E:B6:E0:F6:62:3D:B2:5F:00:EC:BF
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 0198D6CDF8DC4364C9662B554A18A876B68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 0FBF
Signing time: Sat 23 Aug 2025 12:01:19 +0000
Manifest this update: Sat 23 Aug 2025 12:01:19 +0000
Manifest next update: Sun 24 Aug 2025 12:01:19 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: mnWGMgOSyluX8kkAvOo7Orrg5Hu0e4KH5GEgi3b1TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:f8:dc:43:64:c9:66:2b:55:4a:18:a8:76:b6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Aug 23 12:01:19 2025 GMT
Not After : Aug 24 12:01:19 2025 GMT
Subject: CN=60426cf089394d0ced5eb6e0f6623db25f00ecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bd:96:01:5f:98:c1:69:ed:8b:13:83:f7:fa:
65:40:0f:44:be:26:3d:8a:7b:e1:59:a0:3a:b6:17:
f7:74:dc:bd:2c:36:9e:7d:e6:32:0d:58:9f:03:08:
87:4c:1b:eb:cc:00:62:e7:c7:59:a6:98:0e:ca:bb:
2c:63:f2:48:8a:42:81:5c:c9:b2:5d:28:63:ae:d9:
92:00:6e:7f:37:a7:24:89:87:dc:0c:2e:f7:9f:71:
58:1a:cd:d8:b7:ac:70:d7:6a:07:3d:50:aa:fa:fc:
04:d4:3e:70:3b:f5:26:03:24:06:d5:cc:ff:b0:d1:
0b:8c:3c:79:b0:92:10:5f:8e:f0:04:46:55:0d:18:
44:e2:ac:71:d8:31:f8:98:30:d2:b8:51:0f:2c:bb:
c5:3b:65:93:22:6f:1d:1d:f4:dd:89:06:b2:93:61:
c1:10:f5:fe:81:62:91:05:57:22:96:84:b8:47:bd:
e1:70:fb:86:4b:47:b8:85:cc:e3:a1:0b:e8:3c:80:
e2:cd:04:39:b0:c9:d0:ad:05:43:1c:44:f5:35:7a:
09:c5:71:ba:6d:9a:83:55:ad:1e:69:1c:4f:91:a9:
13:e6:05:4e:c1:3b:84:dd:60:c7:94:db:04:72:41:
82:a2:e6:a6:f7:85:1e:31:63:49:11:0f:1d:25:69:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:6C:F0:89:39:4D:0C:ED:5E:B6:E0:F6:62:3D:B2:5F:00:EC:BF
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:09:2f:09:d6:87:00:82:7f:52:a0:ec:59:e7:4c:7d:17:88:
97:57:9c:f3:de:2c:fc:9f:a3:a4:44:9d:8b:f0:97:bb:16:d4:
40:c1:8a:3d:ad:1f:ee:c9:84:8b:22:5b:48:fc:74:e3:d2:8f:
9b:fc:b9:4b:ff:19:98:ce:d7:34:28:46:3e:d6:0e:6e:e5:ff:
de:68:bd:b1:c0:6d:a7:54:82:7b:64:65:61:1a:56:13:cd:12:
0a:94:5c:f7:cc:96:56:b1:30:48:4b:65:2d:29:f2:55:05:20:
23:bb:e9:e8:aa:b7:38:c3:ff:7d:3c:21:64:45:88:1c:96:6b:
ca:2e:74:94:a4:05:6a:5c:54:a0:ac:4d:2d:bf:8a:eb:15:3a:
58:97:d9:e2:12:a9:b4:2d:df:b6:e2:56:f2:37:61:f5:32:29:
b8:d8:0e:c9:ea:e6:ac:26:f7:96:4c:e1:6f:68:8a:d7:cd:63:
d1:13:f2:57:54:22:97:9d:a3:8d:28:ce:74:d0:3c:2f:b4:ce:
71:87:6e:e2:ab:ad:49:60:32:38:a1:04:35:06:4c:ab:23:44:
59:36:ea:c4:5f:2b:72:b7:58:3e:3d:04:d9:c6:d3:7a:7a:69:
4f:2a:cb:d3:d0:19:8e:13:02:f4:e1:40:5c:a4:53:e9:ee:5c:
2b:73:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:05:07 2025 by rpki-client