Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File: zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier: B/gX2mkrIxLgHmYZMFWEEVCydqHrNQyJ7/mcAeXaUkI=
Subject key identifier: 4D:7B:DD:67:03:49:B3:C0:24:BA:E3:05:3B:E5:2D:99:A8:FE:86:A1
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer: /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial: 0198D65FE68B06D3BBA91DBA2A90DD5BB6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number: 0868
Signing time: Sat 23 Aug 2025 10:01:05 +0000
Manifest this update: Sat 23 Aug 2025 10:01:05 +0000
Manifest next update: Sun 24 Aug 2025 10:01:05 +0000
Files and hashes: 1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: EiedJygAKvVzpA0AniqZoiVwKbbOlofLkjQiYYVu4As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e6:8b:06:d3:bb:a9:1d:ba:2a:90:dd:5b:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Validity
Not Before: Aug 23 10:01:05 2025 GMT
Not After : Aug 24 10:01:05 2025 GMT
Subject: CN=4d7bdd670349b3c024bae3053be52d99a8fe86a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:83:67:27:c3:f5:77:39:c4:13:0e:83:6a:
cf:a7:08:48:70:e0:89:df:9d:68:6a:a6:4a:5c:b9:
05:d1:bc:39:67:15:be:9c:3c:65:1e:8a:e3:10:b6:
ae:d3:2e:9a:d2:80:86:bb:bb:36:b7:32:1f:ae:fb:
42:b8:3a:6c:57:62:62:4e:eb:67:01:8f:ff:d9:4a:
40:5b:90:5a:34:8c:56:c2:3d:ca:a5:a9:33:3d:44:
26:2e:95:8e:42:95:bf:3e:fd:91:c0:33:cf:3f:93:
fe:3c:48:d9:0b:03:bb:7b:0d:5c:75:0a:fc:ea:84:
49:60:15:11:b8:4d:01:0f:b3:2b:74:c5:9c:15:e3:
fc:e2:ba:40:04:97:72:f2:40:76:f3:49:77:74:47:
30:60:6d:98:80:ac:9c:94:18:7f:0b:dc:39:ac:e3:
a4:f0:74:58:1d:0c:71:92:82:2f:61:2a:a0:e6:e8:
b7:b9:e6:fa:44:a5:78:5b:34:31:6d:93:6c:96:bf:
df:8b:2b:e4:df:15:fb:7a:73:55:3f:50:dd:cf:1b:
50:85:48:fc:ab:49:28:30:67:62:c3:72:cb:f0:5d:
6f:3d:be:59:a6:1b:e1:1d:be:4b:29:d1:92:61:7e:
50:39:bf:e4:14:3a:c4:2f:77:1d:06:e0:da:f7:52:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7B:DD:67:03:49:B3:C0:24:BA:E3:05:3B:E5:2D:99:A8:FE:86:A1
X509v3 Authority Key Identifier:
keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:05:23:20:be:d0:73:a8:95:8d:7c:22:e8:15:7e:3a:98:32:
82:d7:19:7b:07:54:7c:50:a6:60:8b:27:93:74:cf:2c:b9:e7:
06:75:89:43:1e:f6:e6:b2:71:f5:8d:fc:99:e8:20:e2:a0:1a:
28:47:07:36:a3:25:d2:1c:0e:fb:3e:87:8b:e8:34:35:b5:56:
b6:5f:20:3d:a5:e8:0b:f7:8f:4d:14:36:f3:99:66:8c:dd:20:
64:b5:d4:aa:b1:19:6b:0c:8f:cf:49:0c:08:8d:02:41:37:88:
9c:66:d4:9b:d2:68:e4:d2:be:34:a0:82:2f:19:6e:6b:60:4f:
1d:d1:69:e1:e8:68:a4:09:f6:6b:e1:59:16:89:80:6d:78:b1:
0b:7d:90:75:6b:b8:fe:47:1c:6b:b9:ca:80:cf:d3:a2:45:30:
8d:3d:44:8a:0b:bc:31:c6:63:e2:43:be:e2:3a:0c:93:40:30:
ba:03:92:6b:9b:6f:c8:52:91:d4:4e:5d:6a:23:e7:8d:da:1c:
ca:43:df:ec:cd:61:17:47:16:0f:fe:a9:d9:aa:21:ad:a7:13:
9d:0d:cf:fa:cf:a8:f7:47:40:fd:f9:0a:a1:bf:b5:9f:70:53:
8e:cf:0e:56:73:89:71:2e:dc:17:51:c0:d4:38:5d:40:e4:f5:
d6:e9:f3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:21 2025 by rpki-client