Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier: 0ALMrYVX/8nYlrHAYsUJpNBa7DIwt+ksjGWFSib4PQ4=
Subject key identifier: D2:AF:DB:9F:52:E3:49:74:0A:F9:37:4C:1E:AB:DB:0F:06:4D:3E:A9
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial: 019923A0624886CA038A8C7336B8F70DAA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number: 0A05
Signing time: Sun 07 Sep 2025 10:02:17 +0000
Manifest this update: Sun 07 Sep 2025 10:02:17 +0000
Manifest next update: Mon 08 Sep 2025 10:02:17 +0000
Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: pYplhqxpExcD+/uA1LGy8NzAMy2+N9xsjRJRRKCNX+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:62:48:86:ca:03:8a:8c:73:36:b8:f7:0d:aa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
Validity
Not Before: Sep 7 10:02:17 2025 GMT
Not After : Sep 8 10:02:17 2025 GMT
Subject: CN=d2afdb9f52e349740af9374c1eabdb0f064d3ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:55:52:3e:0e:a2:a3:bd:fa:ad:52:38:53:
32:0b:86:cc:ec:13:44:33:81:4d:0c:b1:20:3f:72:
81:4b:b2:09:b4:62:96:fc:89:08:ac:b6:b8:2f:f3:
97:ab:b9:08:c0:f1:cf:20:5c:63:ac:51:55:89:9c:
fd:b9:13:3c:98:cc:14:e7:eb:9f:e2:e9:e1:39:89:
a8:71:78:89:7b:49:77:c0:81:bb:73:96:a9:8a:be:
b9:3b:6e:8d:cd:ea:30:a0:66:51:e5:4e:41:c3:44:
ad:f6:a8:02:6e:ec:d4:62:b7:2b:4d:ff:56:93:ee:
3a:02:f1:fe:5f:c5:aa:eb:fb:bf:19:f7:52:91:e5:
a3:36:fa:c0:57:fe:a8:4f:2f:5c:42:7e:fc:9d:17:
59:1d:95:3e:2b:3e:2e:2c:03:10:86:97:ea:ba:e3:
2a:b6:42:25:2d:fb:4f:20:33:ba:d2:56:b6:8e:75:
79:1f:45:8d:3e:e8:a6:87:f8:ed:b8:99:8e:52:7f:
0f:11:51:51:8b:2b:c4:a3:64:4a:d0:ff:7e:91:b4:
00:8f:bb:5b:8a:31:8f:1a:c7:98:ee:71:b1:63:a1:
3f:b1:98:26:d1:9a:d7:40:65:0c:af:4c:d0:fd:66:
0f:15:43:7e:02:12:c9:38:19:b7:a5:a3:73:42:00:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:DB:9F:52:E3:49:74:0A:F9:37:4C:1E:AB:DB:0F:06:4D:3E:A9
X509v3 Authority Key Identifier:
keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:98:67:8a:38:fd:5d:08:cd:88:03:26:09:b9:54:dc:cc:6e:
91:33:dc:82:63:22:1c:ee:42:db:b9:d8:92:2b:31:a8:b8:f5:
50:85:58:04:2f:90:24:b0:02:60:2c:c5:1f:64:ce:16:83:86:
7f:8b:26:ca:a0:ff:00:a0:59:d0:7d:ad:6d:b5:5a:3c:b1:68:
a8:75:0e:ab:88:1c:f5:c8:0a:3c:2b:aa:63:c9:19:40:b0:cf:
bb:67:9d:e5:e7:36:fd:18:d0:67:d8:27:59:24:77:1a:58:4b:
70:4d:33:2e:2f:3a:cf:24:01:ab:87:b4:ac:3c:be:8b:9a:4e:
48:ce:6c:1e:e9:d5:aa:53:7b:8e:19:49:69:64:1a:35:e4:28:
a3:4e:54:f1:cb:08:95:da:ec:30:f4:39:47:2a:b9:a8:a6:c5:
bd:b0:03:4f:0a:47:2b:59:07:fc:c6:60:49:be:33:04:c5:1d:
c2:8f:07:8b:39:3a:28:ac:7c:59:cd:18:b2:0a:20:09:8f:fc:
2b:93:2f:9d:ce:1b:72:1d:87:b9:8a:1f:ae:82:91:52:14:09:
b8:f5:a0:ab:32:25:1b:d1:d8:1c:68:52:55:87:5c:c5:da:02:
67:8d:98:9b:ca:48:27:fa:01:a1:98:7e:2a:5e:4b:a1:94:e6:
6d:3a:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:35 2025 by rpki-client