Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: 0xmbNb+EUraL8GrJRRco57Cq/imOuO0LpR2wuJj9F+E=
Subject key identifier: 41:47:8C:78:08:BE:99:81:1D:F7:FC:89:28:C6:04:B3:26:78:4C:B6
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 01984AAEE814F750985F1B0B28B4A9A459FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 02D9
Signing time: Sun 27 Jul 2025 07:00:33 +0000
Manifest this update: Sun 27 Jul 2025 07:00:33 +0000
Manifest next update: Mon 28 Jul 2025 07:00:33 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: ckz4jMPHV/YmcynieffIM80jYPq4kZA5FrzLxqbtx9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e8:14:f7:50:98:5f:1b:0b:28:b4:a9:a4:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Jul 27 07:00:33 2025 GMT
Not After : Jul 28 07:00:33 2025 GMT
Subject: CN=41478c7808be99811df7fc8928c604b326784cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:2d:cb:dc:22:39:f6:fb:1d:6e:93:d7:0f:
7c:0a:01:b4:08:65:80:fc:9f:c5:05:bb:5e:19:d8:
d1:d1:41:1e:f8:63:0c:fb:03:5e:ae:73:ad:46:4b:
aa:e8:2d:f3:e4:12:c2:b7:bc:52:f3:04:41:e8:b0:
b3:14:35:a8:90:71:b9:f6:53:a5:10:fc:cd:db:a6:
4f:8b:ec:88:13:43:a8:c1:a5:64:7b:0e:db:fa:d5:
9d:38:b7:ae:7c:80:d9:78:89:ef:d4:32:cf:f8:8c:
db:a3:4f:76:e3:08:c4:08:1b:12:2e:92:4f:e7:0d:
49:5f:a6:bd:ed:99:96:89:19:ac:98:ed:2c:95:60:
be:40:59:62:34:0e:10:5f:71:be:80:ed:11:14:5c:
f3:08:71:10:f4:29:b6:2c:e1:34:85:6a:46:d6:95:
5b:e2:bc:68:47:e3:3e:f8:76:0b:a8:48:38:e7:1f:
4a:2f:34:26:04:5c:d2:0f:14:bc:cc:5f:9d:f1:b4:
6b:7d:a0:91:89:92:b5:b1:3b:25:66:96:bc:67:6a:
d4:cc:19:f0:35:6c:94:cc:21:ac:8f:c4:b0:02:c4:
e9:47:65:be:f4:8f:81:5b:fd:fc:30:6d:2e:9a:3a:
08:c8:7c:30:c7:e4:fc:73:87:3a:8c:5e:8f:e1:63:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:8C:78:08:BE:99:81:1D:F7:FC:89:28:C6:04:B3:26:78:4C:B6
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:61:83:06:03:64:ae:56:92:be:7d:c2:fd:d0:11:5b:9d:f9:
7f:d1:d8:68:2d:d0:a2:e5:5c:96:8b:38:65:e6:23:77:8f:f6:
9a:ce:0b:48:7c:01:22:df:4e:8c:73:bd:8b:ce:9e:f0:dc:b4:
8f:32:0e:04:3e:70:55:ef:d5:94:4d:68:7d:0b:0b:49:c2:32:
14:e6:e9:1c:4d:52:c1:02:a5:de:1e:23:95:3f:0a:3a:b1:38:
f6:f6:01:0f:ff:06:ea:ae:86:df:48:75:36:a1:90:57:c4:61:
47:81:4c:0f:1c:67:a8:ea:d2:ce:56:e1:25:e6:7e:82:74:bc:
89:48:0d:0e:e3:8b:e0:2c:6c:fb:09:bf:20:df:f2:3d:1e:2d:
69:1a:6a:e2:69:7b:0c:ed:ec:6c:4a:3f:9e:9e:f9:62:a9:e3:
57:4c:76:19:c1:32:61:1d:07:ba:07:ba:b9:a7:d3:e9:0c:e5:
bc:e2:90:f4:1d:87:71:a9:d8:9c:01:e5:9c:31:99:f9:96:79:
2f:b8:03:35:16:af:03:c4:f9:d7:81:c4:df:6a:65:c1:9b:22:
48:1f:46:1d:57:85:fd:18:b7:47:3d:79:e7:0b:eb:84:8b:63:
b4:54:ce:15:34:94:10:f9:ea:a2:8c:f5:f6:9b:e7:ad:b4:e7:
1c:18:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:45 2025 by rpki-client