Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: JRK7H9IKfXHDvc+HMRkBa7WxqDwPQKOcmDRKaKYPDs0=
Subject key identifier: 12:47:42:8C:78:06:20:78:13:69:17:0E:2E:9C:BF:47:9A:39:E8:FF
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 01992255CE78A39CC74E3B750CD35D7AC1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 121A
Signing time: Sun 07 Sep 2025 04:01:12 +0000
Manifest this update: Sun 07 Sep 2025 04:01:12 +0000
Manifest next update: Mon 08 Sep 2025 04:01:12 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: MnaJuFy/Se2DHeqbQEok3YoVIp4AxkmBuX6U/k57sIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ce:78:a3:9c:c7:4e:3b:75:0c:d3:5d:7a:c1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Sep 7 04:01:12 2025 GMT
Not After : Sep 8 04:01:12 2025 GMT
Subject: CN=1247428c780620781369170e2e9cbf479a39e8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:18:41:b4:1c:fd:b8:51:2a:71:8e:0e:a4:
b1:07:1b:48:15:91:b5:0e:7e:4d:64:a5:63:9d:8c:
b9:39:64:ad:1b:3d:c7:66:1a:cb:e0:da:07:96:f9:
45:62:af:3b:7a:4e:14:76:98:83:23:c5:7b:97:87:
e2:7d:38:53:45:1f:60:67:15:0d:4a:e2:59:50:fb:
72:81:13:d3:a3:ee:e1:ff:04:13:84:9b:01:8a:a6:
15:8f:40:f7:90:ca:d2:cc:da:e2:ac:27:e4:a2:4d:
4d:08:d3:29:3a:5f:92:f4:82:69:b8:8f:12:d3:21:
69:69:d3:cb:df:e1:9e:1f:ec:8a:c7:60:eb:fa:e9:
0b:e0:2b:7d:69:c5:f6:8b:8f:07:99:53:05:f8:50:
fa:ce:17:3e:21:2b:2c:b8:e7:a6:b5:31:32:40:10:
2b:bc:7e:a8:c6:d0:8f:ea:1f:8d:83:1d:55:98:35:
c9:c8:5e:8f:1f:6c:84:9d:8d:f2:31:a3:c1:17:ea:
b0:53:b4:0c:e9:1b:61:44:a0:e2:9a:4a:62:b1:a1:
ea:0d:99:e2:57:29:18:46:43:ac:89:fb:55:70:51:
ff:4f:14:79:71:b2:0a:aa:2a:65:6f:e9:88:8c:67:
8a:59:1b:06:5c:9e:08:b5:b0:c3:1a:de:7b:a5:ca:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:47:42:8C:78:06:20:78:13:69:17:0E:2E:9C:BF:47:9A:39:E8:FF
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:82:87:ab:4d:81:6b:81:94:33:df:85:cc:bf:60:8e:78:3e:
0d:ac:e4:18:96:44:9c:66:6a:ee:01:05:55:c4:a7:98:5e:57:
02:9d:e4:12:5c:49:a8:32:a8:35:c7:de:55:50:e1:da:be:8a:
f1:de:14:67:12:da:36:d0:fc:9d:96:e9:4d:4b:ad:71:9c:21:
aa:10:1c:84:d0:ab:8c:99:1c:52:86:91:55:1b:a6:52:73:16:
83:92:8a:d6:83:d9:99:79:18:06:67:a6:37:40:f7:9e:32:f5:
96:58:63:bf:c7:2a:f1:bf:c0:cb:c3:0b:1b:10:d4:af:4b:7c:
c4:78:1d:ee:46:ef:2f:29:ae:21:3e:a1:5f:b0:d0:eb:e5:d2:
5d:9f:75:69:0b:4a:4d:f1:e6:d3:a3:9d:05:f0:36:67:e3:ad:
aa:a5:9e:79:80:3f:dc:d8:f5:d5:65:7a:5d:af:86:d6:66:09:
fe:b8:9c:a0:e3:35:66:78:91:bf:b9:19:39:02:6e:a6:6c:f4:
67:d3:cf:92:aa:6a:23:97:17:0a:d5:82:75:0c:4d:49:c6:e5:
19:b7:7d:80:b4:50:ab:15:42:43:37:46:0c:cb:7a:af:c8:bb:
58:bb:18:4a:38:f5:12:cc:89:e2:21:0b:9b:e2:e6:8e:a6:45:
05:ca:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:01 2025 by rpki-client