Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: 9ObfK4vMdsWHzGVVWS5rpFjOSmcez8Vx/UvB4YaMvrI=
Subject key identifier: A0:40:E3:2F:7F:CF:18:80:71:92:46:B0:7C:05:C8:A7:A7:66:56:EA
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 0198D8511ACA1F3819D31FEF244606E01400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 11FC
Signing time: Sat 23 Aug 2025 19:04:10 +0000
Manifest this update: Sat 23 Aug 2025 19:04:10 +0000
Manifest next update: Sun 24 Aug 2025 19:04:10 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: zTyZ720v3ALzn6+FKnAItnq0BfUe8wG2ttlQGormbno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:1a:ca:1f:38:19:d3:1f:ef:24:46:06:e0:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Aug 23 19:04:10 2025 GMT
Not After : Aug 24 19:04:10 2025 GMT
Subject: CN=a040e32f7fcf1880719246b07c05c8a7a76656ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:24:59:87:70:9b:f5:d7:93:58:57:08:ab:
15:44:1c:0c:40:c8:b3:27:e2:4f:8a:be:c2:1c:79:
4a:3c:15:19:f5:de:5a:df:20:d0:e0:27:28:25:5e:
0f:0c:e7:15:63:e9:2e:47:b6:d4:13:74:7d:e4:71:
d7:e9:e5:9a:e2:e6:27:88:51:1e:d8:b0:8e:e6:43:
66:de:ee:ef:99:ff:13:3a:fc:f9:81:b7:a0:58:39:
d7:02:8c:9a:48:bf:5c:be:7b:2a:2f:c4:df:fb:d9:
dd:8f:9b:fb:cf:d3:95:0c:7c:b4:aa:01:93:f4:f0:
06:6a:f4:2b:ef:dd:49:1e:d6:2e:4c:e2:ff:13:a6:
72:77:bc:ad:5b:0b:fa:a7:70:5f:cc:57:e9:63:70:
4b:35:95:c8:68:a5:37:0a:e5:bb:11:d6:76:86:35:
99:ff:db:cf:90:f4:9b:5d:3a:92:1e:69:83:1c:2f:
09:a5:8f:ee:05:43:fa:70:ad:d5:f0:66:24:b3:ed:
c9:34:02:34:9e:21:48:49:53:15:30:9d:07:b3:a8:
06:2f:ae:a7:23:27:6e:02:ba:73:f0:23:d0:49:10:
c6:5b:65:e4:0e:64:b0:70:17:3d:d1:14:ea:1e:53:
07:b0:86:cd:67:bc:a1:ab:5d:7d:b7:a7:3f:14:4c:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:E3:2F:7F:CF:18:80:71:92:46:B0:7C:05:C8:A7:A7:66:56:EA
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:26:32:29:86:a6:6f:d0:9e:c7:68:ee:71:b4:43:d3:b2:ff:
a9:62:9d:07:42:ea:4c:be:8b:7c:ed:91:3f:6d:27:f3:6e:54:
fa:81:2e:16:81:00:3b:5f:46:02:c5:be:08:f3:f9:82:ca:a3:
bc:b4:75:4d:6a:da:4a:4b:62:b2:f1:dc:e9:be:52:34:38:7e:
6a:48:ce:5b:f4:81:6e:ed:74:be:37:5c:9b:bf:f3:e9:06:f7:
7c:11:a2:a2:78:14:90:f7:8c:d9:53:d5:56:66:29:4e:c2:56:
a0:6e:e6:58:99:c5:df:c0:17:92:c7:fa:cd:c8:0e:81:86:8c:
a9:2a:a1:b5:ce:2a:76:ba:ed:0e:f8:8f:e5:ce:ef:2c:09:ce:
df:ec:7b:8b:61:5d:22:6f:84:a7:1e:fa:d1:03:df:f3:0b:1f:
d3:0b:2b:90:fa:71:e7:23:11:16:22:02:05:a0:2b:3a:3f:d6:
46:9b:66:08:23:ac:4b:8d:17:fe:8c:fa:15:6c:a2:4b:1e:f9:
20:1e:46:9b:c3:64:72:4f:47:b4:04:a3:e2:3c:61:63:ab:01:
c8:a3:d2:93:e2:59:e6:e1:03:d4:fd:a1:26:55:aa:74:c0:1f:
3f:a2:fe:e7:5e:c0:87:28:50:7e:1b:15:64:4e:f8:0b:d0:91:
f0:b5:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:15 2025 by rpki-client