Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: HqSvHzZw+NEgveD2GAvXCRnhRtSmMgIVCdtaKLxz00c=
Subject key identifier: 2A:EE:F1:62:45:75:A6:2D:4D:DA:68:C3:AE:59:BB:D3:E0:AD:AE:CA
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 019923A063425BDD2995E64E3C72249B8452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0FFF
Signing time: Sun 07 Sep 2025 10:02:17 +0000
Manifest this update: Sun 07 Sep 2025 10:02:17 +0000
Manifest next update: Mon 08 Sep 2025 10:02:17 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: AecHRcTiqy8wOjXI/VYx/Kqa9xx84vvOLTC4SZmRxoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:63:42:5b:dd:29:95:e6:4e:3c:72:24:9b:84:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Sep 7 10:02:17 2025 GMT
Not After : Sep 8 10:02:17 2025 GMT
Subject: CN=2aeef1624575a62d4dda68c3ae59bbd3e0adaeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:cc:3e:b8:db:5c:8f:48:9b:77:e5:a4:5b:
e1:b7:df:21:b3:30:b8:f5:01:d0:67:8c:31:2b:75:
ac:41:52:8b:41:39:d5:a9:26:d8:39:39:e3:8c:99:
5b:14:b3:d0:12:96:19:e1:54:62:3b:11:fc:8e:54:
f4:bc:06:52:ac:bd:ed:f8:08:5c:0f:fc:2f:72:17:
be:ce:ab:9c:d3:3f:ef:5a:51:f6:f2:45:09:27:42:
7d:10:ff:72:69:1c:63:64:ca:cd:9b:fc:6f:5d:a0:
d9:eb:c9:8f:4c:b8:82:26:87:af:03:47:90:65:75:
46:f1:94:f3:0c:38:5b:d7:f9:96:18:92:27:11:24:
77:5c:00:8c:f6:f5:20:8a:4f:39:fc:1e:b4:5f:c9:
be:aa:76:97:0f:2f:5a:3e:a4:2e:d0:25:bc:56:f5:
88:9b:ea:04:38:bd:9f:66:93:c7:88:37:b8:a7:61:
91:d1:b2:14:3d:d5:98:46:0d:95:77:fd:d4:c2:eb:
90:46:23:f7:a7:26:59:db:1d:cf:65:36:d2:65:23:
24:3d:65:2a:d1:44:d2:0d:8a:e6:1c:44:53:b4:6f:
1d:23:1b:48:3c:2b:e5:77:f4:34:82:3f:2b:04:ce:
54:12:37:eb:c8:b6:d0:bb:8e:77:54:aa:c3:49:02:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:F1:62:45:75:A6:2D:4D:DA:68:C3:AE:59:BB:D3:E0:AD:AE:CA
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7a:ea:3b:28:e3:23:f6:95:b6:10:47:77:29:fa:4c:fd:78:
f8:8f:9d:7b:39:38:93:7d:f1:b4:76:ee:15:1b:f1:22:10:48:
3e:5b:4d:15:ad:8a:41:cf:69:ad:0d:c5:22:5a:92:c7:53:ab:
f7:2d:82:0f:98:52:c0:0d:58:c3:11:95:d5:6a:ec:8e:e4:ab:
c6:f4:e0:60:8e:02:fc:f2:32:96:66:63:ec:4c:28:ed:13:d3:
a9:15:e1:f0:00:a0:8e:32:bb:02:52:89:93:ed:1d:a5:71:ae:
89:f1:d0:2b:2f:4c:ee:8b:15:54:80:9e:4a:2a:93:0d:e5:47:
1f:fa:d0:1e:d5:7f:31:1c:c0:94:fb:ab:17:cd:7d:8a:1a:8c:
57:3d:09:d1:d4:b6:ba:4a:eb:85:c0:b4:4a:33:ba:87:95:ca:
60:3a:a3:ed:23:4c:ae:d3:fa:a5:67:86:de:66:e1:6f:65:10:
25:6e:a1:aa:81:7e:d7:de:f3:98:18:ea:46:9a:c3:68:13:01:
a2:6e:16:14:6d:63:86:bd:ac:7b:15:01:01:6d:bd:a8:e7:44:
17:d4:f6:67:43:a2:c9:f5:33:b2:5b:4c:44:fd:1a:18:27:09:
a5:e1:ce:6c:ea:47:32:34:d9:af:6f:0b:d0:df:75:cf:38:aa:
de:9c:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:46 2025 by rpki-client