Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: GyEjXbk8vdTMQdhmWGIMRhif9iPahhDBfBkuyLNlcf4=
Subject key identifier: 62:59:B9:FB:EF:D8:3B:06:87:F5:57:2C:E3:CE:49:EC:43:3B:B8:58
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 0198458854986B05FD929B36C01E2C577F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0A0B
Signing time: Sat 26 Jul 2025 07:00:19 +0000
Manifest this update: Sat 26 Jul 2025 07:00:19 +0000
Manifest next update: Sun 27 Jul 2025 07:00:19 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: 56na6jj0EYdf9rkhLtmhqK4sxNwwYemEjLf6cpSBruQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:54:98:6b:05:fd:92:9b:36:c0:1e:2c:57:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Jul 26 07:00:19 2025 GMT
Not After : Jul 27 07:00:19 2025 GMT
Subject: CN=6259b9fbefd83b0687f5572ce3ce49ec433bb858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:69:aa:3c:73:4b:6c:de:60:1f:1e:0b:04:
28:28:e2:74:74:76:a4:04:a5:60:6a:ed:c1:15:84:
ca:c8:84:67:37:71:41:df:ba:4c:ed:da:42:08:f8:
bc:47:05:e7:60:bb:c2:50:74:b4:27:69:8e:f2:54:
92:ef:f5:c4:c4:b9:8e:51:7b:d6:3f:52:3f:15:c1:
b0:03:36:6a:65:27:cb:86:8e:75:18:d1:35:4f:8e:
2f:4d:72:f1:b8:99:dd:3a:5c:1f:50:8c:8a:73:54:
4f:42:88:ce:c6:0d:32:a8:19:66:3d:dc:1f:52:04:
4c:93:c6:51:ad:41:ec:6c:51:fb:33:4d:35:b4:ac:
4f:e0:0f:9c:54:99:a5:41:ac:a1:aa:25:90:12:bf:
c8:81:4c:e8:38:11:5c:16:38:36:24:70:90:9a:b6:
a1:fb:a4:5f:84:45:5a:c5:20:dd:45:3a:68:34:7c:
ea:42:32:ee:36:cb:32:ff:ea:64:3f:9a:5f:93:e0:
93:a0:1f:7c:29:eb:7e:2c:d9:7e:e3:51:df:8e:ec:
46:75:96:6e:e2:ba:0f:98:6d:85:6a:da:64:5e:29:
2f:ee:1b:44:34:f2:21:fb:96:2f:da:9d:a1:cd:9b:
35:88:4e:1b:7e:71:32:2f:0e:8f:6b:45:f7:d9:15:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:59:B9:FB:EF:D8:3B:06:87:F5:57:2C:E3:CE:49:EC:43:3B:B8:58
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:b4:30:1b:63:20:26:f4:44:b7:ca:13:2d:5a:42:c7:69:
43:c1:e9:0e:69:1d:7e:aa:ca:9f:6d:0c:dc:c3:f3:96:06:27:
d5:6a:3e:12:f4:e3:ce:65:1d:3d:21:74:0f:a1:6e:d7:f8:20:
ed:1c:4e:ea:fe:69:40:68:b5:50:63:f6:8b:25:53:4f:16:de:
e9:cf:79:27:73:d4:76:17:b2:5c:95:85:3d:66:ee:3d:7d:26:
95:7d:68:a9:e3:e4:13:b4:db:bc:69:f9:b9:77:b9:b7:15:90:
9a:31:f7:3a:1a:43:88:21:b1:64:1d:49:46:91:5f:79:66:43:
c8:a7:2e:68:90:91:49:63:c3:19:1b:66:0d:8c:7a:4e:7c:69:
fa:3b:9e:fa:5a:b8:31:ad:12:94:3e:d1:b9:97:85:d4:8c:c4:
f0:bd:0b:f1:19:69:86:8f:df:1e:fe:4b:02:01:1c:7a:f6:b2:
06:0d:26:a5:71:ea:42:ac:15:0f:96:d0:90:ab:0a:5b:02:a8:
48:64:df:f5:a6:47:ce:12:3b:73:3b:c9:77:6f:c6:c8:ab:20:
aa:f3:a9:6a:23:54:11:f5:85:ad:1a:69:cf:a3:93:f3:80:04:
15:f9:da:e0:96:41:46:77:61:8f:0a:94:74:70:cc:6a:73:da:
c4:d9:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:49:27 2025 by rpki-client