Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
File: z3P3vZzZk2geMP7FxZtHVlIroxw.mft (raw, json)
Hash identifier: pI1OmjbNdlp2OCm5zhOSK10DsoE/IPKy2seZb9jNv3k=
Subject key identifier: 76:D5:49:2C:05:81:0B:AD:D5:BD:99:CD:19:E1:49:8B:29:C4:DE:0B
Authority key identifier: CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C
Certificate issuer: /CN=cf73f7bd9cd993681e30fec5c59b4756522ba31c
Certificate serial: 0198537BB096E8FF522B9CDA510D40474E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3P3vZzZk2geMP7FxZtHVlIroxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
Manifest number: 1602
Signing time: Tue 29 Jul 2025 00:01:11 +0000
Manifest this update: Tue 29 Jul 2025 00:01:11 +0000
Manifest next update: Wed 30 Jul 2025 00:01:11 +0000
Files and hashes: 1: z3P3vZzZk2geMP7FxZtHVlIroxw.crl (hash: NtzfhRyw3ZDxMA1U6PT5UT4gF+KBjhZBTcD34hU/wCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3P3vZzZk2geMP7FxZtHVlIroxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:b0:96:e8:ff:52:2b:9c:da:51:0d:40:47:4e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf73f7bd9cd993681e30fec5c59b4756522ba31c
Validity
Not Before: Jul 29 00:01:11 2025 GMT
Not After : Jul 30 00:01:11 2025 GMT
Subject: CN=76d5492c05810badd5bd99cd19e1498b29c4de0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:e6:3f:5a:4a:2e:d6:47:77:a2:9c:6f:14:
d8:34:a9:22:fd:15:95:bf:f2:08:37:0e:e1:e4:7f:
d1:35:dc:94:b5:24:6b:4b:aa:6d:ec:04:a7:a5:d4:
9c:3d:3e:da:b0:14:76:b7:56:fd:b7:f3:9f:c0:43:
ff:3f:a6:1a:f7:56:42:c8:33:20:61:f9:5e:fa:34:
9f:79:45:14:94:55:76:d4:60:b8:b1:3e:1d:87:ea:
8f:c6:bb:2a:d8:9b:02:96:49:11:2e:48:19:d3:ac:
b9:50:be:ad:99:27:43:31:44:14:39:36:b2:66:7a:
c3:6a:d6:9e:c2:d6:d1:6d:fe:a3:31:20:0e:1d:f4:
05:4c:27:45:2d:e9:16:af:7a:c6:94:28:cf:27:94:
48:d2:50:96:32:58:c3:5c:19:da:ef:f0:f1:11:ec:
ea:51:bf:b6:8c:cf:3a:c1:62:bf:a0:42:a6:7d:80:
03:60:79:3c:10:f2:62:8d:0b:00:b9:80:72:d4:b0:
6f:d9:9e:11:f3:b9:0d:61:dc:09:98:a4:15:d1:59:
fc:87:5a:33:69:30:db:5a:f8:83:6d:83:c1:4a:34:
2b:4e:1f:11:f1:95:88:80:8c:f0:92:58:7f:db:0d:
a1:b0:4c:8c:66:61:44:56:47:28:93:10:ff:17:4c:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D5:49:2C:05:81:0B:AD:D5:BD:99:CD:19:E1:49:8B:29:C4:DE:0B
X509v3 Authority Key Identifier:
keyid:CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3P3vZzZk2geMP7FxZtHVlIroxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:93:c1:81:e6:88:4c:85:84:d5:d3:23:96:84:ac:f6:52:aa:
21:7c:e6:ee:9f:1c:ba:ac:c9:27:97:09:3a:4e:d7:4d:b7:3f:
d5:f3:03:2c:15:91:49:8d:c1:5e:88:a7:3a:c4:21:18:3c:38:
1f:80:2b:8b:5d:e4:41:8d:f8:75:9f:74:80:0d:54:d9:fd:17:
8e:53:73:25:c7:d0:b4:b1:ad:2e:1e:9d:1e:0f:24:74:07:24:
4a:b6:11:e1:61:fe:07:e8:87:12:53:d9:45:34:99:c3:e5:3d:
10:98:20:25:96:23:5b:0a:ab:dc:e0:3d:19:1b:67:19:ee:ec:
5d:34:bf:14:02:8b:bc:1f:d4:ce:fc:be:d9:b4:9e:b2:83:03:
90:dc:65:a9:41:b2:16:de:81:48:02:5c:24:e0:97:61:1a:30:
b2:6f:b2:3f:d7:76:b3:0e:e5:f1:bb:17:c0:29:a5:5f:f7:3b:
da:ad:51:b1:0f:c7:30:c2:46:86:2b:16:7f:00:1c:c6:83:e4:
fc:4e:85:fe:46:77:b4:5f:63:76:c5:62:2f:14:f1:42:e7:7d:
20:87:e2:9b:09:30:68:4b:c9:24:29:da:48:7e:84:be:2d:42:
9f:60:e3:a0:79:b7:35:b5:9e:57:94:ba:6b:43:d2:60:e7:5b:
d6:32:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:28 2025 by rpki-client