Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: NqNbflOwZSFUAXv3oD5XjMullK24XVfqXGVcyMknnqg=
Subject key identifier: 79:D4:C8:67:DD:4F:17:F3:45:94:0E:D2:04:8E:72:4C:90:19:C3:EA
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 019922FAEE5776DF81B3E8886EF0B0C29061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 1124
Signing time: Sun 07 Sep 2025 07:01:34 +0000
Manifest this update: Sun 07 Sep 2025 07:01:34 +0000
Manifest next update: Mon 08 Sep 2025 07:01:34 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: zZBd7V2ZPV/Oza1IGqhwx9Ce3TYA001AcacQ1gapjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ee:57:76:df:81:b3:e8:88:6e:f0:b0:c2:90:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Sep 7 07:01:34 2025 GMT
Not After : Sep 8 07:01:34 2025 GMT
Subject: CN=79d4c867dd4f17f345940ed2048e724c9019c3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:0a:27:03:72:f1:e7:f2:24:05:1a:1d:e3:
22:c7:3d:bd:24:36:b6:12:39:bc:fd:9a:58:49:6d:
9d:08:db:bc:c1:65:b1:ee:99:6e:64:ae:39:91:7c:
04:82:49:8b:9a:b5:2b:f0:07:f8:8e:65:79:6d:48:
3e:ea:23:ee:62:7a:24:87:56:d5:6b:80:10:a1:4c:
2f:5b:e8:5e:f7:e8:5e:b3:ac:07:c3:c8:77:e6:99:
5c:40:65:af:74:89:17:94:ab:95:c0:40:05:f1:f9:
37:6c:6e:ed:56:7e:4f:10:8e:3f:e3:4e:3e:f3:ae:
2d:8f:61:ab:23:61:54:64:ea:58:b3:82:cc:04:74:
44:bf:a1:e7:b7:ca:3f:dd:96:0b:40:33:f2:3a:33:
80:8a:15:ae:5a:47:aa:92:52:74:4a:6f:4c:eb:76:
93:f7:de:8e:a6:c9:bf:27:e7:af:ed:ee:38:14:2b:
47:41:cc:99:42:eb:46:4c:7f:aa:de:38:ad:d8:d4:
d3:02:7c:5c:e5:4f:8a:88:a6:7a:d6:23:00:88:9b:
e2:bd:ff:8b:86:e0:0e:5e:79:30:cb:1c:15:2a:37:
31:fc:c8:e2:47:f2:51:a1:3c:75:1b:fd:fb:2d:ba:
cf:d0:9c:89:e3:49:93:0f:f1:6a:7f:05:7d:33:88:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D4:C8:67:DD:4F:17:F3:45:94:0E:D2:04:8E:72:4C:90:19:C3:EA
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cc:7d:9f:bd:f0:c1:5f:8c:ac:8a:3c:88:a9:b5:bc:94:c9:
2a:43:a3:35:f7:f5:e8:ff:9a:fe:20:7d:4c:36:45:97:7b:3a:
27:61:4f:4d:c7:b8:9f:3e:5e:03:8b:b4:6a:b6:44:d7:6b:9e:
21:f7:84:f5:4d:3d:e4:71:9d:99:9a:c1:f4:6e:d7:99:b7:44:
0a:02:e2:ff:26:32:d8:f0:48:09:4a:ae:9b:a4:cb:35:6f:c3:
cc:d8:51:fa:22:e3:04:1a:d3:44:5c:81:2c:77:7b:b5:8d:b7:
b9:b9:44:e4:2f:f3:67:4c:12:55:2c:88:b0:68:19:a3:b2:32:
50:09:cd:2c:a7:d1:bc:21:bf:9e:7b:96:50:b1:ad:52:be:77:
99:23:83:91:17:6f:7e:a5:8c:92:73:56:c0:4d:e4:57:d7:44:
98:a2:45:bd:91:a6:70:fe:01:db:d7:25:e7:09:29:11:20:1c:
5c:43:1f:b1:0f:f9:47:62:57:09:f1:b0:32:47:d6:e2:9e:8c:
9b:37:38:e8:fe:bd:dd:4b:9d:91:31:c1:1c:f0:dd:b2:0d:e9:
d7:14:9e:60:99:7e:1b:75:56:c1:0e:5d:b5:8e:cc:77:85:7f:
10:42:05:79:91:4c:aa:33:90:a8:2e:0a:52:08:1c:fe:ba:70:
a5:ea:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:57 2025 by rpki-client