Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier: aO56LOzULScCog6MkC7wz1vcEX54M7hmWhbbvKSBxWo=
Subject key identifier: 14:A4:68:93:36:2B:43:A2:06:7D:97:92:E2:E4:BB:CB:CC:F5:53:B2
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial: 0198477729A6B199A8DB99896C35665B2143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 16:00:48 +0000
Manifest this update: Sat 26 Jul 2025 16:00:48 +0000
Manifest next update: Sun 27 Jul 2025 16:00:48 +0000
Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: QBr8gfR2mWMw/NVDt2G4cIn1McMQfUyCF4B8imIDYIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:29:a6:b1:99:a8:db:99:89:6c:35:66:5b:21:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Validity
Not Before: Jul 26 16:00:48 2025 GMT
Not After : Jul 27 16:00:48 2025 GMT
Subject: CN=14a46893362b43a2067d9792e2e4bbcbccf553b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:33:48:ee:8b:cd:4f:9a:d9:69:a2:39:ce:
11:12:1a:73:90:5c:cb:aa:37:bf:7d:0d:6f:7e:39:
3d:f8:10:a5:0b:56:e7:54:42:a3:76:43:24:db:1a:
03:a6:b8:7b:f4:13:70:f4:68:45:c1:c6:5d:f5:92:
86:d8:02:f5:57:e6:ff:3f:79:83:6d:e4:2d:b9:a1:
13:92:29:20:05:d0:b0:48:82:b4:b1:60:ea:4e:72:
7f:20:d9:ba:79:b4:14:bf:5f:25:8e:74:a0:b1:7d:
87:8e:9f:ee:35:9c:57:78:04:76:9c:bf:03:28:3c:
08:a9:39:02:7b:5a:81:a9:8d:a3:34:63:9d:cc:30:
66:13:fa:08:5b:d3:b3:0d:3f:2a:a6:43:36:fb:65:
8a:17:3e:0c:3e:bb:4d:01:a3:48:72:d8:dd:3c:df:
27:93:40:ea:7b:2b:b4:d7:1f:c5:9a:72:40:21:ef:
40:fb:ac:27:46:f2:3a:00:a2:85:fe:b2:6a:6e:29:
ab:a0:1e:3f:97:f8:5e:21:cc:ee:e7:9c:5b:9a:20:
44:b7:d5:ea:fe:23:fc:fb:ea:f6:9a:f8:80:4e:7c:
a4:be:60:94:aa:7d:7a:a6:7a:9b:f8:54:e4:26:4d:
66:c6:ac:53:a0:c2:35:d7:e4:e7:8c:f8:aa:36:48:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A4:68:93:36:2B:43:A2:06:7D:97:92:E2:E4:BB:CB:CC:F5:53:B2
X509v3 Authority Key Identifier:
keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:4f:5a:18:81:04:d9:9b:7a:d6:60:6f:21:37:b7:c1:1f:
2a:89:24:ed:12:a0:bc:1d:fd:3c:30:ea:53:bf:ed:48:55:0d:
da:70:71:10:18:fc:ab:f6:04:fe:8e:4c:fa:ae:19:3d:53:d6:
15:b5:a1:53:d3:17:24:4e:b5:7f:cc:8f:0c:33:5b:7d:9a:32:
9e:26:04:41:c5:44:c8:4d:69:e8:a5:1e:ae:c5:1e:ec:d9:d0:
b3:d3:5f:3d:a2:e7:ca:e8:b8:42:35:5c:d6:59:54:89:c2:c9:
0c:15:91:1f:b7:96:14:c1:cd:50:c8:fd:36:2d:71:e2:d2:e0:
9f:96:d9:15:f8:a3:62:f0:fc:98:d7:b8:80:fd:bc:07:a4:8f:
1c:80:85:56:8d:7a:83:8d:a3:b1:72:00:86:30:a3:40:00:f6:
87:7a:b1:48:ae:69:da:24:89:83:77:f2:76:95:27:a2:6b:07:
ac:70:a2:23:81:33:1b:4e:54:45:c7:d1:20:37:a2:d3:f5:49:
41:6b:65:d4:cb:9c:02:9a:ad:16:36:d7:94:5a:d4:1a:e6:6b:
51:57:0e:12:7c:f0:72:f8:ba:fc:e4:f2:6e:ca:86:ba:48:a6:
b9:9e:b4:89:f3:31:6d:75:e7:db:61:0f:78:85:5f:30:55:5d:
a3:ca:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:58 2025 by rpki-client