Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: NbztHRXOibEhYwUWJ1413O2WuP6t0bRyT6BnJ+FhcbQ=
Subject key identifier: B1:7A:AF:07:D9:DF:0E:17:1C:55:EA:64:75:4D:B1:FF:E2:5D:E3:8B
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 019922FA121D5304F9D97D8403163D70B54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 158B
Signing time: Sun 07 Sep 2025 07:00:37 +0000
Manifest this update: Sun 07 Sep 2025 07:00:37 +0000
Manifest next update: Mon 08 Sep 2025 07:00:37 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: I9H8Un65GnZM0FmhOdLYkbHRhcOMyBwxWYC63L/tO9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:12:1d:53:04:f9:d9:7d:84:03:16:3d:70:b5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Sep 7 07:00:37 2025 GMT
Not After : Sep 8 07:00:37 2025 GMT
Subject: CN=b17aaf07d9df0e171c55ea64754db1ffe25de38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:88:41:8d:1e:16:32:0b:41:14:3b:9d:55:
1d:46:c0:17:bc:5b:1e:2c:f0:29:a1:cf:70:d7:88:
82:b6:78:14:37:e9:ff:a7:a9:29:68:a9:2a:a2:5e:
eb:eb:b3:c6:9a:4b:05:73:99:66:31:da:aa:2c:49:
16:e3:c1:eb:7a:a6:80:83:cf:e4:a7:d0:02:ef:a0:
f5:31:d7:06:a7:c7:0b:0c:a8:00:f9:36:2d:bb:8e:
4c:c7:94:82:4d:ea:9e:c8:66:12:c0:e9:b0:a1:56:
17:43:14:a6:38:ce:d7:16:20:d6:13:71:75:26:09:
c3:94:2b:53:82:89:55:cd:ad:3a:a9:8c:42:c8:33:
58:c2:69:cb:0b:aa:f7:3d:00:2d:36:fc:a1:4d:d3:
42:db:e2:cd:8b:ca:c9:9c:b2:15:00:0c:ad:16:25:
2d:1c:ec:93:f7:45:37:a4:62:8a:17:8d:a3:6f:68:
36:64:b9:ad:85:56:78:54:c8:c2:65:97:0c:71:5b:
87:fb:19:00:51:ee:2d:a3:02:aa:8d:63:39:57:13:
6d:a1:c4:20:99:84:fa:ef:d5:ff:cc:58:5c:b5:f5:
7d:9d:7a:79:06:2d:70:43:bf:69:d8:ba:2a:a8:5c:
bd:0c:15:c8:e0:42:01:da:3c:67:71:3d:a4:c7:85:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7A:AF:07:D9:DF:0E:17:1C:55:EA:64:75:4D:B1:FF:E2:5D:E3:8B
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:0c:16:4a:d7:5f:64:67:ae:21:a3:d5:e5:21:b6:a1:82:
5b:b4:5f:6f:aa:b7:0e:31:d2:4f:56:96:d3:e7:07:2f:79:a1:
0a:4e:c8:76:db:c5:3e:a4:9f:91:08:6a:4a:f0:d3:21:7a:e1:
ee:1a:ba:8e:6a:de:84:b1:df:6f:6d:e8:25:2c:1b:d4:84:6a:
9c:c7:d6:90:d0:92:f4:4c:e7:8a:7f:9d:9f:b1:92:18:86:d3:
e0:d1:86:ed:15:c4:45:1b:25:0f:bd:ea:59:c1:78:ac:7a:8c:
91:2a:a8:86:ca:8d:52:ee:a1:8c:62:10:82:f3:89:f8:9f:30:
4a:bd:38:25:74:12:97:fb:d8:16:67:6c:6f:80:ee:3f:ee:9f:
92:c4:97:16:fe:67:8e:8f:da:6b:40:f7:81:b7:79:cc:68:b2:
80:3e:33:28:b8:cf:47:b8:ee:75:ce:88:94:ef:74:99:da:63:
7c:fe:75:c6:40:5a:5d:be:dd:59:23:eb:4e:3d:70:6d:3c:f0:
31:c1:b7:f3:fa:2b:a9:22:86:49:45:43:01:f9:fd:42:34:8f:
35:6f:42:9e:35:d7:ca:c0:f6:b3:3d:01:87:57:6d:0b:75:2c:
f4:6a:41:1b:6a:94:44:0a:0e:28:86:04:f7:ba:4d:d0:dc:73:
d1:a0:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:13 2025 by rpki-client