Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json)
Hash identifier: pdgUwQfPti8BAeYTkrlQUmXgQzpIFlFQgxkBrFdJObY=
Subject key identifier: 68:48:43:82:B2:85:F8:20:CF:37:1A:5D:7F:19:F6:62:D6:DD:87:CB
Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Certificate serial: 019922FAAAA43DF793AAD85705AA05521D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
Manifest number: 0CDE
Signing time: Sun 07 Sep 2025 07:01:16 +0000
Manifest this update: Sun 07 Sep 2025 07:01:16 +0000
Manifest next update: Mon 08 Sep 2025 07:01:16 +0000
Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: /Z/voQdKYqytb5JNqpf6tm4ZTDq6O3mp0h06gsXk4J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:aa:a4:3d:f7:93:aa:d8:57:05:aa:05:52:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Validity
Not Before: Sep 7 07:01:16 2025 GMT
Not After : Sep 8 07:01:16 2025 GMT
Subject: CN=68484382b285f820cf371a5d7f19f662d6dd87cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:ca:40:fe:d6:90:24:9b:86:9e:36:ef:63:
64:f5:05:5a:84:b3:79:ee:6b:4b:25:a3:24:e5:95:
f3:05:83:92:43:52:e8:88:e1:a7:b3:e4:aa:65:0a:
96:d7:44:33:05:42:11:b4:c6:b9:98:85:26:4f:7c:
bd:f7:81:18:16:69:ee:c8:c7:24:da:84:3d:93:ed:
50:ad:df:aa:65:69:b4:40:2f:34:82:db:47:44:41:
f2:aa:70:0b:30:ef:c5:be:bf:d2:1b:e7:1d:c4:1b:
26:9f:32:41:36:fa:a8:85:92:cf:e6:72:b1:d5:98:
a3:33:78:db:57:c2:aa:5d:94:7c:fc:98:8b:23:0e:
57:9d:68:35:8c:9f:19:73:d2:4e:b1:5b:0b:06:0c:
a8:51:41:9b:5f:3d:0c:6c:96:47:d5:67:76:c0:02:
f9:9c:14:bd:5d:9c:d2:e1:2b:20:57:b4:44:41:fc:
a0:12:38:6d:4b:ed:b7:56:b6:29:2e:eb:41:de:c5:
da:97:07:35:39:9d:09:69:d8:10:22:55:e6:08:ba:
74:91:94:a2:2f:f5:84:dd:27:16:9b:57:05:e1:5d:
ed:2f:0d:e6:6e:89:4c:2e:75:66:36:60:fc:e3:19:
75:1e:90:11:c9:00:60:56:99:29:b0:73:f9:7a:8b:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:48:43:82:B2:85:F8:20:CF:37:1A:5D:7F:19:F6:62:D6:DD:87:CB
X509v3 Authority Key Identifier:
keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2e:c9:ae:b7:14:f6:59:b0:b1:dd:23:a7:0c:0a:b9:cc:43:
0a:19:16:71:da:17:49:52:73:0d:90:39:dd:0a:54:66:45:89:
6f:37:13:e1:00:c1:2e:d8:b7:33:89:78:d7:48:cf:f6:73:10:
0b:db:11:49:5b:6e:6b:65:97:28:e9:b2:cd:89:64:82:2f:fb:
64:3a:49:d5:c9:e9:33:2f:bd:b4:1c:0b:74:86:1a:04:20:3b:
8c:89:14:ba:47:8a:99:2f:f5:49:1b:9d:bd:37:fb:b0:d3:82:
0b:a2:6b:a6:52:c7:29:de:a8:9d:70:ab:e1:82:cc:4c:c9:6c:
18:80:1c:e0:1d:49:73:29:00:83:7a:a4:66:fa:70:ae:33:84:
b3:90:73:b1:38:cc:24:5c:64:dc:a0:8e:55:f1:c4:00:a4:c3:
f3:83:47:f9:9f:f4:10:5c:13:44:31:a9:ec:44:a2:a0:3b:80:
d7:f0:9f:32:97:89:6a:9e:17:c5:b4:45:f4:53:57:e2:4f:64:
89:2e:2d:4d:f4:a6:f2:f6:01:73:e9:68:ec:52:52:9f:58:93:
24:fd:44:3d:3d:0f:d1:5b:34:9f:4f:9a:e5:3c:b5:8c:20:50:
9c:a8:2f:32:6e:c1:cb:c2:80:07:a0:68:25:da:87:89:02:77:
2b:9e:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:36 2025 by rpki-client