Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: sEnei+TydM0yAgeCmNma5odx8lkkfIg4Iv5OMWrzDN8=
Subject key identifier: 5D:3C:F4:C9:69:9D:46:4C:7C:7E:3F:8F:39:DA:C2:22:69:8C:2A:5B
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 01992255D2ACBA75C65E76CDFE81518C3FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0CBE
Signing time: Sun 07 Sep 2025 04:01:13 +0000
Manifest this update: Sun 07 Sep 2025 04:01:13 +0000
Manifest next update: Mon 08 Sep 2025 04:01:13 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: ZNVKD9KQcy/iNSTkJlj7EG6AMQjV8WgRTBqJuVJviNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d2:ac:ba:75:c6:5e:76:cd:fe:81:51:8c:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Sep 7 04:01:13 2025 GMT
Not After : Sep 8 04:01:13 2025 GMT
Subject: CN=5d3cf4c9699d464c7c7e3f8f39dac222698c2a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:6e:aa:d1:39:20:f3:66:3e:c4:4f:a3:f9:
79:3f:a1:f2:d8:9a:f7:de:08:a6:4d:52:34:81:f8:
8d:05:1b:59:88:01:fb:02:af:72:e3:60:27:e8:03:
74:0a:c4:14:1a:b7:b3:6c:48:06:79:fc:57:6a:34:
40:30:49:b8:d9:8f:34:79:aa:1a:6f:28:d0:98:b6:
3f:a2:ad:34:d6:e1:69:73:2a:e0:f8:f7:15:8a:83:
85:d4:13:b0:0e:e4:75:0f:dc:1b:f0:d9:97:7f:d3:
22:45:ba:ae:80:fa:32:f1:58:39:2a:9f:33:ea:81:
11:62:bd:0d:f4:23:e5:a9:2e:21:63:31:39:72:38:
60:b4:33:3d:ec:e6:22:d6:79:73:c7:8b:fd:00:ec:
64:e8:5b:5f:3a:01:a4:af:85:d6:05:27:db:15:a8:
f0:a4:8e:4d:3a:44:03:c0:82:76:f3:80:81:c8:b7:
36:4a:67:bd:a2:1f:b4:12:13:f9:ca:98:48:fe:94:
da:8d:30:f8:8c:97:90:de:4c:06:1b:8e:19:5c:48:
aa:7f:03:f2:09:3c:cc:43:d9:65:38:9e:3d:64:20:
42:b2:0b:f7:33:83:e0:61:b9:9d:23:66:1c:1a:d9:
70:c0:ba:67:70:c8:11:73:61:eb:6d:b5:37:d6:b1:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:F4:C9:69:9D:46:4C:7C:7E:3F:8F:39:DA:C2:22:69:8C:2A:5B
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:bb:b3:bc:d8:8d:9e:27:ca:83:76:7e:af:aa:f9:2c:34:
49:80:61:e0:65:c6:a8:02:a4:c8:d9:53:75:0d:b9:a6:8b:b9:
bd:81:3f:f1:6e:5a:f5:15:84:b8:71:27:10:0b:9e:2e:f5:3d:
a5:97:36:d5:ad:df:8a:9f:33:3d:21:b2:d6:97:dd:80:e8:98:
1e:df:ca:56:48:42:e6:93:1e:9a:35:7d:01:68:34:76:e5:f4:
f0:df:c8:4e:61:32:7d:12:69:95:c0:5a:c5:96:65:92:2f:cd:
2b:01:14:82:cc:86:7e:22:3f:32:9b:c8:83:73:53:0d:dc:7e:
86:20:a9:6b:fa:54:a7:97:bf:39:d6:5f:1e:5b:23:87:21:0f:
b9:84:d3:1d:c9:7a:44:0c:cc:31:c4:be:be:c0:f7:59:79:e2:
b8:30:72:48:41:30:a8:98:52:19:5e:88:da:5e:c9:af:76:25:
17:c5:da:fa:73:f5:4f:52:61:d2:7c:22:88:ea:34:9d:71:0a:
05:93:cd:25:dc:5f:b3:57:7a:32:ac:c8:38:d4:b2:b5:58:9c:
34:d0:02:6c:31:5d:2e:b7:65:ff:eb:83:05:f6:25:1b:7f:ce:
9f:01:6a:e7:b9:e7:25:e8:ce:b8:86:59:04:58:8f:64:37:9a:
bc:09:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:08 2025 by rpki-client