Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: oXq4EVtm4fJKDc6WDSK/fIYPfRHOj+j/TQcMddGg9hg=
Subject key identifier: 69:3A:4D:5E:21:40:F6:45:C4:2A:34:07:D7:0F:07:9A:76:AE:B2:CF
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 01991763EC72B1B49BD32BCB7B2A2B614E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 0588
Signing time: Fri 05 Sep 2025 01:00:48 +0000
Manifest this update: Fri 05 Sep 2025 01:00:48 +0000
Manifest next update: Sat 06 Sep 2025 01:00:48 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: RZGaGT9fOam3zqcWuUhXNJmKsMZxQ5GJ9SSR2PY74fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:ec:72:b1:b4:9b:d3:2b:cb:7b:2a:2b:61:4e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: Sep 5 01:00:48 2025 GMT
Not After : Sep 6 01:00:48 2025 GMT
Subject: CN=693a4d5e2140f645c42a3407d70f079a76aeb2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:80:89:62:4c:d0:e1:bc:e0:d8:e7:41:ed:
d2:1c:f2:0e:b4:e9:c5:f7:2f:6b:4a:1a:bb:02:ad:
b3:fb:45:ba:a1:7a:f2:bc:dc:aa:98:09:de:8e:ea:
d3:b1:09:80:ac:77:a3:0a:09:50:58:c2:a5:31:d2:
30:aa:6d:f1:f9:17:4c:8f:e1:0e:de:a2:5b:8c:44:
43:fd:32:06:90:4d:71:05:05:c0:c1:8a:af:4e:13:
98:6b:f6:e3:02:03:7a:e5:4c:41:14:cf:74:f5:15:
95:1b:8e:28:cd:a9:29:2f:1f:cf:d6:bb:49:7f:7c:
27:ce:09:3d:64:18:28:3f:7a:4f:37:3d:15:2e:41:
d0:75:a7:d4:0f:d2:b8:0d:42:3e:c9:1a:75:be:cd:
86:80:f1:82:37:a2:c6:00:39:c8:ad:39:bf:07:50:
b8:2a:2b:b4:be:01:94:df:5e:47:81:ab:d0:46:d3:
e6:4c:1d:53:46:55:26:c4:ed:4b:43:97:67:e2:4e:
2b:17:49:e3:8c:85:b2:ce:2a:48:bd:43:58:52:76:
e3:4c:62:d4:f8:e3:db:34:b7:99:b2:c7:1e:fd:11:
0e:b6:dc:0c:09:e2:eb:51:9e:f2:97:e7:c3:41:0a:
2f:93:21:4f:af:74:64:f6:e0:63:86:1a:4f:87:5f:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:4D:5E:21:40:F6:45:C4:2A:34:07:D7:0F:07:9A:76:AE:B2:CF
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0e:d7:39:6b:f5:5e:27:8e:da:91:f5:17:23:cd:9a:cb:6a:
86:25:1e:80:da:ff:56:6f:81:2b:9e:5d:99:b3:30:3b:ab:f5:
cd:9b:02:5f:b9:dc:7a:59:2c:0d:2f:3c:17:cb:b6:78:55:55:
33:42:92:0f:76:dc:bf:28:3a:74:16:6f:18:46:c7:e1:44:dd:
a4:dc:5d:fd:4c:8e:31:9f:2c:59:83:9e:d8:25:c5:7f:de:5e:
76:f3:49:bc:4e:0e:48:c7:f7:7f:71:86:fe:a8:bb:27:7d:28:
20:26:7c:61:4f:9b:85:f8:27:be:19:ba:4e:69:c2:8c:3d:fd:
b7:44:7e:57:bd:4f:30:7d:7c:8f:9e:e7:bb:c8:2f:9b:9c:87:
bc:58:60:73:4e:f9:0b:b4:bc:b6:8a:7f:fc:1b:17:01:55:51:
d1:c2:f8:46:5b:18:61:b6:79:ef:f2:e4:9e:3e:7c:fd:12:72:
01:fa:ec:9d:92:d8:ff:d4:95:77:e4:e0:0f:4f:3d:cc:93:42:
0f:cc:0e:e5:d8:a7:c5:70:ba:f6:83:4a:1f:86:98:e5:3c:eb:
32:d9:f6:ea:a7:fc:cd:55:e4:13:3c:e1:89:ad:cc:04:ef:46:
00:ac:4d:38:79:54:67:e7:d6:c3:72:ad:56:54:51:f6:66:9c:
f4:0e:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:22:37 2025 by rpki-client