Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: cWkW2PKMViRFeFu+sFaiCS2Qps+Q6ijCQhnlIeKH8Rg=
Subject key identifier: A4:1A:2D:B4:58:A1:45:96:6E:99:10:5A:CF:C2:8D:CC:A0:DC:CD:23
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 019922FA06331E53C986414AD245F6D371BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 0C0A
Signing time: Sun 07 Sep 2025 07:00:34 +0000
Manifest this update: Sun 07 Sep 2025 07:00:34 +0000
Manifest next update: Mon 08 Sep 2025 07:00:34 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: 9OSNQQpKLzXpLIvDTg0QO+Z3WyfDp+Ez2O12444MtQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:06:33:1e:53:c9:86:41:4a:d2:45:f6:d3:71:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Sep 7 07:00:34 2025 GMT
Not After : Sep 8 07:00:34 2025 GMT
Subject: CN=a41a2db458a145966e99105acfc28dcca0dccd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:d9:39:62:06:c2:c9:b8:82:4e:50:a0:cf:
dc:99:0b:39:e5:91:ac:69:71:d4:b4:7a:83:59:8e:
64:65:a5:7c:6a:4b:3b:e4:ac:3d:92:53:d8:a3:00:
52:ba:5b:10:f2:23:11:a4:a4:44:55:88:7c:5a:0d:
63:eb:f5:2e:ba:93:86:9d:cb:ec:e7:7b:5d:6f:11:
38:ab:a3:2c:af:55:73:64:53:eb:ce:eb:4e:9f:30:
99:81:a8:67:8b:31:d5:4d:50:19:c7:5f:23:46:80:
19:d5:24:42:dc:dc:a4:86:57:50:2e:0b:2c:6a:3c:
55:7f:1d:e0:82:c8:c6:0b:7c:87:ea:43:fc:ee:2b:
32:44:0d:5e:a8:49:34:09:6b:56:49:74:d7:da:eb:
b9:31:61:7c:37:40:9f:94:68:e8:d5:5b:3a:34:1e:
8b:ce:c5:dd:d9:bb:45:97:d1:64:d0:73:1c:aa:c3:
45:fd:95:24:ee:ab:4b:a1:e0:b0:19:31:d6:5a:bd:
b8:c3:ac:97:3b:59:1d:48:e0:4a:22:ff:74:4e:0c:
1e:50:30:8b:c9:46:96:a5:52:f9:c0:b8:2b:01:15:
73:0b:be:5b:0a:6d:1d:95:b2:fd:3a:c8:78:d0:d5:
02:b1:ca:1b:52:44:f8:34:81:7f:da:91:5b:57:34:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1A:2D:B4:58:A1:45:96:6E:99:10:5A:CF:C2:8D:CC:A0:DC:CD:23
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:98:ee:44:6f:53:1c:11:1e:35:4d:3f:4c:78:b6:db:99:06:
3f:33:81:6d:53:d7:8a:e1:a6:77:1e:3b:f4:77:40:f5:dc:f6:
1a:c7:b8:a5:59:87:a0:b6:88:eb:e5:17:9f:ac:36:94:52:25:
76:64:d2:72:5f:75:48:a1:0c:ab:fe:65:56:fc:ad:4d:53:13:
b6:56:6c:90:eb:ef:e2:20:6b:a4:45:ea:0a:22:3d:93:ba:d9:
42:83:f0:f6:8b:d8:90:65:28:54:6a:23:29:5a:8e:0b:65:7f:
49:99:a4:25:c1:60:3f:60:68:88:1c:b6:7e:9a:96:bc:db:5b:
9e:f7:53:53:aa:ae:98:ad:00:de:0d:8a:fd:bc:08:cf:11:93:
14:32:b1:4f:a1:0f:86:d8:40:b0:d4:ce:a7:7b:2b:1f:e2:3b:
0d:c5:71:3c:08:b1:ea:c8:89:3b:b7:61:3b:d5:e1:6f:70:77:
5b:40:8d:0c:93:6e:41:45:3a:40:db:71:b5:30:84:44:49:02:
45:dc:65:93:b3:84:e2:d0:43:dd:b5:b4:f2:f0:f2:3f:53:b8:
d3:fb:a9:5f:2c:cb:b1:4a:9a:a2:59:61:0e:5c:48:ad:5f:1e:
b0:48:91:be:ac:cc:5b:9a:66:ff:33:f6:63:40:4c:90:ac:86:
cd:40:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:08:17 2025 by rpki-client