Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
File: zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft (raw, json)
Hash identifier: v4WPSzS4vb14As4DUxrzOE4XnmHJsLsXR79NJ3w61dA=
Subject key identifier: 44:ED:FC:69:A6:EB:FB:A0:6B:CA:51:7E:6C:BC:77:F6:40:B7:66:B3
Authority key identifier: CE:42:B4:38:5E:57:72:F5:1D:58:8E:2B:B7:21:9A:12:23:99:58:7A
Certificate issuer: /CN=ce42b4385e5772f51d588e2bb7219a122399587a
Certificate serial: 01984DAFC7F7A6C712F70B493C45D6400F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
Manifest number: 0A27
Signing time: Sun 27 Jul 2025 21:00:22 +0000
Manifest this update: Sun 27 Jul 2025 21:00:22 +0000
Manifest next update: Mon 28 Jul 2025 21:00:22 +0000
Files and hashes: 1: zkK0OF5XcvUdWI4rtyGaEiOZWHo.crl (hash: 51ZRPBPyrfz6k2vmPoP02Ic16Ngyuw/ozmm4xvS9i1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:af:c7:f7:a6:c7:12:f7:0b:49:3c:45:d6:40:0f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce42b4385e5772f51d588e2bb7219a122399587a
Validity
Not Before: Jul 27 21:00:22 2025 GMT
Not After : Jul 28 21:00:22 2025 GMT
Subject: CN=44edfc69a6ebfba06bca517e6cbc77f640b766b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:e2:14:0f:6e:9b:31:d3:b1:ed:df:95:8a:
ee:f9:d5:75:55:cc:c3:b5:89:3d:74:dc:8c:15:08:
cc:43:3c:7d:cc:40:63:97:6e:71:e9:cf:0b:4e:9a:
7d:be:ae:92:0b:41:bd:82:6b:87:e7:fa:d5:81:21:
77:41:46:26:86:24:8f:0c:19:6c:f4:c8:c6:25:13:
30:26:58:b3:5b:f0:a1:35:61:5b:4c:7d:6b:85:2d:
2e:d2:c5:13:ac:a3:f5:b8:97:af:ed:60:dc:0b:3a:
1a:ed:62:4d:2d:85:57:20:93:1f:5f:3c:4a:fa:d9:
f7:cf:19:ba:10:39:d8:7e:00:4d:c7:25:a3:73:33:
3b:cf:1a:73:11:e9:05:8e:b1:fd:34:bc:d7:8b:5a:
b1:83:74:5a:38:0d:2a:43:91:b5:09:08:83:7a:e5:
a7:2b:08:7b:0a:c4:55:13:fe:ed:61:e8:f6:46:f3:
3d:87:a8:c6:1b:30:a6:82:7d:76:37:90:56:3a:05:
24:ee:c9:02:13:c7:92:da:a6:16:f7:e1:db:ca:fe:
b4:0d:b7:01:f9:11:58:6a:5b:ed:11:12:ce:04:4f:
16:f9:e9:69:52:74:c6:84:e2:ab:fa:43:4c:d4:00:
f4:28:9e:8e:7d:d2:5a:9d:40:cd:c2:d6:11:ed:00:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:FC:69:A6:EB:FB:A0:6B:CA:51:7E:6C:BC:77:F6:40:B7:66:B3
X509v3 Authority Key Identifier:
keyid:CE:42:B4:38:5E:57:72:F5:1D:58:8E:2B:B7:21:9A:12:23:99:58:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:66:5e:34:93:c4:91:0f:79:18:c6:3e:be:8c:cc:06:82:7d:
14:1c:70:20:3c:55:6a:14:f1:14:5c:e6:2e:3b:3b:cb:0c:1e:
63:6d:36:72:21:e3:78:f0:fc:1d:fb:69:b6:e8:cf:cf:40:67:
90:8a:44:15:f1:d5:c7:6e:bc:53:0e:87:26:26:ca:4c:0d:5d:
f8:ad:c2:23:52:71:8d:fb:2e:d5:35:78:66:eb:07:bb:f6:2e:
d0:89:f5:34:b2:92:a1:24:f9:b7:0f:97:e3:a0:0f:ce:46:6f:
40:65:37:3f:93:3e:04:c0:6f:7f:85:7d:86:34:32:0e:6d:71:
d8:99:89:05:57:3a:e3:c6:f0:9b:c9:d3:d8:9d:c5:00:4c:c8:
56:33:78:0c:98:ab:b1:5b:16:64:68:3a:24:ad:ae:01:39:10:
44:f4:a2:48:6e:6e:ce:cd:45:4b:ef:e5:79:53:e3:24:b8:96:
09:8d:03:f8:e8:e7:94:5f:9e:9f:e0:b2:b5:a8:1b:a6:c3:cc:
02:ce:a9:8d:f9:08:e4:51:8f:2b:87:bd:8d:51:a3:f2:ce:fa:
eb:61:de:62:c6:47:d2:be:57:ed:7a:35:4e:90:53:a4:a4:de:
dc:fd:5a:95:10:a9:70:d3:9b:dd:b7:bc:22:3b:b3:5d:96:c8:
9d:d0:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:06:10 2025 by rpki-client