Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: ws3T6wlLoUU3dI9H3s0iLKntZGB2+vAlwaXIMB6VNQ4=
Subject key identifier: DA:AE:F5:8C:85:17:70:C2:46:C9:AD:71:80:8E:68:B9:8D:7F:EF:BB
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 019851FA522C68D154C6E130CB750693C685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0D48
Signing time: Mon 28 Jul 2025 17:00:16 +0000
Manifest this update: Mon 28 Jul 2025 17:00:16 +0000
Manifest next update: Tue 29 Jul 2025 17:00:16 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: Bs9LHcYfGpkCPXOtpG8wxzy06LpNvBvsHa8deOCRhzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:52:2c:68:d1:54:c6:e1:30:cb:75:06:93:c6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Jul 28 17:00:16 2025 GMT
Not After : Jul 29 17:00:16 2025 GMT
Subject: CN=daaef58c851770c246c9ad71808e68b98d7fefbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:49:08:d2:4a:e7:de:25:fd:fe:55:87:ba:
4a:cd:7c:f9:6f:38:17:ad:9c:8c:4f:76:e6:c1:e3:
85:0c:87:4b:e4:91:f3:bf:a1:75:3a:6d:35:82:8f:
a6:b9:ab:47:3a:3f:f4:74:c0:cb:81:e8:36:10:7d:
89:6e:df:90:b9:a2:09:03:f7:eb:f1:b4:b5:6d:c5:
2c:c0:63:a3:f7:7d:d9:85:eb:53:1a:78:19:32:65:
2b:f5:09:09:3d:8a:1c:14:ec:c3:a2:27:a7:00:d5:
53:87:f1:fe:d0:be:12:5a:10:dd:e9:d4:7c:7a:61:
77:a4:92:55:fa:0d:53:2d:68:5a:5a:96:5e:01:50:
3b:5b:59:9d:f3:44:f6:51:72:4b:e1:49:41:66:c3:
94:9e:66:f5:98:cd:76:37:4b:40:0c:f7:d5:35:c6:
19:9e:8c:c8:a0:95:9d:7c:c7:af:e1:20:06:62:e9:
bd:10:19:7e:52:f2:fa:b4:3d:7e:07:2c:66:bd:ce:
1a:a1:c9:59:0a:4d:1c:bb:93:78:98:cb:65:11:78:
6f:b7:7c:c5:ce:8c:b9:77:c8:26:ff:54:4b:e2:c7:
08:75:7c:50:ab:fa:10:fe:87:94:a1:25:db:01:3e:
e0:48:e2:78:cb:70:39:8b:ca:b3:12:16:6f:7d:be:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:F5:8C:85:17:70:C2:46:C9:AD:71:80:8E:68:B9:8D:7F:EF:BB
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:07:29:71:81:eb:aa:ee:b1:93:c8:f1:f2:5f:2f:be:2e:06:
5f:3c:c2:24:e5:00:98:ac:4a:31:1b:d1:92:02:a2:1f:55:7e:
1f:74:48:f7:01:17:23:fc:84:72:4b:b8:79:bb:74:0b:93:2a:
59:bc:43:95:bb:77:f8:d6:1d:8b:80:7c:0d:e3:49:73:94:63:
f7:ca:17:7c:15:ee:be:27:ef:5a:0f:26:4a:0c:d3:1c:d9:04:
25:46:60:0d:19:d7:ed:9a:da:78:f1:68:39:b2:19:a6:0f:5b:
78:28:92:18:99:bd:d4:ee:6a:f5:c1:98:4b:66:62:5e:2b:c8:
5e:71:2f:25:ca:24:9e:9c:2a:43:c0:ed:8b:cb:25:e2:ea:93:
0e:1b:93:92:bb:11:b3:69:93:7a:47:80:7b:ca:89:7c:29:6f:
1c:10:08:e7:e5:59:43:85:34:ba:2b:30:59:90:85:47:c8:b9:
a7:0e:ca:d5:ff:d9:81:bc:a3:a2:e5:cf:06:1e:b4:0e:e7:6c:
7e:76:fe:16:3c:c6:c8:01:c4:6b:0d:19:4e:3d:49:57:49:a7:
27:2d:95:ab:64:7a:8a:21:b9:32:62:64:4b:5f:1f:59:b9:ce:
c7:3d:28:80:bf:f0:44:5a:1a:7f:db:d9:a2:fc:b3:14:c9:d2:
72:e1:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:06:48 2025 by rpki-client