Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: kBzfaZyTydn0ZmBHje73S7Pjl1Gp1Mc+wZDRVpZkg9w=
Subject key identifier: 44:7A:D7:C5:29:3B:23:D6:25:FC:6D:98:EC:92:DE:02:76:5A:39:40
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 019846D28628F3CFD293ECF4777A27F6CAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0C6F
Signing time: Sat 26 Jul 2025 13:00:58 +0000
Manifest this update: Sat 26 Jul 2025 13:00:58 +0000
Manifest next update: Sun 27 Jul 2025 13:00:58 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: nqqibsP/1prXaTnQHYXJIqXkMzsDeF613o+a53IWjFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:86:28:f3:cf:d2:93:ec:f4:77:7a:27:f6:ca:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Jul 26 13:00:58 2025 GMT
Not After : Jul 27 13:00:58 2025 GMT
Subject: CN=447ad7c5293b23d625fc6d98ec92de02765a3940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:b7:11:1b:b6:cc:2b:76:90:6a:be:55:dd:
49:9e:10:0d:79:1d:31:d9:3d:33:fa:dc:f0:b8:5d:
08:e4:69:6d:fd:5e:e6:f4:71:1a:b6:06:b2:45:70:
20:74:eb:dd:a0:d5:70:a2:ac:4b:b7:77:8b:e8:36:
bd:de:aa:b8:8b:d9:56:c9:05:1d:f4:3b:44:47:2a:
be:f7:d1:1e:0b:02:dd:12:39:c3:9a:e7:b3:53:cb:
d4:85:16:a3:f9:35:8e:8f:b2:0d:e8:32:e8:8d:91:
db:29:2f:5e:f7:1c:52:65:ed:68:45:b7:16:67:d3:
ab:43:d9:3f:d8:25:84:8c:62:a4:05:f9:8a:40:3e:
d6:c7:5c:48:35:d2:9e:9f:b9:5b:c6:24:25:16:d3:
2a:92:40:1c:02:a0:4a:bf:83:de:98:4b:71:27:eb:
cf:6c:db:d3:55:67:64:63:76:e1:d3:4a:21:95:26:
0d:6b:fb:ee:ec:78:d1:43:e5:76:92:36:7f:3b:c7:
c9:cd:b5:55:f2:3d:ab:43:eb:35:63:7f:02:44:04:
5d:60:1a:8a:d2:a3:84:ae:ff:09:f6:b7:19:ff:22:
ac:7c:a4:23:3a:94:87:4b:0b:65:3b:6d:9d:57:c9:
94:04:ed:85:65:49:de:00:62:9d:2a:89:d1:ba:91:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7A:D7:C5:29:3B:23:D6:25:FC:6D:98:EC:92:DE:02:76:5A:39:40
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:03:77:54:d2:f8:73:35:47:a9:2f:60:f1:8a:bf:68:27:96:
1f:73:40:c9:98:e7:24:33:35:84:37:e0:d4:33:7f:6e:db:6d:
8d:f3:df:00:ff:3a:b5:17:a4:8c:88:4a:3f:ea:b0:ba:51:c1:
43:d3:3a:0b:68:cc:e0:e7:e2:48:d1:4f:00:7a:4d:aa:c0:e4:
cf:6d:68:fd:3a:c3:a8:d0:7d:16:e6:1a:d3:fe:dc:fa:91:70:
4f:cc:1f:ff:c9:4e:3b:6f:4c:5a:73:2f:02:ba:4f:00:d0:8d:
62:a0:8d:80:50:2b:3d:f3:b2:76:c4:05:e3:20:1e:02:59:6e:
d8:c8:05:15:ce:52:a8:ff:7c:74:ff:6f:b8:87:4f:0e:84:29:
da:68:b3:1b:82:cf:ce:89:09:2b:74:82:0c:3b:c0:5c:20:37:
90:40:a5:ca:09:89:6c:c0:de:01:11:0a:02:b0:de:96:ff:89:
f9:20:3e:54:54:9f:a2:ef:8e:63:e6:53:b1:23:4b:47:30:23:
54:2e:d3:a7:63:1c:ac:7d:ad:34:f1:b8:44:32:69:9b:bc:10:
2c:1e:be:ec:38:34:76:e5:94:ae:dc:ae:80:62:30:58:6f:1b:
44:f4:5c:c8:ba:27:73:82:24:bd:3f:ca:55:aa:50:d7:74:b9:
0d:7d:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:11:51 2025 by rpki-client