Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
File: z4duDnrrYE0WMdSaAl4XitJ0qBI.mft (raw, json)
Hash identifier: tq7OcvqCP94bqsWEwJ8s4pLHPP92n0xJBbqIUalz/z4=
Subject key identifier: 35:64:B9:9F:3A:98:78:42:33:73:63:7C:93:7C:90:66:5B:8F:5C:C3
Authority key identifier: CF:87:6E:0E:7A:EB:60:4D:16:31:D4:9A:02:5E:17:8A:D2:74:A8:12
Certificate issuer: /CN=cf876e0e7aeb604d1631d49a025e178ad274a812
Certificate serial: 01984A41325BDD115CE401FA5D9E10F7E5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4duDnrrYE0WMdSaAl4XitJ0qBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 05:00:43 +0000
Manifest this update: Sun 27 Jul 2025 05:00:43 +0000
Manifest next update: Mon 28 Jul 2025 05:00:43 +0000
Files and hashes: 1: z4duDnrrYE0WMdSaAl4XitJ0qBI.crl (hash: bdWoy+4nYQtS1ZSqVCVJLe+MwsACPa4QKRgsxjc0hTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4duDnrrYE0WMdSaAl4XitJ0qBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:32:5b:dd:11:5c:e4:01:fa:5d:9e:10:f7:e5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf876e0e7aeb604d1631d49a025e178ad274a812
Validity
Not Before: Jul 27 05:00:43 2025 GMT
Not After : Jul 28 05:00:43 2025 GMT
Subject: CN=3564b99f3a9878423373637c937c90665b8f5cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:66:1a:76:13:a8:ac:37:71:34:c2:5b:0a:
f6:47:fa:dd:c4:b0:65:41:63:fa:32:33:16:aa:65:
d7:26:67:3d:1d:50:2f:bb:c7:38:0c:b3:f2:f4:67:
08:60:8b:c6:83:94:36:ea:3a:04:26:39:b5:c4:a7:
29:00:42:cf:48:b7:91:c5:cf:9b:84:4f:38:77:09:
30:05:67:7b:47:79:85:9b:c4:dd:62:ae:22:3e:76:
1a:79:f8:c2:b2:b2:ad:3e:c2:ce:ab:28:70:49:25:
46:48:02:48:1a:91:21:ec:e0:06:47:dc:21:c2:ea:
52:3e:eb:d5:b2:35:54:e6:70:76:48:87:b3:7c:5d:
e4:16:ef:21:79:ac:aa:c4:af:2c:29:d2:a0:f5:e9:
2f:5f:dd:75:3c:2b:65:8e:d7:12:bc:a2:ed:ac:2d:
71:0b:2b:c7:c8:98:33:05:46:3b:4e:e0:17:d3:0a:
9d:de:a9:dc:92:5c:9b:c2:f0:e5:90:a0:46:93:fc:
23:e9:90:6d:89:82:dc:f7:a2:71:28:67:a6:07:d4:
6e:86:b1:f1:74:bd:3f:ce:57:52:1b:89:ea:70:4d:
59:bb:10:6f:86:57:c5:54:70:13:07:8e:bf:91:46:
f2:07:fe:f0:b4:9e:ed:ca:2e:f8:49:f9:34:e5:88:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:64:B9:9F:3A:98:78:42:33:73:63:7C:93:7C:90:66:5B:8F:5C:C3
X509v3 Authority Key Identifier:
keyid:CF:87:6E:0E:7A:EB:60:4D:16:31:D4:9A:02:5E:17:8A:D2:74:A8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4duDnrrYE0WMdSaAl4XitJ0qBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:19:ed:8b:ea:93:67:02:32:8c:bc:29:24:dc:96:5a:7a:
60:fd:dc:7b:ea:d0:9f:ad:a3:c3:37:35:b6:58:5c:92:b2:bb:
bd:f1:c9:d5:40:e0:31:8a:82:4e:ee:2d:f5:ee:70:b0:69:0d:
08:35:18:eb:6c:70:ee:89:4c:5a:b7:c8:e5:e0:fd:d9:46:e7:
fd:e2:10:5d:f1:f4:46:c3:81:2e:b2:df:a1:97:04:84:39:f1:
38:0e:8a:08:09:e0:a1:01:63:a0:66:5a:6b:8a:7d:76:99:47:
9a:03:0d:41:70:f6:1e:cd:e6:31:6a:f7:75:da:de:10:2b:4b:
0f:f6:b5:4e:11:da:55:3c:c0:49:7e:3b:12:c9:ea:83:6e:f4:
12:22:04:ed:de:33:6a:40:49:46:d2:17:c3:52:84:10:13:38:
97:85:2e:70:0a:34:b3:b7:c6:99:19:54:ee:7c:2f:5d:d7:86:
8e:d6:55:29:72:8f:77:f1:44:12:70:33:d5:48:c2:96:60:60:
15:3a:9e:89:37:eb:c4:3e:ff:85:fd:ec:2a:ec:8a:12:2f:3b:
85:98:9b:55:15:95:b8:32:04:dd:67:0f:b6:a4:5d:87:1f:39:
bb:d5:fe:f8:52:08:5a:8a:20:f8:df:c6:af:34:e6:b7:08:92:
1c:9b:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:32 2025 by rpki-client