Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: ywg5dl3gkPzWo3Wc6ru7LEG5sp67Oa2rnTK2VvGmjv0=
Subject key identifier: 21:DF:9E:8B:E5:7A:CC:65:2D:49:96:A0:28:61:AE:40:C7:04:F2:0E
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 01984777095330B534960E1D6EEB988D5080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 114F
Signing time: Sat 26 Jul 2025 16:00:40 +0000
Manifest this update: Sat 26 Jul 2025 16:00:40 +0000
Manifest next update: Sun 27 Jul 2025 16:00:40 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: bhy6Rq91R2bpPvLI8E5aB8B0/YXhakBByOQzO6WdRTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:09:53:30:b5:34:96:0e:1d:6e:eb:98:8d:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Jul 26 16:00:40 2025 GMT
Not After : Jul 27 16:00:40 2025 GMT
Subject: CN=21df9e8be57acc652d4996a02861ae40c704f20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:e0:a7:4f:d8:df:8e:ed:04:77:70:97:41:
02:de:a8:89:73:b2:c1:b3:19:84:e9:db:34:91:9e:
1f:06:5e:39:a5:bb:44:57:97:f3:9e:1b:27:19:6b:
a0:5d:18:8f:30:ef:be:19:1a:3d:25:9b:9c:22:34:
60:fc:e3:5d:de:83:85:5e:5c:f4:72:73:3d:06:b5:
0d:67:05:a3:2d:b7:27:b4:e7:ad:a3:ca:c3:b7:1c:
db:31:d6:8a:61:a2:a3:df:bc:9b:92:9a:f2:7c:99:
3c:3d:25:fb:f5:56:c9:b6:7e:3b:f1:b5:85:31:b3:
30:57:3c:eb:ee:5c:52:77:2c:c1:9d:a0:e4:cb:7c:
a2:41:2f:63:61:42:a4:62:4b:27:d9:c7:3e:c4:a4:
eb:f0:10:b1:f3:55:85:a8:7e:6e:38:a3:2c:e4:3b:
ef:a9:15:68:91:29:97:7e:a1:0c:56:03:4f:61:45:
d1:61:01:2a:99:9c:bf:86:95:1d:97:fa:37:f8:05:
ce:21:63:f1:e1:52:49:5f:cc:4f:72:4c:20:c7:04:
e7:3d:b2:6c:7f:38:03:78:5b:13:c6:5b:05:b5:8e:
4b:4c:12:93:c3:b9:8f:8f:4d:d7:55:d0:3e:a3:fb:
7a:48:9e:9d:08:26:b7:d6:3d:99:98:0f:1f:8a:8a:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DF:9E:8B:E5:7A:CC:65:2D:49:96:A0:28:61:AE:40:C7:04:F2:0E
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:38:94:45:10:23:dd:91:93:21:93:54:35:94:99:d3:58:7a:
46:63:e0:19:a7:7b:8e:a8:cf:c6:95:a4:7b:eb:22:4e:f4:0d:
b7:f4:60:86:2d:8a:45:7f:79:3e:8c:98:55:e3:9b:6a:54:fa:
e6:4d:31:0c:04:4e:d8:b2:ec:91:4f:34:73:42:72:05:78:42:
ba:d0:92:22:7f:67:60:86:f2:39:a7:ae:b9:d3:c6:01:9a:da:
71:42:b8:66:c1:fe:75:84:af:fd:99:cc:f2:71:c2:9f:f8:39:
fe:a4:51:13:cb:97:c7:5d:05:0e:d2:04:01:57:d6:7b:e2:5c:
e0:1c:d6:b5:75:d1:d3:25:7b:2c:9b:56:7e:8f:63:f7:82:86:
ac:05:17:f8:38:4a:46:b9:ec:84:49:d8:4a:6b:8d:b6:76:d0:
c9:b7:3b:93:d2:62:f4:6f:fd:11:49:72:da:f5:9d:ed:1e:90:
aa:0e:ca:37:b2:2c:f9:7f:26:6b:05:75:63:fd:bf:d5:91:46:
79:cd:a3:f9:fa:26:51:06:38:a9:2c:3d:6a:ef:66:1d:e5:ea:
c8:36:e9:73:8d:e6:4b:42:ee:3a:26:46:ed:db:e4:8c:dd:73:
31:2a:47:86:2d:88:de:b4:ea:b6:db:87:7f:03:ec:5b:4a:83:
d2:74:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:57:27 2025 by rpki-client