Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
File: CZoxZcQAepQBMaMnzHfMIhzBadk.mft (raw, json)
Hash identifier: aSM8mQsLBMd0kpeHV2pEBVVe3F9sqs8RNmR6AzR91gw=
Subject key identifier: 68:99:73:82:CF:BD:92:CB:B6:EA:FD:99:BE:85:07:98:2B:7A:D6:CB
Authority key identifier: 09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
Certificate issuer: /CN=099a3165c4007a940131a327cc77cc221cc169d9
Certificate serial: 01983DCFFBA5BE1704B6A55A852D9214392E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
Manifest number: 15F7
Signing time: Thu 24 Jul 2025 19:01:37 +0000
Manifest this update: Thu 24 Jul 2025 19:01:37 +0000
Manifest next update: Fri 25 Jul 2025 19:01:37 +0000
Files and hashes: 1: CZoxZcQAepQBMaMnzHfMIhzBadk.crl (hash: iDbLCXSggglYK9ASUQCdVqDs3+p6ID7TmdL8yjRI3XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:fb:a5:be:17:04:b6:a5:5a:85:2d:92:14:39:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a3165c4007a940131a327cc77cc221cc169d9
Validity
Not Before: Jul 24 19:01:37 2025 GMT
Not After : Jul 25 19:01:37 2025 GMT
Subject: CN=68997382cfbd92cbb6eafd99be8507982b7ad6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:9f:a2:b4:e2:5c:3c:b7:c0:59:88:4f:c2:
12:a6:0c:62:7e:41:cc:b9:20:b8:7c:da:a0:45:4a:
35:20:7b:dc:d9:06:1e:6a:59:4b:f7:89:be:ac:0c:
85:e8:e5:18:23:e2:ee:68:57:ad:d0:5f:d6:1b:c7:
d2:f8:ef:f1:25:42:86:a4:0a:1b:88:0c:44:4d:4c:
a1:5a:c8:6a:2d:38:a0:82:26:42:70:f6:cc:27:be:
49:cb:89:db:bd:52:21:27:97:2d:66:06:9f:a3:9c:
87:04:cf:67:5e:de:58:d7:0a:16:ed:76:b0:4d:61:
39:95:ab:fd:4d:4c:4f:b3:9e:29:e7:87:a4:74:bc:
55:0f:50:98:cf:b0:dd:97:d7:ca:3e:7f:8d:e8:66:
93:b7:f4:09:c4:5e:a6:5a:18:62:c1:b8:03:80:c5:
11:1a:1d:53:f8:6d:24:6b:20:e4:44:35:2f:b8:bc:
41:ea:73:8b:dd:dd:b0:f1:67:a5:31:bc:c7:a2:56:
87:77:87:c2:21:54:17:17:97:1b:4f:a5:4c:b0:bd:
db:41:e9:6a:b7:75:e6:4a:59:19:26:74:2a:9a:ef:
bb:1d:06:1d:a5:cf:e4:1f:63:f5:a0:c5:93:76:11:
b6:b4:d8:2e:42:3c:3b:f9:f0:b4:ea:75:46:fd:25:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:73:82:CF:BD:92:CB:B6:EA:FD:99:BE:85:07:98:2B:7A:D6:CB
X509v3 Authority Key Identifier:
keyid:09:9A:31:65:C4:00:7A:94:01:31:A3:27:CC:77:CC:22:1C:C1:69:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZoxZcQAepQBMaMnzHfMIhzBadk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f1f0a0-da3c-4d95-a638-506672769d9c/1/CZoxZcQAepQBMaMnzHfMIhzBadk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:01:c8:92:c1:6c:b9:9b:f1:d9:07:4c:54:31:b4:1d:09:db:
ab:9a:98:5b:e7:ba:1a:c5:5e:35:93:fb:d6:fb:72:05:a4:bd:
f0:42:a1:5b:1c:9a:dc:42:ec:74:a3:64:26:1e:75:89:46:06:
c4:6e:b3:5e:19:17:2f:8b:60:20:35:af:39:e0:4f:b6:f2:0f:
80:1c:b0:72:10:ef:01:42:23:ea:f9:cd:ed:0e:1e:0e:05:c0:
1e:6e:71:a2:df:86:73:bc:9e:e3:a9:43:c3:ee:d2:31:10:9c:
2b:8a:a1:45:16:d6:08:73:c1:27:d3:a5:ea:2c:ee:aa:65:3f:
5a:b7:8b:85:78:26:12:1b:84:4f:92:0c:ec:e8:50:dc:1f:06:
98:ba:41:12:6d:d9:33:22:53:83:ee:f7:2a:12:a9:98:12:0c:
e5:11:b9:06:5d:c7:49:66:0a:7d:f6:09:d2:52:45:d4:4e:6c:
59:da:0e:33:ce:7f:88:62:72:2c:0a:a6:79:f4:4d:5d:87:75:
b1:09:07:1b:2e:36:02:ef:07:a8:8c:15:2b:7c:6a:92:86:f1:
e2:fd:6c:14:61:fa:54:07:44:3b:be:83:f4:10:28:78:bb:ea:
38:cb:65:db:f8:2f:df:49:08:f6:5b:df:1d:23:1a:84:c0:28:
8d:07:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:02:25 2025 by rpki-client