Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: tVmPE4xTiAXmups7IE1Fd/LiAbXyKXZgXPCclZ5gZ3c=
Subject key identifier: 78:4E:85:5D:64:36:43:29:35:02:BC:10:8D:29:EC:85:E0:29:13:0C
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 019844E3812FBBB1F4AE65315FA29DE94987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 04:00:17 +0000
Manifest this update: Sat 26 Jul 2025 04:00:17 +0000
Manifest next update: Sun 27 Jul 2025 04:00:17 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: 5mb4jvjw+rlrJ1fhYDfAjSSOb4q4GOjQpNa/WiLKmrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:81:2f:bb:b1:f4:ae:65:31:5f:a2:9d:e9:49:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Jul 26 04:00:17 2025 GMT
Not After : Jul 27 04:00:17 2025 GMT
Subject: CN=784e855d643643293502bc108d29ec85e029130c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f3:f4:ce:5f:63:10:e2:87:b3:d6:3c:4d:62:
55:7d:40:4a:c7:9d:c9:86:43:71:57:a8:b7:74:f0:
d3:c3:42:95:a6:42:c2:c9:f0:14:cb:eb:e7:0f:00:
44:fb:0b:69:52:ee:10:9c:0e:81:b1:96:0c:3a:b1:
10:d7:e8:fc:0d:c5:51:bc:06:65:2a:80:41:63:a6:
2a:02:87:e5:9a:75:7c:fe:a4:ba:57:3c:ab:66:11:
f8:73:1b:0c:7f:52:e1:36:6c:3f:97:11:4d:e2:b1:
4e:ec:b4:41:c5:c2:cb:0b:0a:20:20:ad:25:7d:d1:
1e:2b:e6:85:61:f8:31:2e:d7:ab:d3:3a:18:83:f6:
66:5b:f1:f5:48:ad:2a:a6:16:f2:bd:89:13:c9:ff:
b5:d8:83:21:38:28:06:3c:68:c6:07:68:28:fc:2d:
78:d0:d9:f9:30:f7:52:85:71:05:0e:17:42:56:0c:
c6:76:0c:32:ca:0d:5c:d4:88:4f:e9:f6:73:47:58:
b1:fc:58:6a:c6:55:c3:79:0d:f5:f9:d8:ab:63:8d:
60:89:95:8e:06:99:a6:68:cc:3c:65:54:ae:9e:c1:
cd:44:de:15:05:60:d1:68:81:e9:48:bc:0f:a7:d6:
f2:81:b3:a1:d5:fc:cb:7d:7e:61:ec:f2:a1:99:ba:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:85:5D:64:36:43:29:35:02:BC:10:8D:29:EC:85:E0:29:13:0C
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5a:59:21:5a:b7:aa:f8:8d:08:09:78:59:48:c2:f1:76:6f:
19:2a:01:c6:18:26:90:ed:1f:a1:6b:18:f1:a2:03:4f:f1:d6:
44:b3:3d:ff:12:a5:ad:35:b0:38:6a:dc:ca:42:c9:28:02:43:
4d:36:33:53:18:32:6e:a9:73:fd:7a:cb:71:fd:84:ee:b3:b6:
0a:bf:12:d7:29:d3:b4:73:d1:6b:38:a1:7b:ea:38:20:78:27:
d1:66:23:2a:8b:98:33:27:70:8e:78:7a:55:f4:1c:17:16:b1:
6c:fe:e2:f6:b6:2a:14:c3:8e:67:ff:1f:26:51:cb:00:47:77:
53:71:fa:fb:25:97:68:e6:a3:53:5e:ea:88:d1:d1:d7:d0:7a:
9f:ad:6e:e3:78:54:a0:e3:b6:81:c7:24:03:76:cb:e9:98:ae:
62:4b:4d:bf:03:5a:d1:00:b8:53:1c:b3:ce:38:bc:f4:7d:ab:
ab:94:69:2f:91:57:96:92:41:c2:49:d5:40:ad:df:6f:0a:e4:
23:11:55:8f:d5:63:a5:75:4f:41:9a:53:5c:cd:2f:13:33:bb:
3e:31:75:c2:2b:80:e7:97:a4:81:67:07:dc:bb:15:92:da:e9:
75:f7:1e:c5:76:7a:3c:1b:a5:6d:a2:6d:80:d6:a4:3d:5c:17:
f9:49:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:35:14 2025 by rpki-client