Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: 0ORSFbVukPXGNLhComQguRdJN0tXfje6Kq8rNJzNCXQ=
Subject key identifier: F6:AE:76:32:B3:EC:41:FB:5C:B6:F4:5B:70:13:31:D2:50:98:35:0F
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 019849D3994F7206B542F31FD6BFCA6E74AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 0D93
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: i0Sh+FDOHO0nQzlMpjcJ3QaGKD8xvcEmyYxW3tKUsYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:99:4f:72:06:b5:42:f3:1f:d6:bf:ca:6e:74:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=f6ae7632b3ec41fb5cb6f45b701331d25098350f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:cb:68:b9:8e:6d:f5:93:7f:3b:c3:58:8a:
94:b2:4d:44:24:93:bc:8d:b0:c5:12:66:8c:c0:50:
7e:ea:5d:e1:ce:b3:2a:6d:f4:1d:b8:2a:05:aa:f9:
c9:c7:60:04:de:32:12:a3:02:63:ab:20:d6:90:56:
5a:6a:7a:e7:b9:88:a7:76:5b:86:c3:f0:83:63:8f:
c7:98:15:df:54:e0:7a:50:cd:9d:27:3a:ab:d3:f1:
2e:ed:5f:39:bc:db:a5:93:a9:7a:49:13:08:17:21:
fb:8a:84:04:53:34:56:58:25:45:ac:de:d8:af:40:
1d:cd:81:74:c8:0b:b6:d7:b7:5c:87:01:66:97:d1:
5d:34:c3:3b:4d:95:ff:fb:2d:9e:e8:d6:8a:a8:33:
9f:56:3e:47:3f:bb:08:ce:c1:24:e7:59:a1:7d:cf:
cd:a1:20:9d:b9:5e:d0:f1:d9:d7:8a:98:64:1d:d4:
96:32:22:01:b5:7e:c6:56:0f:8a:94:d9:60:c4:b0:
d0:66:ff:2f:05:f3:4d:8f:c6:7b:31:c8:3f:1f:ae:
4e:e1:b3:00:eb:52:52:3f:d3:08:44:43:69:67:f9:
02:78:e8:65:f9:82:f0:87:af:93:f4:37:79:19:34:
3f:0f:c8:0e:ef:9e:65:6f:96:97:28:81:4d:60:75:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AE:76:32:B3:EC:41:FB:5C:B6:F4:5B:70:13:31:D2:50:98:35:0F
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9e:5e:44:86:40:44:f9:5a:e8:b6:ef:73:a5:98:d8:ad:bf:
c4:0b:58:9a:c0:23:74:23:ee:65:5e:69:ba:7f:e1:0f:18:4e:
e9:19:0b:0a:77:28:d7:d2:6b:57:0f:7c:03:89:2d:a6:a0:8a:
b7:f3:6f:63:53:47:73:97:2d:a8:2e:e6:6b:b6:6c:15:7d:4d:
7f:c8:b7:d4:3b:f8:17:50:18:16:33:d2:d8:f7:15:4a:13:11:
c0:32:fd:06:f1:61:a0:fc:b8:65:48:29:78:d4:0a:09:e6:01:
51:ff:8d:71:44:a4:87:c5:3f:a4:ac:e7:84:2e:6a:47:40:65:
1a:ed:da:ef:96:a4:b6:a2:86:87:2e:8c:bf:df:78:bc:0e:75:
3a:e5:2b:5b:08:cf:4b:ce:22:0a:4a:30:ad:24:8a:dd:29:32:
0b:9f:4c:ff:09:70:c7:73:a3:b1:35:74:c6:c3:6f:2b:af:1a:
13:01:84:7f:80:ca:4c:e2:e3:75:66:07:55:7c:bb:c1:c9:e9:
cf:3e:f6:42:2b:14:b3:b7:7d:cb:2d:83:b2:28:d8:90:30:c8:
96:8d:d1:9a:33:08:21:55:a7:ff:e3:6d:26:ef:55:6b:17:8b:
be:42:f9:6f:9b:d0:e9:d1:26:4d:7b:b4:80:4f:08:8a:68:f7:
dc:ae:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:31 2025 by rpki-client