
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: VvfoamYF7lgFtCXzvZG3LW2r3OObmbAjgA/boC6HqCQ=
Subject key identifier: 22:EA:FE:90:88:A1:D6:1E:34:C0:9A:46:F8:E3:D9:B0:5F:11:C4:EC
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 0198D65F14625B48D92B34CCEED168E8E5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0C45
Signing time: Sat 23 Aug 2025 10:00:12 +0000
Manifest this update: Sat 23 Aug 2025 10:00:12 +0000
Manifest next update: Sun 24 Aug 2025 10:00:12 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: vFBx0eh5zOPICuEPSpmXdAStlNVNrcia+CO7sDhJn04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:14:62:5b:48:d9:2b:34:cc:ee:d1:68:e8:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Aug 23 10:00:12 2025 GMT
Not After : Aug 24 10:00:12 2025 GMT
Subject: CN=22eafe9088a1d61e34c09a46f8e3d9b05f11c4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:26:d5:04:a9:b2:ff:2b:62:53:0b:52:74:
a5:43:f7:a7:a6:a5:9b:67:0d:55:d4:ab:a8:09:fa:
98:7f:75:62:04:12:0b:db:bb:68:05:25:8b:dc:45:
33:3c:8a:43:59:ac:d6:25:17:d4:8d:f2:09:52:4f:
83:c8:da:fb:6e:0d:12:d7:2b:07:85:3c:34:d4:de:
cc:13:d1:cd:74:52:cf:28:9d:9e:65:d3:53:53:dd:
ee:17:1f:3f:cb:55:a7:b9:7c:0b:37:9d:0d:0c:ec:
6a:07:eb:08:14:85:38:bd:b9:e7:33:11:95:25:63:
c5:6e:f4:07:ff:46:28:51:16:e4:57:06:45:df:40:
a5:2d:48:6f:3d:5a:c0:74:0a:dd:db:fe:50:b4:91:
bd:17:2b:66:85:e6:3e:cf:9b:0a:4e:e9:e0:e3:a5:
0b:32:14:00:61:65:c4:4b:54:a5:02:0a:0f:ab:6f:
81:52:62:04:19:47:e6:b1:2d:36:57:be:82:04:08:
50:5e:69:75:bf:6b:88:fb:53:61:b6:d9:35:85:3c:
b2:e6:71:58:7d:0d:42:7b:00:24:a7:53:b4:cb:26:
10:ab:35:68:90:bb:f8:ca:9e:73:1e:b5:56:b3:d9:
c6:3b:db:09:17:21:9c:90:74:64:b2:32:f7:f2:fa:
77:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:FE:90:88:A1:D6:1E:34:C0:9A:46:F8:E3:D9:B0:5F:11:C4:EC
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b8:d2:05:b8:d1:99:b6:68:42:bb:7e:2f:84:a1:53:b5:e7:
ad:42:ae:22:3f:48:bb:f8:54:7a:79:31:22:bc:7d:bf:72:d1:
8c:aa:d8:f7:29:5d:f6:b0:f3:69:4d:cf:71:e6:e6:eb:ae:a0:
10:84:09:3a:46:2e:0d:6f:96:33:ae:c8:09:35:5f:98:e1:9c:
1d:2b:34:6d:0e:ef:87:11:95:eb:4b:28:9d:53:b8:d0:18:09:
02:b6:c3:c8:d4:16:1d:f7:d2:66:f0:23:c2:cc:cb:10:f2:71:
de:99:e4:f8:fb:9c:cf:82:07:7f:60:32:64:f3:c2:65:53:20:
7d:d6:47:d0:d9:5e:60:fd:7f:57:cb:83:aa:41:82:f8:2d:13:
03:86:f6:53:97:28:43:fd:0f:06:80:89:9f:2a:40:0b:51:d3:
49:3c:eb:46:82:92:8c:49:28:be:5a:3c:f8:8c:2a:ec:b4:0c:
86:34:05:9e:ae:c0:e9:2a:54:37:cc:bc:74:22:51:7d:4c:b7:
27:3a:2b:07:7a:af:11:40:5d:ba:e4:05:99:72:a8:6b:14:40:
00:71:00:c5:df:93:d4:70:4f:a4:a3:0d:2d:90:ab:69:5e:e1:
14:ce:70:8a:d3:c0:eb:f8:60:45:25:66:c0:67:18:59:0b:c4:
4c:61:59:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:36 2025 by rpki-client