Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: dS11Hqk/U9C8EqFsIK33NI1iq+G+v4MT84+kXch7hOE=
Subject key identifier: EF:86:9A:1C:E7:17:55:46:E2:B1:5B:F9:C0:3E:D4:01:1A:D8:6E:3C
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 0198D705D046295FCD19F0AD547604BB9392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 13E8
Signing time: Sat 23 Aug 2025 13:02:19 +0000
Manifest this update: Sat 23 Aug 2025 13:02:19 +0000
Manifest next update: Sun 24 Aug 2025 13:02:19 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: SScqYFhMyEpAig/zW0NOIQw/pmeMD0odHw9YNHbqW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d0:46:29:5f:cd:19:f0:ad:54:76:04:bb:93:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Aug 23 13:02:19 2025 GMT
Not After : Aug 24 13:02:19 2025 GMT
Subject: CN=ef869a1ce7175546e2b15bf9c03ed4011ad86e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:40:dc:99:08:c6:f1:fd:23:9e:66:90:e3:
14:a8:cf:56:d2:b5:c2:80:c8:a6:73:c9:79:d1:04:
ee:5e:2a:42:36:46:cf:69:8a:15:62:89:27:96:f7:
c0:e8:56:57:46:1b:65:e6:27:13:be:a6:36:63:cd:
8f:19:46:73:c0:5f:87:5b:06:61:30:52:d7:ba:26:
85:9d:2b:75:cd:20:80:ea:b7:83:e4:e3:75:bc:59:
85:84:6c:0d:17:13:5d:a2:1d:e7:b6:dd:2a:3d:fb:
9a:4f:b2:b5:d9:ac:d0:15:6f:92:0c:a3:62:30:a8:
13:c1:23:99:17:46:69:00:a1:2f:79:c2:20:b5:43:
a2:cc:f0:b0:11:1e:a8:3e:a8:55:3d:e9:20:ab:2f:
b2:4c:50:cd:aa:8f:d3:f9:cc:7c:5c:b0:b1:f4:a7:
d7:65:68:71:14:48:02:58:90:df:9a:45:ee:e0:80:
95:85:4c:1a:7a:d3:d1:45:a0:4b:dc:aa:2e:ed:6e:
81:a8:f8:5b:bb:1b:36:67:e5:eb:8d:de:42:6a:13:
3e:ef:f7:c7:86:7d:81:a1:25:50:bc:d0:33:69:8d:
95:7c:2d:86:23:12:a8:62:ac:31:59:ee:65:4e:4e:
aa:7c:90:2f:9f:c9:e7:16:31:5e:2e:92:77:32:76:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:9A:1C:E7:17:55:46:E2:B1:5B:F9:C0:3E:D4:01:1A:D8:6E:3C
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:22:2e:27:f9:e7:d6:2f:2a:10:90:2e:f4:86:0c:ff:39:d2:
91:40:c2:0b:1d:5b:a6:2c:f8:67:58:22:08:7e:95:8f:27:2f:
1d:40:99:9c:e0:32:b4:40:e1:ad:ac:b5:d0:64:1c:6a:c5:2c:
57:b8:93:5b:92:9e:08:e1:5b:1f:06:53:7c:c7:9c:ed:42:d5:
bc:ee:0b:45:98:f1:5c:37:68:30:94:49:09:b5:6c:14:71:4f:
7c:67:b8:90:4b:98:99:12:22:61:17:d4:81:a4:00:90:6f:cd:
03:e1:0c:55:67:93:2d:9a:5b:77:9a:0a:af:fe:72:fb:d2:dc:
2f:bb:25:ea:a5:13:37:01:a8:b8:23:34:bd:e1:96:4f:2e:a5:
bd:19:c2:e0:71:b5:ac:03:5f:67:07:ed:41:51:93:62:29:b0:
82:98:bd:75:d4:dd:ae:13:05:f4:f4:aa:b9:d5:47:05:a5:44:
fd:34:27:3e:e2:03:a6:b5:0e:66:83:0c:50:9b:67:35:20:71:
b4:65:57:69:e7:08:f2:cb:2e:c6:b7:b4:8c:bf:97:4b:b3:8d:
39:38:48:1f:40:fd:3c:ef:b7:d6:e2:9f:5b:c1:c5:02:eb:af:
1e:0f:30:3c:6a:56:b6:89:9c:d3:97:a8:4b:17:fb:0e:3e:78:
ad:e3:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:49 2025 by rpki-client