Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: DpDnozRD1FLo1rJ6GeltMrCm3htcSE4aQ/s0kNMI92k=
Subject key identifier: A7:38:EB:AA:CA:59:BE:81:43:B9:BE:C1:26:9D:24:8F:D3:F0:E4:F7
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 0197B6A1E4B0C8E7A1C9C461E4AA6FABE618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 1166
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: EDvwXN6DAz1zoY2bsEeXr9HjvcLT9zLyUFYYOlwcrEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e4:b0:c8:e7:a1:c9:c4:61:e4:aa:6f:ab:e6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=a738ebaaca59be8143b9bec1269d248fd3f0e4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:54:90:a7:53:f1:f0:71:01:e6:aa:63:89:
7b:57:0d:65:3e:fc:48:75:bc:b5:1d:f9:1f:2a:21:
f7:9c:21:f3:18:2d:6b:8d:3b:ea:f9:0c:27:dc:20:
c6:a7:fa:61:47:9c:f2:f9:8e:48:be:b6:b3:53:b1:
2e:42:c8:62:70:85:d9:42:b6:e9:9d:a6:89:04:1a:
db:51:93:6f:eb:5f:ea:20:6e:64:fa:f6:71:88:30:
63:d1:61:a4:e8:d3:f7:03:73:04:19:1f:01:d7:e9:
7f:31:e7:ba:e2:a0:72:b0:ca:bd:47:75:9e:17:c4:
a5:d9:b9:36:0e:fd:e7:43:3a:9b:a5:e7:2c:4d:4e:
75:7d:f7:17:42:15:83:51:53:23:0b:ea:5e:cd:ba:
62:9a:b6:5f:07:c8:63:e5:c9:7f:d8:1d:b4:be:62:
d7:a3:cb:21:18:2c:47:85:df:37:de:4c:85:e9:1f:
01:c4:44:0e:fa:19:5a:81:f6:ab:35:04:dd:f9:cb:
78:71:b9:97:a6:39:39:3f:06:24:dd:ce:e9:2f:66:
b0:fc:e9:5e:22:da:4c:01:0b:67:54:3f:d4:e0:38:
58:0e:25:e6:95:11:ab:3b:36:98:81:64:d0:1e:e7:
3e:bc:18:e0:d8:b0:90:aa:63:8a:4e:37:61:7e:cc:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:38:EB:AA:CA:59:BE:81:43:B9:BE:C1:26:9D:24:8F:D3:F0:E4:F7
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b5:1c:f9:56:38:1e:38:69:8e:21:d6:9e:c8:81:c5:5d:b6:
86:e2:f1:b4:c7:1d:0c:96:eb:38:39:2f:3d:22:09:7f:1c:83:
38:57:83:8b:f5:0d:f9:5c:cb:28:c7:1e:86:35:a8:eb:fb:7a:
14:bb:b7:59:a2:8c:0e:6b:40:4e:97:f9:7e:07:c5:61:0e:d9:
e7:d7:8c:f6:aa:da:cf:b4:ae:be:ad:17:d2:68:6d:77:d3:89:
1f:e5:a7:01:82:78:c9:d5:20:f1:99:5d:52:70:1f:c2:db:8c:
35:f0:a6:c8:eb:3b:5b:73:bc:63:dc:34:a2:b9:21:7f:82:fb:
56:33:5f:49:2e:84:f7:30:66:f2:1a:8c:9e:3e:5d:13:ad:64:
56:e3:d9:0f:c7:15:17:c6:d4:8f:b3:be:a5:95:45:8f:db:fb:
01:1b:5d:36:ee:00:4c:e7:2c:fb:12:63:b3:b6:f0:24:9b:99:
ef:01:44:58:49:89:a8:f1:c9:15:ca:18:5b:a8:dd:8d:ad:22:
98:73:ef:09:81:fa:30:03:4f:da:5a:c5:b5:d6:da:ab:23:cc:
f5:cb:10:04:89:c3:a8:66:ca:4a:fd:8f:f6:58:88:36:9d:8c:
c8:bd:e3:e8:b9:47:56:0e:18:5a:a3:e0:e8:2b:52:4a:34:9b:
56:20:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:14 2025 by rpki-client