Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: dp4+C5yUUmKICWh52Z5APYavWfUWmYvl539wm055em0=
Subject key identifier: 58:4E:27:C9:50:E4:15:95:40:30:0C:AE:12:56:0A:DE:C7:26:28:D3
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 0198D5BC5C02E95E52ABA21C3CDAABBAD617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0CB9
Signing time: Sat 23 Aug 2025 07:02:28 +0000
Manifest this update: Sat 23 Aug 2025 07:02:28 +0000
Manifest next update: Sun 24 Aug 2025 07:02:28 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: Ej3TsIaAyvYTw13iti+p8/xeAveu8HAcjh7NgQLceqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:5c:02:e9:5e:52:ab:a2:1c:3c:da:ab:ba:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Aug 23 07:02:28 2025 GMT
Not After : Aug 24 07:02:28 2025 GMT
Subject: CN=584e27c950e4159540300cae12560adec72628d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:62:77:2c:0f:b8:82:b8:05:84:04:a2:e3:
fc:d9:9b:dd:f6:d0:1b:4b:21:0e:7f:41:93:0d:90:
e2:d6:25:6c:79:b2:2c:6b:30:20:79:6a:95:2d:4e:
d0:8d:05:3a:a6:a0:25:96:43:ac:d2:6a:0b:71:08:
8d:85:7c:39:91:12:22:e2:9c:ad:5c:69:fe:ca:6d:
70:41:1b:da:95:68:27:1a:be:8d:7f:ca:89:7b:a5:
6d:36:62:d0:2f:8a:a2:fc:7d:d3:3e:cd:34:d0:3f:
d5:b4:ff:7a:fe:94:3e:c6:96:89:ac:29:6e:e4:dd:
28:49:2b:d6:f4:ab:4c:98:b6:81:c9:7f:1b:e5:9d:
e9:30:5d:ae:24:7a:9d:24:04:8b:13:4c:c4:e8:e8:
0f:64:c2:40:33:be:c4:59:d4:06:23:0c:ca:d8:68:
fb:09:e1:33:17:b5:9f:48:28:fa:ff:c0:f6:29:70:
1d:79:8f:5e:34:cc:d6:a2:03:5a:b1:c0:88:ab:e9:
0a:01:44:2b:9b:1e:dc:3b:77:84:7a:0d:9c:33:db:
24:52:5f:79:7e:64:12:c7:07:14:55:81:50:81:8f:
4a:78:c9:35:ed:1f:d6:55:cc:ec:b3:cd:f7:7f:84:
db:df:5d:30:d8:49:54:a5:a3:32:d1:9a:f5:76:26:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:27:C9:50:E4:15:95:40:30:0C:AE:12:56:0A:DE:C7:26:28:D3
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e7:db:e1:29:af:39:8e:98:40:64:ec:46:80:88:63:8b:b3:
7c:fd:7b:ae:fa:ea:fa:52:80:de:81:97:07:7e:56:b0:4c:b2:
30:7f:9a:20:46:c0:f0:1a:07:0e:df:65:16:3b:81:11:01:47:
28:79:9b:7b:95:5a:ae:0a:d2:b4:a3:d1:af:37:68:8e:b8:d0:
fb:61:79:76:07:fa:2f:93:80:bf:39:3c:8a:29:6b:61:ff:48:
31:1a:c9:a5:38:1e:41:b9:44:1b:61:7f:3d:5c:dd:af:93:3e:
1a:2d:04:41:86:df:c2:51:1c:25:ac:9b:6b:68:db:79:b6:2b:
5d:5c:fa:c7:72:e8:cd:a1:b8:7e:d4:bc:24:12:0c:46:b3:66:
01:90:eb:c1:0e:29:5c:7e:19:7d:12:8f:d4:1a:84:39:c7:21:
ae:91:cc:47:d1:6b:ae:a1:fb:8f:70:67:a7:98:9e:13:c4:2a:
f0:7d:d5:ba:69:f1:80:76:45:e0:21:ef:af:78:46:62:d5:d8:
56:a2:51:8f:16:d7:a1:f9:e3:6b:19:47:b6:9d:01:91:98:d2:
69:78:b1:98:bf:b3:d3:05:fd:04:ef:66:c4:41:e6:45:a9:7e:
1b:23:c4:e7:fd:ba:70:e6:f6:b8:f9:66:e8:d4:23:4c:74:13:
23:9c:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:01 2025 by rpki-client