Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: u3bpI6oa5MkVcX8JUarO9aPqFH6Bu6bF4H11oJojftQ=
Subject key identifier: E9:37:7B:A7:68:89:A4:E0:0F:62:5F:FA:72:6B:31:0B:F0:10:13:43
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 0198530CE570F53DC356E7FCE4AFDAD0C83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0F5D
Signing time: Mon 28 Jul 2025 22:00:10 +0000
Manifest this update: Mon 28 Jul 2025 22:00:10 +0000
Manifest next update: Tue 29 Jul 2025 22:00:10 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: ittdRF8gog0o8XPyWvnat96m2+6jGnTIcUi/J0ZitgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:e5:70:f5:3d:c3:56:e7:fc:e4:af:da:d0:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Jul 28 22:00:10 2025 GMT
Not After : Jul 29 22:00:10 2025 GMT
Subject: CN=e9377ba76889a4e00f625ffa726b310bf0101343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:66:e1:e9:48:6a:c7:ef:8f:8d:6d:e7:1f:
0f:ee:fe:49:1f:82:5d:bf:e6:5f:62:8e:e9:45:6a:
07:03:77:89:24:9c:a9:e4:a5:88:96:4f:66:24:9e:
c1:12:2d:e9:fc:f0:f2:25:cf:ab:25:89:91:5a:c9:
35:46:f8:6f:8f:80:49:ab:23:df:aa:90:e4:1d:ec:
08:28:23:da:54:98:75:29:71:c2:5f:d4:e8:9f:0a:
2a:20:2b:6c:b5:c1:00:99:f6:1c:68:5c:eb:3a:03:
d4:73:ec:f9:5e:9f:ae:2c:15:60:aa:db:08:de:28:
ba:54:8d:7d:c6:48:2d:5c:23:8a:3a:29:df:a0:b2:
05:ba:98:a6:7d:98:3b:51:e2:96:8c:73:63:2b:4e:
76:9a:1d:b0:d2:e7:3a:67:41:8f:4a:52:1a:2f:4e:
a2:5c:aa:08:b9:d1:69:9e:1b:3f:1c:c1:20:ab:21:
a5:2d:ff:91:03:2a:73:63:af:1e:29:4f:b0:63:66:
1d:68:f7:12:fa:fd:93:78:d8:55:3f:ed:26:d7:7e:
d9:ce:41:ce:6f:cb:dd:82:eb:11:e1:4f:12:96:8a:
7c:9b:41:d2:9d:bb:7f:3b:10:4d:51:4d:47:c7:30:
3e:f5:43:18:d8:58:8a:09:2e:2b:d5:5b:79:81:47:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:37:7B:A7:68:89:A4:E0:0F:62:5F:FA:72:6B:31:0B:F0:10:13:43
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9a:16:bf:b2:d3:4d:f5:53:01:9e:99:50:11:3e:f1:e3:2c:
dc:6d:cd:d7:b0:6e:df:a3:8f:da:9b:44:2d:55:79:21:7d:b0:
4b:00:96:a7:74:f4:8e:76:c6:23:46:08:8e:7e:bb:6b:3b:27:
39:80:3e:d7:f9:5e:62:4c:a8:c1:3b:e3:9b:b3:c4:ff:ba:90:
c3:c8:2e:a2:71:3f:03:61:4e:ca:3c:61:d9:ce:aa:5c:4f:f6:
66:d7:e0:c1:cc:1a:63:50:fb:1e:fa:85:cf:94:41:37:20:75:
bb:82:6b:60:28:73:5e:50:77:3e:7d:b5:8b:4c:29:51:f6:88:
7a:da:5f:1a:03:3d:c1:18:38:4d:e0:21:86:38:b0:a8:d1:6e:
03:dc:5b:00:99:87:8a:d1:5a:7c:44:ed:f1:55:74:6b:2f:18:
a1:59:b5:e2:2b:4c:47:20:85:d9:7e:31:92:a6:38:0b:fc:92:
8b:fb:43:f4:c2:c9:25:6c:49:8e:90:c3:2d:ed:87:e7:8a:b8:
09:24:a3:77:53:80:fb:38:0a:39:7f:64:37:d9:28:1c:8b:69:
cf:c2:e0:97:fa:ee:f2:3b:7d:dd:df:03:c8:4f:9e:f0:5c:86:
27:37:42:1c:c7:32:d8:27:b1:66:f2:d4:b9:c0:a3:ef:ac:88:
4f:a3:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:13 2025 by rpki-client