Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: JE+5NoyPuLvIK7jvU0fAOzUkK19mO8Y/wfIUaHnitbU=
Subject key identifier: 76:B2:5F:8E:2F:E2:FF:1E:EB:06:D1:26:8B:7D:34:11:00:54:A0:A8
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 0198D54E9E780561A09E582FE76CD4B98E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0D8C
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: 0gvLaWHiNFVCrYC7MzJLBnO4A/CoyIUFFy9TWsMHr/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9e:78:05:61:a0:9e:58:2f:e7:6c:d4:b9:8e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=76b25f8e2fe2ff1eeb06d1268b7d34110054a0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:ff:d9:c6:d9:86:55:b2:de:e7:77:5d:b4:
e0:37:65:42:d4:19:dc:de:b0:04:a8:d5:41:78:0d:
dd:c7:54:d5:86:c5:40:6a:2c:f8:a3:0b:7f:c7:17:
ff:5c:03:8c:5b:4c:6f:d2:6c:df:81:55:71:3d:69:
00:ff:02:bf:c3:1a:0b:2a:b6:4d:56:64:76:2f:bb:
d6:0f:f1:6d:5a:08:bd:61:d6:e9:88:48:a6:1b:54:
01:1f:c0:65:fe:ed:b2:63:db:fa:80:4f:16:c0:ee:
c1:41:4d:36:3b:bd:28:3e:a2:31:3f:43:5b:36:7c:
2c:80:1e:58:2a:58:cb:27:2a:c7:97:af:71:52:89:
8e:28:eb:de:7d:c4:16:18:e6:e3:5d:63:2b:b0:d2:
64:2c:1c:c7:bb:8a:51:90:26:97:72:c9:06:e0:a9:
37:ed:c6:9e:2a:34:ea:78:0d:c5:ba:b2:1f:44:86:
5b:44:ad:21:bd:14:02:1e:e8:6d:85:c5:f2:16:29:
05:83:f5:3f:af:1c:eb:2c:ed:9d:6c:9a:c3:df:4e:
a8:78:ec:fa:76:95:ec:09:89:10:50:42:c3:c5:fc:
fc:e6:84:22:5f:39:26:af:5d:87:1c:49:c6:e1:00:
8b:e8:be:e0:95:0e:59:1d:8d:c3:8b:04:3e:94:fa:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B2:5F:8E:2F:E2:FF:1E:EB:06:D1:26:8B:7D:34:11:00:54:A0:A8
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9f:44:7a:31:eb:50:44:0c:b1:eb:23:cf:05:17:5a:ea:17:
01:48:52:84:6c:1f:87:bf:1d:c5:fa:c4:16:96:2a:b6:c1:13:
6c:56:76:30:57:cd:c7:15:35:ff:d2:b3:08:55:ea:1c:ef:f0:
11:da:7d:93:70:dc:31:6c:4b:ab:90:a3:e7:1a:34:55:e3:4e:
d7:b3:7f:1d:02:c6:b5:3c:28:51:14:02:b0:25:c2:b2:97:a6:
6a:62:b6:5d:fe:e0:80:f9:0c:f0:60:11:4e:86:ab:03:fa:7d:
30:26:ce:ae:62:41:2b:a2:24:72:6c:d6:36:be:49:28:72:ef:
e4:4a:63:c4:10:b9:2f:54:42:e3:11:dc:2e:b0:9f:4c:80:f7:
5c:23:a1:aa:a7:c0:89:1d:cf:ac:1f:12:a8:62:99:dd:1f:57:
27:3f:80:b7:cd:90:f9:26:c8:6c:b0:1c:cb:2a:12:39:d0:32:
92:d9:be:8e:f2:97:7b:fb:a7:d1:e1:cc:0b:0b:11:3e:05:56:
c2:1b:f2:0b:bb:f1:d0:90:4c:db:e7:5d:b3:ef:dd:06:58:61:
74:b3:8a:17:bd:3c:45:51:cb:6b:34:1f:09:34:72:47:41:a9:
52:6c:bd:28:65:37:04:b9:46:73:e7:60:08:62:4a:46:db:2a:
f6:03:1e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:45 2025 by rpki-client