Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: 9OaD7X05uoE7FCstR55BPbbaz0eR2joKGyzuOztbCWE=
Subject key identifier: F2:E5:F6:C5:3C:79:3A:BC:6D:0E:27:2C:D3:74:70:90:FF:FD:73:35
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 019922FA1DF958B1366BC61F9B989E7F9DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 111F
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: KB86PxzHDDs5kSQYfdAzb7sGjMJdRGPJPlKssnbuobA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1d:f9:58:b1:36:6b:c6:1f:9b:98:9e:7f:9d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=f2e5f6c53c793abc6d0e272cd3747090fffd7335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:99:30:94:d0:6b:58:d5:e6:03:ba:c6:21:
70:7b:83:12:2e:37:41:f2:c1:0c:e4:c2:70:9e:ae:
7c:2b:8d:e6:4d:bd:63:fd:0a:97:d0:05:c3:64:9a:
0f:e2:74:c4:77:9b:d3:27:74:9a:42:9e:3c:c0:a7:
91:d2:13:58:ed:30:92:4e:8c:6d:cd:a4:56:6d:53:
0a:e2:7e:ce:79:f2:77:2f:54:b6:54:26:8f:d6:5c:
3d:b1:43:d9:70:8a:f9:42:2c:1f:58:46:69:86:05:
fe:c9:cd:85:78:9d:0a:07:7b:95:a8:09:f5:7f:a1:
00:f5:d9:74:76:e4:f3:84:82:a3:6b:84:ed:e8:76:
09:38:fb:b5:f6:f5:e6:86:83:a2:45:f2:bc:b8:33:
a8:e1:95:52:63:99:ba:90:4b:23:ce:1a:d2:5b:8c:
56:f2:3a:b9:be:2d:ee:2a:74:3c:df:0b:b1:4c:82:
9f:ee:9d:cb:06:53:10:92:1d:c5:9b:3b:f0:a6:10:
ce:2e:0b:76:1b:e9:87:dd:a8:a3:5b:7b:39:89:d3:
26:de:25:15:a3:f3:14:34:73:6f:d7:9f:b0:cd:ea:
5b:e9:4c:21:f2:ab:ad:da:aa:c5:ab:5c:b0:13:ad:
90:b7:aa:c0:09:cf:ea:d7:e6:03:fd:89:86:db:83:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E5:F6:C5:3C:79:3A:BC:6D:0E:27:2C:D3:74:70:90:FF:FD:73:35
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:11:5d:f3:37:d1:8c:fd:a3:66:f0:69:f1:29:c3:90:45:46:
21:2e:74:e7:1e:a3:eb:22:0d:59:de:53:8e:3b:a1:09:97:81:
cb:88:86:e2:68:1f:1e:39:3c:2d:c2:95:5e:f0:e7:61:53:7b:
78:b3:28:ec:5c:07:a2:11:59:a5:e8:a7:d9:f7:fd:87:0d:98:
da:8a:79:1d:49:3a:f9:42:97:29:16:a9:f7:90:01:69:a4:4d:
14:c9:55:88:a2:8c:d0:47:d5:cb:de:ac:eb:91:ac:09:92:9a:
bf:aa:63:31:75:b2:28:dd:ca:bd:e0:04:f3:0e:21:49:8a:f8:
f5:1e:b3:23:8b:a3:4c:5e:3a:8f:42:d8:eb:98:c1:17:f9:e1:
67:09:77:1c:8f:ba:65:1f:e4:09:d4:b2:a6:ab:29:5e:3b:f9:
e1:6b:60:6c:ae:95:8c:e5:30:3f:23:51:11:5b:17:77:2a:2a:
e3:ec:b5:d9:07:64:78:c1:28:24:be:9b:da:94:88:30:d4:ed:
c9:b5:dd:0b:8e:b4:30:96:65:52:45:d0:76:42:75:38:04:c9:
7a:5f:12:2b:5c:d0:7d:ee:95:74:6d:59:6a:84:2e:ed:e4:66:
04:db:12:6c:9c:cd:c6:31:66:22:ac:3d:d1:fd:54:b1:33:d7:
80:35:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:12 2025 by rpki-client