Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: 8Bj5n+gCyqvebHEYaVz4Z/OQBjIbY7i6IroeL8D3XUA=
Subject key identifier: 02:0C:55:0A:98:65:D0:4F:BB:B2:90:A2:35:DB:26:72:12:53:EA:1A
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 0199180A45FED1B4EE645D9978166CBA1AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 1349
Signing time: Fri 05 Sep 2025 04:02:30 +0000
Manifest this update: Fri 05 Sep 2025 04:02:30 +0000
Manifest next update: Sat 06 Sep 2025 04:02:30 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: cJ8QopQvVO/2CbSOk4h0w/X+M8Vp2J7Wf0BSnjWy8SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:45:fe:d1:b4:ee:64:5d:99:78:16:6c:ba:1a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Sep 5 04:02:30 2025 GMT
Not After : Sep 6 04:02:30 2025 GMT
Subject: CN=020c550a9865d04fbbb290a235db26721253ea1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:c6:19:67:fb:10:64:be:45:72:9e:e1:60:
94:51:20:61:03:66:4c:0c:49:5a:29:ec:70:0f:10:
df:62:e8:e9:ac:8e:e3:3c:2f:83:6d:93:5b:7d:48:
d0:d7:d5:b7:f4:13:44:70:6a:d1:72:63:46:18:bb:
6b:ce:b3:71:6f:2f:a7:0b:67:05:1a:8e:e2:56:30:
10:9b:92:74:ff:9b:3b:37:1a:a1:b0:0a:c5:6b:c3:
14:50:10:ab:34:f6:c3:0f:54:0e:ff:56:f0:8f:fe:
f6:71:53:82:41:00:77:04:70:6d:42:94:9c:54:a2:
d5:3f:90:2a:91:43:28:96:83:88:42:ab:74:57:5f:
1e:ad:32:86:f3:46:ec:57:dd:bf:57:2b:5e:7b:f3:
e9:c4:0e:27:2a:c4:5d:b9:e5:b4:6a:57:c9:06:d9:
1d:bf:16:62:2a:2b:65:09:ff:8b:63:78:6d:ac:4e:
9d:c2:ce:f2:b9:de:2e:5a:03:2b:3f:83:eb:ca:64:
63:f3:42:22:fc:51:88:ed:ce:c2:37:23:d5:7b:c5:
5c:7e:cc:d5:c7:19:73:25:28:cf:e3:13:12:9b:f2:
df:42:6c:af:55:f7:21:3c:60:70:b5:a9:90:12:42:
85:92:cf:e8:65:09:a9:ce:d5:9b:2a:91:a2:31:dc:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0C:55:0A:98:65:D0:4F:BB:B2:90:A2:35:DB:26:72:12:53:EA:1A
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:af:d2:c6:fd:27:27:63:cd:5c:81:68:29:aa:6f:38:de:1d:
15:20:ec:c8:4e:1e:96:cc:6a:8f:82:ca:a1:a0:1a:81:15:72:
5b:73:78:fc:c2:ae:de:98:f8:27:d1:2f:fb:60:c1:2e:55:43:
07:48:18:41:87:2d:6e:29:6e:09:fc:87:e7:1e:3d:41:99:a8:
85:f3:32:c6:90:12:90:71:5e:6b:bb:6f:af:a8:3c:06:b0:24:
4d:92:82:9b:5b:df:a4:58:86:f1:8e:58:08:dc:ed:a6:ca:e5:
26:67:a0:33:ea:57:15:64:d4:c0:0a:c7:74:d5:67:b3:6a:90:
9b:ba:f0:fe:df:be:30:b8:48:d4:bf:77:d6:b9:1f:79:ce:31:
7d:4a:fb:0d:73:6f:78:37:57:ac:75:16:34:ec:d7:e8:40:09:
6d:a2:3b:3a:9f:6b:4f:f3:dd:fb:e0:c5:d2:24:8c:4f:88:6e:
6e:fd:b0:92:cb:a6:81:48:4d:fc:7b:a2:3d:1f:df:62:3d:79:
55:6f:cb:de:26:81:72:e2:16:8a:42:4f:56:31:29:4b:05:28:
c1:0b:bc:2e:73:6e:a3:86:9f:81:10:58:31:e7:a8:c9:c7:74:
37:d7:b9:a6:65:50:af:5c:6e:78:f0:9b:46:75:3a:ce:b5:1a:
22:3c:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:06 2025 by rpki-client