Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier: sy4hBq0lmTRJBwicdK8GVXcCaUunxrMI6fBb1Ds+60U=
Subject key identifier: 44:39:F7:76:B3:62:AA:18:55:A3:FE:91:D5:9A:88:44:8D:5E:78:0D
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial: 01984B5523B3A8F00BB58ADBEADCEAA89331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number: 0AF6
Signing time: Sun 27 Jul 2025 10:02:07 +0000
Manifest this update: Sun 27 Jul 2025 10:02:07 +0000
Manifest next update: Mon 28 Jul 2025 10:02:07 +0000
Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: W5KjSPKhSOn04ZAfKCYh1LnovbYaV0gn2k9atw3tKAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:23:b3:a8:f0:0b:b5:8a:db:ea:dc:ea:a8:93:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Validity
Not Before: Jul 27 10:02:07 2025 GMT
Not After : Jul 28 10:02:07 2025 GMT
Subject: CN=4439f776b362aa1855a3fe91d59a88448d5e780d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:3e:f4:26:52:b9:a8:97:01:e2:ec:a8:6b:
49:66:6a:c8:13:5b:f1:90:ac:f9:06:fb:1f:35:25:
24:99:7d:82:a8:4c:cb:7b:58:3d:2f:35:d9:ac:a9:
b4:c1:47:fb:a3:bd:15:8a:f3:46:95:ae:14:71:0c:
42:49:95:f6:3f:ac:ca:ad:4c:dd:c9:b8:61:48:ed:
2e:f1:b5:d4:eb:45:29:d7:c1:fe:43:d7:bc:b1:5b:
91:a6:83:bd:80:36:eb:d5:c2:f8:55:e6:49:bd:13:
47:1c:d1:48:46:52:9b:af:f1:f6:5b:bb:84:b1:5e:
9d:fd:7d:11:da:32:83:f9:86:c1:45:9f:ee:63:2f:
bd:75:31:34:c1:9e:5a:8f:29:a2:f5:c6:11:31:e9:
c5:0f:f1:ab:7c:44:52:0e:6f:cb:2f:5e:e0:91:78:
c9:8c:2d:00:f3:05:9d:e4:b0:e7:40:6c:f4:f2:90:
10:84:f2:1d:8e:27:f9:c3:c8:df:26:00:be:2e:05:
32:54:b9:4d:71:73:98:47:f4:56:8f:d3:9d:62:18:
e7:e3:07:67:cf:47:8e:40:4c:e9:b5:58:97:3f:5a:
1e:e7:c6:3c:68:d6:10:6a:5d:1b:39:d4:16:f5:74:
f0:c3:9d:21:94:2b:49:7c:e7:90:00:7f:22:47:26:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:39:F7:76:B3:62:AA:18:55:A3:FE:91:D5:9A:88:44:8D:5E:78:0D
X509v3 Authority Key Identifier:
keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c7:8d:57:23:b5:d7:d1:61:f9:c6:4f:3e:2c:45:83:c4:7e:
2f:9c:e3:1c:ea:58:1a:19:e5:40:51:bf:56:51:bc:d6:62:bb:
44:da:03:47:e0:db:8a:23:57:e6:4d:1b:9f:12:fa:00:43:1a:
1c:0a:dd:2f:ff:14:55:a0:f7:a9:e9:0a:59:5e:0b:41:30:5b:
af:b3:30:96:e2:d9:73:cf:44:10:09:a4:e4:82:f5:9c:ed:9b:
52:74:56:cd:2f:0f:fa:62:ac:00:1a:de:c8:9f:44:b5:8b:8d:
a3:19:47:7e:66:44:06:ee:92:c9:ec:c1:e0:4a:6f:1b:57:5c:
c9:b6:c2:22:0b:c7:83:32:00:7e:8d:86:3d:b2:41:ed:68:98:
ab:fc:05:2e:02:66:71:2c:66:23:8b:e1:2d:cd:f8:e2:eb:6a:
50:d6:a1:02:7a:0a:c2:b1:89:28:de:5d:64:cc:fa:04:9e:dc:
91:1c:c3:14:8f:3a:d0:3b:80:08:1b:0f:f0:f2:65:02:ee:49:
8b:2d:aa:e3:9d:7f:bf:b8:46:29:47:2f:53:07:5a:35:0b:33:
a8:3c:f0:e8:7e:82:b7:0c:62:b3:b7:63:45:14:13:3e:89:b4:
5c:2c:3d:dc:b7:62:c4:d9:30:4d:50:49:97:01:aa:d0:9e:a6:
f3:34:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:47 2025 by rpki-client