Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: j6yKdR5HfMcTZ81v2qKGZ+3KnFnfV1DuNjJDdFk26uc=
Subject key identifier: 99:10:B6:B0:7B:A3:D0:17:19:A7:02:59:9D:87:36:6F:20:4A:1A:EE
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 019855DFD9DDBE903CCF44513A5B0E9D6FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 0986
Signing time: Tue 29 Jul 2025 11:09:50 +0000
Manifest this update: Tue 29 Jul 2025 11:09:50 +0000
Manifest next update: Wed 30 Jul 2025 11:09:50 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: C3j8W0pwJeuKYwAlgNMeX57K4hXegFyRPmZBa8n5O68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:d9:dd:be:90:3c:cf:44:51:3a:5b:0e:9d:6f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Jul 29 11:09:50 2025 GMT
Not After : Jul 30 11:09:50 2025 GMT
Subject: CN=9910b6b07ba3d01719a702599d87366f204a1aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:9c:5f:af:46:c1:22:5c:1b:de:8c:ac:25:
8d:d3:60:1e:4f:70:a0:0a:cc:cf:fe:b2:c6:cc:b5:
bd:29:23:67:65:a1:6b:ca:b5:12:96:06:46:1c:f0:
b0:37:21:a0:8c:75:2e:6f:77:f1:21:ef:ef:b0:84:
cf:65:d6:7c:7e:76:19:6b:45:01:03:9b:a0:93:62:
65:f7:65:06:5b:0d:45:7b:2b:1d:e6:fc:80:65:f4:
85:5d:c6:b3:1f:79:df:86:f6:f4:5b:40:00:ba:61:
a0:1f:23:21:5f:79:68:fc:70:9e:84:20:47:3d:eb:
8e:c4:ff:30:0c:4a:cc:4f:bc:60:02:04:55:8a:18:
8c:61:77:95:f1:4c:31:10:51:0c:82:78:b4:12:20:
32:fe:fe:97:e7:ff:3b:13:d8:81:b6:db:5c:bc:62:
91:f3:7d:4c:88:ee:e0:30:40:69:27:25:f1:53:c7:
7e:52:60:6e:a9:df:d0:f6:7f:f8:1c:74:d3:5a:22:
71:7f:89:a6:84:c6:d8:65:98:9e:1e:a4:f8:aa:d3:
1c:31:7e:7c:ad:53:c7:45:66:ea:98:f3:e7:fc:4c:
86:30:2a:cf:32:8e:c3:86:19:f6:ae:ec:c4:4a:56:
30:f2:c1:95:7b:7e:7c:8b:57:db:a6:79:ba:a9:2f:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:10:B6:B0:7B:A3:D0:17:19:A7:02:59:9D:87:36:6F:20:4A:1A:EE
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0a:5b:d2:70:94:68:f8:0c:5e:84:90:53:f8:0c:17:ae:6c:
7b:22:4c:79:81:6b:ba:09:3e:ab:1e:85:71:0e:9f:f9:86:f3:
f0:ac:ce:ec:b2:a5:d5:07:ba:aa:0a:08:1d:1d:ca:bd:81:ce:
c7:f0:4e:7a:11:fe:5d:71:cc:90:34:30:f5:74:72:45:a9:54:
86:0e:56:23:44:a2:5c:e0:d3:32:cf:6c:5e:58:54:a5:43:b1:
ff:2f:b5:0e:c1:ad:be:12:6b:9e:14:e2:21:76:1a:9e:a4:5b:
a9:dc:80:4f:cb:01:61:02:b4:27:76:2a:86:cf:50:19:5b:fa:
1f:d1:e9:91:f9:5d:ba:56:e6:22:0e:5a:ef:74:30:41:fc:08:
b8:0f:ed:bb:ab:e1:16:52:cb:7c:c8:6b:e1:54:51:c7:06:c3:
11:c6:11:33:9e:4b:15:7b:25:8b:75:4b:8d:b8:7b:24:27:45:
3b:76:ac:8d:a8:0e:02:56:8d:88:72:60:17:f4:9e:45:4e:91:
67:b4:98:f0:a1:04:de:56:4b:c1:10:b4:46:2f:80:7d:dc:eb:
b1:38:8e:6a:eb:ec:24:2a:48:c4:89:b4:45:99:d1:8a:8e:c4:
96:2a:66:10:50:b4:b2:d1:fb:16:e2:8b:38:54:e4:95:61:b0:
45:67:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:50:50 2025 by rpki-client