Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
File: zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json)
Hash identifier: vzrDFbWLzTyLYqH41qU4J275C6mnf2/hB6P+AkliI8A=
Subject key identifier: 85:34:F5:F3:FA:87:B5:5C:F6:0D:0F:56:3E:FC:E5:3F:3F:B0:BE:B6
Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
Certificate issuer: /CN=cdd0ae41cdab559862964178bfeae368496b07d7
Certificate serial: 019922FAD14CA974296191CDB8DD2A44EF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
Manifest number: 0D51
Signing time: Sun 07 Sep 2025 07:01:26 +0000
Manifest this update: Sun 07 Sep 2025 07:01:26 +0000
Manifest next update: Mon 08 Sep 2025 07:01:26 +0000
Files and hashes: 1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: BkKW0pFrU0b16OEmXIgpfnd6C22GnHrWzjOXZdJGJZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d1:4c:a9:74:29:61:91:cd:b8:dd:2a:44:ef:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7
Validity
Not Before: Sep 7 07:01:26 2025 GMT
Not After : Sep 8 07:01:26 2025 GMT
Subject: CN=8534f5f3fa87b55cf60d0f563efce53f3fb0beb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:da:f8:6e:22:ed:61:70:52:50:ba:9f:24:
c9:62:1c:52:63:07:1d:07:03:bc:05:bb:c8:ce:27:
47:e1:9f:f0:80:ee:49:96:b4:e8:c0:1d:bf:3d:ac:
ba:20:35:f7:dd:5b:02:93:a3:3a:92:74:59:8c:1c:
e5:a3:26:93:a2:bc:51:e1:77:f4:3e:15:6b:3f:bc:
b4:e6:74:48:44:71:27:ef:65:e3:35:e4:cf:18:5d:
bf:c1:40:be:cf:e4:97:f5:56:08:4d:aa:3c:5c:49:
3d:b9:f0:45:73:e0:83:05:56:54:6a:70:f6:26:79:
97:14:df:b8:10:e7:03:79:b7:4c:9a:38:46:8a:98:
57:2a:de:52:ed:c1:1c:0e:20:80:f1:e4:b4:3f:53:
57:24:ba:2a:38:6f:bf:dc:92:ec:fe:13:2b:a8:d0:
2f:6a:00:34:b2:67:38:2a:96:75:29:f8:a4:ff:d7:
1b:13:31:88:06:67:10:34:c9:30:c1:ea:ec:fd:45:
d0:b7:c2:0f:43:19:47:9a:0d:b9:16:f2:f4:14:41:
30:7c:05:3b:51:a5:dd:32:18:30:12:e5:20:d8:ef:
7a:c7:42:ec:63:86:75:ab:59:a4:95:f0:99:6a:65:
98:fd:b1:39:29:59:37:80:a8:26:15:19:4a:39:c9:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:34:F5:F3:FA:87:B5:5C:F6:0D:0F:56:3E:FC:E5:3F:3F:B0:BE:B6
X509v3 Authority Key Identifier:
keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:28:39:59:75:f5:63:18:90:dd:20:73:d5:b5:cb:a7:a0:73:
10:ee:95:cb:1f:dd:05:b8:22:09:ba:c5:b3:36:01:e9:a2:43:
45:18:b6:c6:54:b3:02:7a:0d:23:88:04:89:a4:7c:b5:91:90:
49:d6:be:4e:24:64:82:b0:bb:7d:5c:a6:6b:28:43:de:d2:f4:
51:ec:6f:7b:31:50:d0:4a:65:8e:e1:de:36:68:24:d1:50:c7:
7e:33:7b:39:de:d9:73:d7:b5:59:29:b7:88:db:d5:79:14:2a:
6b:13:7e:b7:94:99:ef:d3:98:6b:41:02:b0:cd:af:5a:09:20:
95:83:33:d3:bf:2f:65:37:da:76:88:68:0a:86:d7:b0:1c:29:
ab:87:13:e6:ca:34:b4:1c:f9:ed:07:38:10:60:95:16:34:42:
4d:8e:ad:09:e2:b7:f5:ee:f8:79:2d:06:55:08:6a:a0:b5:ca:
04:0b:22:4f:49:df:67:9f:57:47:8d:6c:cc:fc:ed:90:ec:c9:
63:93:5f:af:87:63:4a:4b:9c:dd:df:00:9f:35:23:59:f7:3a:
65:0d:56:c2:88:a2:72:8c:a9:47:29:91:df:4b:c0:62:f1:40:
f7:d8:72:34:7b:ac:ae:dd:a1:13:8c:b3:a0:89:f3:dc:27:b1:
70:55:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:04 2025 by rpki-client