Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
File: zfQLRgtIuPNm_sXKObMcOAxkWjI.mft (raw, json)
Hash identifier: z6Uy2qHVTAZzdHFA0U+EPFD0N6PSTucSljUaxjJcGJU=
Subject key identifier: B3:9F:50:CC:D2:A6:ED:40:9A:4D:2B:0C:F8:8D:AF:75:63:D9:13:FA
Authority key identifier: CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
Certificate issuer: /CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Certificate serial: 01984A779A192EE2DE60CA69EB8C6BF51FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
Manifest number: C8
Signing time: Sun 27 Jul 2025 06:00:08 +0000
Manifest this update: Sun 27 Jul 2025 06:00:08 +0000
Manifest next update: Mon 28 Jul 2025 06:00:08 +0000
Files and hashes: 1: zfQLRgtIuPNm_sXKObMcOAxkWjI.crl (hash: duyEf7hyQ0Ln0J0cHcIOVX6kYp3O4B+zl9Yq9yDFtDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9a:19:2e:e2:de:60:ca:69:eb:8c:6b:f5:1f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Validity
Not Before: Jul 27 06:00:08 2025 GMT
Not After : Jul 28 06:00:08 2025 GMT
Subject: CN=b39f50ccd2a6ed409a4d2b0cf88daf7563d913fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:cb:bc:66:1e:bb:f6:06:c3:88:51:2b:84:
69:f3:16:d6:1f:3d:38:0b:90:1e:9d:28:7b:6b:3e:
f1:5e:64:c1:b9:b5:f4:95:ca:81:b6:66:53:e3:54:
df:68:df:fe:f6:1c:09:da:03:25:5e:22:03:b0:36:
7b:21:26:00:d2:24:63:16:68:e0:19:e2:f9:7c:f1:
c1:61:bf:e7:c8:95:ef:7b:c4:a9:2e:8e:ae:c3:4a:
77:67:18:87:25:83:c7:9c:c2:a2:02:ff:6c:b1:49:
9c:36:ea:34:17:4e:67:e2:9a:3e:26:9d:08:a2:d5:
22:9c:f1:65:20:19:18:39:28:51:0e:8a:0c:fc:76:
0e:27:a1:63:bd:be:d4:4c:fe:fd:e9:c5:ec:40:c6:
47:a2:4d:db:a3:a6:6f:5b:84:2f:60:a2:08:f2:5a:
3f:5f:9b:0b:02:31:b9:35:52:eb:ba:09:ff:7f:52:
2c:6a:62:34:44:32:4f:21:46:1d:36:bb:2b:f8:fd:
63:b6:73:4d:44:43:7e:e4:b2:8d:fe:c1:60:b0:e6:
64:33:bd:62:17:9b:04:10:c7:56:80:e3:29:b9:f5:
93:89:59:e6:60:ca:f2:b5:c1:ae:50:72:7f:f1:13:
44:37:3c:35:88:f3:5e:60:4a:48:06:ad:be:2e:20:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9F:50:CC:D2:A6:ED:40:9A:4D:2B:0C:F8:8D:AF:75:63:D9:13:FA
X509v3 Authority Key Identifier:
keyid:CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d1:82:0e:7d:44:16:f3:c2:29:69:20:de:e3:50:c0:48:ef:
b4:87:1e:22:1f:92:0d:7b:90:e7:fb:37:99:9a:9a:63:28:8c:
b7:41:7b:a5:88:0b:51:80:49:49:6a:02:2d:03:97:77:dc:48:
a6:8a:2d:c7:51:00:63:cf:8d:b8:92:c0:20:d7:84:43:14:dd:
3a:9b:29:0e:86:30:a1:a1:e9:0d:ce:6e:17:61:9f:33:2d:5e:
eb:3a:01:6d:4a:09:f9:6a:99:70:94:e6:97:ca:3d:84:ca:13:
d2:d9:bf:f5:fb:6e:1d:5f:b2:9d:45:ba:64:af:00:4b:d2:a9:
08:ff:98:ec:99:2e:aa:af:6c:4b:cb:ed:07:ca:5a:2c:e1:69:
38:4c:d5:f9:73:99:02:1d:af:0c:07:88:71:78:f7:4f:e8:2f:
34:06:47:c7:1c:8b:a8:0b:1c:13:52:5f:ea:8a:3a:57:d6:e3:
30:38:97:dc:1b:7f:5a:4f:de:62:46:b3:f6:7d:cc:40:8c:87:
ca:b0:f4:09:a2:33:93:05:ea:33:cb:ce:5c:3b:24:21:a1:73:
80:4e:32:51:74:66:82:10:bb:6c:7e:c3:fa:94:da:6e:f4:88:
bf:7d:83:a0:73:22:e5:40:29:86:e1:6c:b9:5c:9d:af:c1:8e:
eb:2e:48:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:37 2025 by rpki-client