Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
File: zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json)
Hash identifier: 2pPoAkPnvmvdyMgQGhJyJN1r1q4hLQteSozwUUTW2qU=
Subject key identifier: 75:31:B0:70:B2:40:26:48:D0:EA:57:EB:E1:0F:95:78:26:24:F9:FB
Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
Certificate issuer: /CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Certificate serial: 0199221EB61EF4F5311E91EB11CE34BB7600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
Manifest number: 016D
Signing time: Sun 07 Sep 2025 03:01:01 +0000
Manifest this update: Sun 07 Sep 2025 03:01:01 +0000
Manifest next update: Mon 08 Sep 2025 03:01:01 +0000
Files and hashes: 1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: mMtzPDnj8kkmJWQOiSwU2XqAEkM/uyT7T7zFU3QAFDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b6:1e:f4:f5:31:1e:91:eb:11:ce:34:bb:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Validity
Not Before: Sep 7 03:01:01 2025 GMT
Not After : Sep 8 03:01:01 2025 GMT
Subject: CN=7531b070b2402648d0ea57ebe10f95782624f9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:43:98:88:ab:40:0d:3d:11:2b:bc:d8:46:
eb:64:f3:c7:cb:2a:3a:80:70:b2:70:21:79:da:a7:
54:49:e5:39:19:79:9b:e8:6e:2c:05:17:12:3f:0f:
f0:9f:ae:ea:09:ab:7c:af:6a:ca:71:7d:af:33:9e:
21:e5:de:81:b9:ea:2f:85:ce:f5:12:00:5e:34:f1:
10:5f:5b:40:d9:d8:d9:05:87:e3:cf:13:0e:c9:68:
88:50:28:3f:16:8d:cb:8d:d0:df:4b:f9:e6:09:05:
2e:8f:bf:b1:22:a8:9d:01:10:1d:4c:8a:c6:85:e6:
a1:69:f3:70:7c:af:a6:15:d0:d1:0e:66:8c:fa:d1:
bf:01:e5:e3:a5:ea:d6:06:5c:a5:61:56:43:e0:60:
63:bb:12:92:65:a4:d4:02:77:51:69:42:bd:6c:70:
34:45:4d:9f:af:1e:af:2c:be:b1:68:a7:31:df:5d:
18:cd:27:ae:56:b1:f3:43:37:73:d1:d3:8f:b5:b5:
47:dc:73:a7:e8:79:d4:ac:ac:03:d1:b6:50:6d:ac:
20:46:b6:8d:4c:c3:45:25:c0:4f:c4:4a:68:c0:a9:
c3:a3:fd:f5:d9:7d:33:a0:20:fe:a7:50:f3:2b:07:
33:87:90:0d:41:09:61:08:d1:4a:8d:db:9c:47:af:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:31:B0:70:B2:40:26:48:D0:EA:57:EB:E1:0F:95:78:26:24:F9:FB
X509v3 Authority Key Identifier:
keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:c6:7c:3d:b1:cb:b3:e9:10:6b:d3:2e:bf:de:56:57:54:
3e:86:3a:e5:a5:42:ab:9b:c1:d6:35:03:f8:a2:7a:7b:e5:02:
87:1e:2f:ba:a4:ca:a5:ae:24:72:f3:f8:74:ac:16:dd:ad:27:
62:95:5c:d7:ec:84:17:bd:0f:87:d1:e0:22:93:30:5f:a8:f2:
5d:16:7d:22:64:69:51:24:3e:2b:00:7c:77:30:fe:f9:64:54:
23:2b:07:97:5f:9e:4e:66:ff:24:ca:92:a1:42:22:c3:0d:5b:
f8:ab:9f:fe:ac:ae:54:2f:e2:b5:27:b3:71:da:5f:9c:f2:54:
16:52:f6:17:bd:a4:dc:f8:d0:20:b1:32:d5:0c:9e:10:39:6e:
4b:4a:3b:22:fa:c3:93:00:e7:54:3c:6a:88:df:68:67:54:c5:
62:60:9b:c6:93:1d:01:ec:de:8a:93:f8:a2:09:ca:05:ac:eb:
6c:83:6e:46:8f:50:f9:31:b4:e3:96:ae:cc:cc:98:9d:d3:34:
af:e7:ff:cd:49:0a:e0:26:3f:25:e7:30:df:0b:c3:bb:1f:13:
b4:90:aa:92:52:bc:c9:f3:b5:87:67:a7:f8:84:91:81:a3:0c:
d8:09:f5:6b:48:5c:5d:da:9f:ed:35:49:5b:a0:da:6a:60:c8:
95:31:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:42 2025 by rpki-client