Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier: 4WERCq5RibZeBEMC8QlHq5tiSnckvanZzKUM12Oo+LQ=
Subject key identifier: 60:87:F8:12:7C:38:10:25:2D:14:36:9F:69:76:5C:B0:CF:10:06:F1
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial: 0198D6612797D06356A417A66C7DD4C745E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number: 09DD
Signing time: Sat 23 Aug 2025 10:02:27 +0000
Manifest this update: Sat 23 Aug 2025 10:02:27 +0000
Manifest next update: Sun 24 Aug 2025 10:02:27 +0000
Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: QYnZlPijEWa/a85oCMYgEObmsxPLWvy07RitjY+7P/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:27:97:d0:63:56:a4:17:a6:6c:7d:d4:c7:45:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
Validity
Not Before: Aug 23 10:02:27 2025 GMT
Not After : Aug 24 10:02:27 2025 GMT
Subject: CN=6087f8127c3810252d14369f69765cb0cf1006f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:de:1f:5a:89:9c:b0:6b:a8:dc:ca:3e:11:
02:6b:ee:83:85:6c:cf:ad:69:78:fe:01:97:bb:bf:
6e:16:41:e0:68:bf:b1:a0:fb:97:0e:1c:d1:87:ad:
38:8d:e8:9e:19:33:93:4c:da:f5:53:52:ee:53:55:
9a:c1:f9:0d:94:51:76:03:de:df:3f:c2:04:75:47:
96:45:99:d5:b6:43:49:58:93:0d:c3:85:b5:a8:bb:
cc:c0:9f:6f:62:f7:5d:55:26:59:5a:3f:05:e8:71:
47:48:8c:43:5e:72:8b:d0:35:af:25:e4:3d:fd:6b:
fa:19:19:90:72:d6:f8:f2:2f:62:b3:ca:97:2c:65:
c9:00:30:62:22:25:39:53:2f:3c:61:e0:ca:71:a2:
09:35:51:ab:ca:1b:ff:92:6d:5b:b1:94:25:42:66:
f5:c5:7c:18:10:a4:a6:b8:61:5e:69:bd:a5:67:b1:
f2:0e:c4:1a:ea:8b:a6:07:67:8a:3a:5e:0c:c1:5e:
dc:d4:66:74:6c:08:b9:ed:1b:93:bd:93:7f:8a:31:
87:c3:89:9a:f1:5f:c6:fa:c9:a0:6a:0f:a2:55:8b:
31:a0:d4:e5:26:b3:b4:db:d7:5c:e6:88:b0:db:3d:
69:df:87:5e:54:a5:a3:15:31:39:e1:08:fa:04:95:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:F8:12:7C:38:10:25:2D:14:36:9F:69:76:5C:B0:CF:10:06:F1
X509v3 Authority Key Identifier:
keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:74:1d:97:7d:c4:d4:4f:ef:53:d5:98:76:5a:fc:73:c2:a6:
44:ea:56:9a:79:45:24:ab:58:db:05:fa:1b:f0:d3:10:41:de:
01:f5:4e:b0:fb:f0:41:e1:3d:cb:53:04:85:b2:f1:7b:d8:8e:
09:0a:30:44:92:1c:36:59:9e:36:b1:6e:db:80:3c:ae:5a:02:
5d:e0:1c:29:28:f7:3e:2e:43:b7:7e:3c:c9:8f:6b:a2:d0:51:
47:ab:ab:8e:84:dd:cb:71:c1:06:5a:6a:b5:aa:e3:d1:8e:5d:
f7:68:ff:8a:26:8d:05:30:d7:b2:79:37:dd:67:b8:c7:db:5c:
27:09:cb:22:d4:c6:05:54:bd:17:0e:e5:f0:cb:14:6b:de:85:
4f:bb:39:d1:ff:7e:2c:d6:48:f1:72:29:d3:02:49:60:86:7f:
fd:4a:a6:f8:b7:d6:9b:82:5c:4c:17:af:89:6a:28:44:c7:24:
ee:1b:6d:36:53:aa:57:f2:9b:07:5c:0c:f0:20:94:36:2d:a3:
83:91:42:07:c8:54:c9:bb:b2:6e:9e:1f:2a:5c:09:e4:c7:48:
50:32:da:32:a2:e6:ce:a7:dd:a6:49:b0:0f:11:ec:9d:f2:45:
f7:2d:57:28:4b:28:73:f1:81:90:d4:3d:d4:5c:75:16:92:42:
da:be:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:19 2025 by rpki-client