Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: teqZiqnkBjsRZgu52I6ZNyBJcraiJ0kMPuBc+LyGmPc=
Subject key identifier: 93:EA:B0:0C:89:54:EC:FF:01:22:48:9B:1B:D0:3C:1C:EF:B8:55:A2
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 019922FA27F2AA1A87EB3D7E06E3AD63E590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 109E
Signing time: Sun 07 Sep 2025 07:00:43 +0000
Manifest this update: Sun 07 Sep 2025 07:00:43 +0000
Manifest next update: Mon 08 Sep 2025 07:00:43 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: VovbFtlwAzep821bfUvp+cduQkIm0jbouB6kP6nSSHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:27:f2:aa:1a:87:eb:3d:7e:06:e3:ad:63:e5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Sep 7 07:00:43 2025 GMT
Not After : Sep 8 07:00:43 2025 GMT
Subject: CN=93eab00c8954ecff0122489b1bd03c1cefb855a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:59:04:6f:00:59:cc:ee:0e:c1:14:88:19:
87:be:ef:01:0a:2b:a0:fa:18:c3:f9:5d:65:77:f5:
dd:7f:11:9b:02:15:6a:76:5f:2b:55:48:25:b5:2e:
08:45:c0:79:c7:09:87:ee:d6:c4:70:46:39:b0:01:
69:f4:c6:e3:be:0c:1b:c9:32:f6:bf:21:8d:d1:85:
5e:4c:67:72:0e:4d:03:a2:a1:4d:76:0b:02:ce:c1:
79:91:8f:36:13:c2:96:7a:c8:6a:1a:b2:54:26:da:
37:d2:9a:19:29:e9:05:00:83:3a:8b:e4:86:14:e7:
61:7f:7f:bf:2b:db:40:48:a0:7c:88:27:b5:47:fc:
d7:a5:ab:35:88:c6:f5:47:8c:7e:98:8a:2c:6b:dd:
7a:02:4c:fe:15:6a:63:1f:fb:5c:9b:d5:e7:cf:f2:
93:4a:03:a3:0f:bc:65:06:1e:e8:79:b8:08:15:56:
55:42:ee:bc:cf:6e:79:b8:3f:e0:25:eb:5f:31:5e:
f2:ae:9b:1b:47:2d:85:f8:b7:d4:51:92:33:ff:3a:
ca:b8:da:38:ca:f4:18:9b:4f:6b:77:e5:3a:ed:0c:
1e:30:56:07:3b:ef:56:44:24:d7:66:cd:2f:6c:82:
1d:b9:ff:dd:21:6a:1a:d6:19:95:ac:ad:02:46:53:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EA:B0:0C:89:54:EC:FF:01:22:48:9B:1B:D0:3C:1C:EF:B8:55:A2
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b6:4f:d5:3a:dc:22:44:cc:3f:43:22:4b:66:69:75:23:ce:
20:ab:dc:9d:8c:79:54:c4:8b:d4:ef:62:54:6c:51:37:fe:5a:
7d:c1:a1:3e:0a:b6:ff:37:85:1f:87:f4:2b:2d:b9:2a:75:60:
19:bf:f4:7b:a6:1a:45:d2:d8:ca:72:58:dd:4b:cb:58:d4:4d:
e4:40:8b:3b:c2:db:46:82:13:d8:f3:05:3e:99:1e:cf:9a:ce:
41:d3:11:44:d1:6c:6b:fd:25:19:11:c1:7f:b9:51:8d:21:b1:
d3:00:49:ef:49:f9:6e:35:b0:1a:61:09:f6:cb:73:ba:6e:3a:
eb:18:d4:5e:5d:32:50:d0:9d:c7:3c:9a:eb:88:08:ba:1d:8c:
10:84:f7:8c:69:0b:33:5b:16:16:e0:4b:1b:bb:2d:84:cd:9d:
f3:31:e6:36:30:bf:d7:1d:71:b7:38:8c:50:01:ef:ae:8d:39:
58:da:85:43:1f:fb:a9:33:0d:9a:9a:72:67:f5:2b:84:ba:90:
e4:33:6d:d4:03:9c:1a:b2:7b:41:5e:a8:4d:8c:6b:0e:a5:cd:
6c:f7:0e:0e:72:38:ee:a9:73:60:d7:07:e9:a6:83:be:bf:d4:
cd:bb:db:44:10:51:4d:67:0f:27:87:c9:3c:80:91:6b:9d:c4:
75:38:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:09 2025 by rpki-client