Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: Zg8JSA+t26vrft9zN27CS+V0NcZeZ5oSSvbGdGM+B2Q=
Subject key identifier: 11:21:D5:50:64:88:6E:CC:F2:05:F9:6F:70:F1:FE:39:04:F1:4C:2A
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 01984965A21285FF4685B1C7ECA3F64B3CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 0E1F
Signing time: Sun 27 Jul 2025 01:00:54 +0000
Manifest this update: Sun 27 Jul 2025 01:00:54 +0000
Manifest next update: Mon 28 Jul 2025 01:00:54 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: IVp0Y0DvOzH3qGMKR/dEb47xnD5Z/L/fvXp5yz/tYIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a2:12:85:ff:46:85:b1:c7:ec:a3:f6:4b:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Jul 27 01:00:54 2025 GMT
Not After : Jul 28 01:00:54 2025 GMT
Subject: CN=1121d55064886eccf205f96f70f1fe3904f14c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:7c:33:51:05:fc:35:82:0a:bd:5a:ba:e3:
f3:33:8f:61:12:79:0f:10:f2:ec:1e:79:87:39:1a:
d8:98:af:81:03:da:86:7d:f1:42:9d:a9:63:76:72:
c1:d5:89:17:47:f0:0c:39:9d:2b:27:bd:e4:53:a5:
2f:61:94:d4:81:2d:ff:da:7a:dd:0c:75:a6:85:c5:
ab:a5:b3:e9:75:29:a9:2f:c0:41:fb:69:cd:ac:1e:
d7:45:6a:33:85:e0:bd:24:58:05:ee:c5:1d:92:23:
15:1a:d0:6d:fc:49:fd:e7:f3:2a:6e:0a:af:5f:70:
8b:17:af:7c:9c:2f:7b:2c:61:47:c3:75:42:4d:e8:
1f:c6:1e:3e:a5:96:92:f9:b0:8c:30:08:07:93:16:
20:65:4a:11:1a:8c:de:9a:ce:57:69:e0:27:f0:61:
e6:50:fd:2d:cf:b5:be:0a:09:28:46:9b:b3:82:41:
8a:30:98:12:81:48:77:58:19:92:97:9d:29:66:d1:
70:98:79:58:1d:07:de:59:ac:40:63:6d:11:96:3d:
50:7c:90:ca:31:b1:d8:f1:b7:b2:ef:b8:46:52:c8:
03:64:77:23:a8:f4:f3:a8:af:a4:18:f6:a3:69:27:
9f:e0:84:e7:af:24:42:70:5f:f0:21:a5:f0:e7:3e:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:21:D5:50:64:88:6E:CC:F2:05:F9:6F:70:F1:FE:39:04:F1:4C:2A
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:72:d9:1e:a0:3f:e2:52:04:4a:2d:db:8e:08:00:69:d5:b3:
14:dd:31:d7:20:04:60:24:de:79:8a:51:f4:c4:ff:4e:47:36:
cf:02:7c:ad:08:f1:79:44:ab:1c:e4:ff:92:9a:12:91:d7:2c:
48:ee:c3:e8:7e:e1:52:77:71:06:7a:b7:e7:05:d1:f7:79:ae:
9c:a9:d2:64:ec:d5:51:a9:af:c6:78:93:58:a1:b0:0f:da:27:
64:f4:28:3b:78:09:9a:77:ea:53:b6:e4:3a:95:20:96:cc:75:
43:8d:64:90:8c:f9:53:46:85:17:9f:94:d1:62:d3:22:e6:84:
22:98:b1:5a:32:f9:84:9e:35:a6:f6:c7:29:e5:e0:ae:d0:a3:
11:40:44:0f:9d:98:18:35:51:68:d4:45:6a:92:8c:76:a0:b2:
19:86:3f:4c:e6:11:20:3b:0a:b6:a2:a5:09:f2:ff:a5:69:b2:
34:6d:08:94:ae:f4:de:0b:d1:28:10:f5:1c:3d:fc:31:e1:54:
21:f4:06:9f:a6:47:56:d2:37:d7:56:d6:89:bd:37:de:39:39:
a0:ff:c4:a7:21:37:8a:a9:40:36:4b:2f:5f:2b:f8:c0:ff:6c:
bd:f6:32:57:1b:17:83:e4:64:94:7b:d7:83:ea:c7:8e:7e:82:
21:ee:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:39 2025 by rpki-client