Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: 0MDrLgAC2AY45J0P7CiKEQHYTAgrtDI5oob81xZibOs=
Subject key identifier: 26:68:99:00:AF:BD:10:B0:5D:63:5E:D5:AA:B6:C9:60:65:91:AF:E0
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 0198D5157414CAC367EEBC4B241424A2FFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 111E
Signing time: Sat 23 Aug 2025 04:00:09 +0000
Manifest this update: Sat 23 Aug 2025 04:00:09 +0000
Manifest next update: Sun 24 Aug 2025 04:00:09 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: /XYhgGge6BA8nkcmxZzR19UWntIkJV+AttL0g8/t5OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:74:14:ca:c3:67:ee:bc:4b:24:14:24:a2:ff:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Aug 23 04:00:09 2025 GMT
Not After : Aug 24 04:00:09 2025 GMT
Subject: CN=26689900afbd10b05d635ed5aab6c9606591afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:c9:7b:b7:b9:b6:6d:86:9e:0c:c3:4d:a9:
ae:40:59:88:a4:54:47:41:58:be:34:fe:69:8e:c1:
89:56:1f:bd:94:73:a6:37:35:5e:e5:bb:f5:c8:2d:
d6:1d:9b:57:cb:8f:9c:9c:f6:f6:d1:a9:32:9f:15:
ad:2a:dd:ad:f6:35:4e:99:b9:3d:ad:fc:66:2c:66:
6c:db:8e:ce:82:a1:03:78:20:67:a8:fe:0c:b9:49:
9d:5c:0c:2b:01:ce:9f:06:8c:4d:a0:0e:8f:02:1c:
27:66:00:c6:ad:7d:3a:e1:3a:05:ef:e1:97:9b:af:
35:a7:8e:dd:2e:96:0e:1d:1d:06:33:6c:a6:5f:ad:
3e:bf:9d:68:29:ef:3b:9c:91:f8:95:36:b8:49:10:
89:75:3f:f0:08:9b:30:24:1c:0d:25:f1:17:d9:8e:
ac:98:38:97:b7:31:0b:78:07:7b:01:97:a0:b3:00:
dd:b1:53:7f:ef:fb:e4:f9:8c:8d:09:f7:37:77:81:
92:c3:da:06:bc:98:ce:16:c9:59:73:b8:b6:7d:bc:
7d:f3:5d:cc:ee:fa:7b:d2:a0:96:f1:40:16:6f:e5:
67:46:b1:27:42:8c:80:e1:e1:e2:70:ec:46:ac:bb:
4c:5b:5a:75:f6:26:dd:20:b3:14:43:47:95:1c:47:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:99:00:AF:BD:10:B0:5D:63:5E:D5:AA:B6:C9:60:65:91:AF:E0
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fe:ec:32:48:8e:31:62:f3:65:41:c1:9a:19:f8:ec:94:d6:
be:0e:0f:d1:9e:11:fb:fa:5b:0a:bd:fa:0d:4d:2f:a8:01:8c:
2b:5b:bd:ca:e9:80:47:4a:3a:5e:7b:e6:c4:d6:68:ab:c5:61:
04:2d:b7:6d:3d:89:10:d5:81:6e:d9:47:5c:82:07:d2:ac:ed:
39:1b:a3:19:09:2c:be:e2:8b:7f:70:94:6b:62:98:13:eb:af:
8a:f8:0e:c4:92:f2:d0:8c:ab:f6:a1:3c:31:e7:38:8e:be:42:
b9:f3:b1:24:a9:10:8c:c1:30:b2:4f:1b:ba:4f:f1:bc:2c:ca:
56:8d:5c:81:a3:88:a9:bc:a3:08:80:6a:03:b2:85:c4:61:2a:
88:fa:4f:9b:5f:cc:1e:d3:7f:f4:7b:53:15:a2:27:9a:f4:fc:
bb:a5:93:c3:31:10:9a:43:55:dd:6e:e0:ac:be:c3:cd:5f:46:
d5:c2:5a:80:d3:72:cf:2e:ee:9d:f7:5c:41:9b:f1:7c:d9:6d:
de:4f:92:2b:aa:cf:09:83:e1:70:7b:95:fb:35:66:82:7c:99:
75:ea:8f:33:f1:97:75:bd:fc:15:eb:5d:5c:f3:f1:16:a0:62:
d1:28:73:46:77:20:58:e0:e7:c1:79:93:ca:9a:eb:c5:21:a5:
69:31:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:33 2025 by rpki-client