Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: 6b3FimgQon5DerxRzI+YawDYnmrqaPTeD0ar7JeGqwc=
Subject key identifier: 90:68:9A:C0:92:03:63:F7:C3:84:56:F6:59:ED:6B:24:5F:DD:1E:3E
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 0199244419D5DC77AC10B9CF2520641454FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 1410
Signing time: Sun 07 Sep 2025 13:01:06 +0000
Manifest this update: Sun 07 Sep 2025 13:01:06 +0000
Manifest next update: Mon 08 Sep 2025 13:01:06 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: cFJ6cIQGPfgh75kuWn6AWVydBQHPshKn3922IgWMqHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:19:d5:dc:77:ac:10:b9:cf:25:20:64:14:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Sep 7 13:01:06 2025 GMT
Not After : Sep 8 13:01:06 2025 GMT
Subject: CN=90689ac0920363f7c38456f659ed6b245fdd1e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:f7:57:11:d0:92:d8:64:5a:d1:f9:8f:2b:
09:3a:a0:8a:fb:2a:41:1e:1e:1d:67:17:0b:72:57:
ae:fd:0d:0d:6d:59:89:ac:04:13:14:db:fc:c4:20:
7a:9d:87:55:ae:57:80:6a:2b:14:5d:f4:28:a4:48:
08:e0:b5:69:e3:81:6d:f9:07:a3:37:95:54:95:36:
b7:5e:5c:5f:69:8b:b0:c2:54:ce:bd:55:29:b5:06:
41:2d:39:3e:41:0f:aa:24:a0:78:dd:b5:f0:fd:c8:
b6:9e:4b:66:a0:1e:36:b8:49:c7:a8:35:b9:6b:19:
33:ce:de:73:79:24:94:ff:eb:80:fc:07:5b:07:91:
e3:00:dd:d4:76:ce:f0:aa:7d:04:87:68:10:a9:57:
76:7f:59:ee:99:69:5a:8f:3b:0c:8c:e2:cb:a4:01:
fa:c9:fd:78:44:21:dc:ef:ac:2d:11:3a:26:34:c6:
0a:28:e9:7a:7a:72:47:a0:57:18:d0:07:11:18:dd:
fc:6b:2d:20:c6:bd:50:17:ad:f0:2b:3f:16:8c:a7:
e5:a2:d1:1d:30:b1:b6:8b:32:70:41:34:74:9f:8c:
93:a7:e9:20:70:b1:5d:d4:01:f1:ce:f5:66:ba:49:
49:f6:d4:ed:94:49:3d:5c:d0:d4:55:ff:c9:58:06:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:68:9A:C0:92:03:63:F7:C3:84:56:F6:59:ED:6B:24:5F:DD:1E:3E
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ec:22:f1:2e:9a:96:57:a5:10:db:ab:dd:1f:49:e8:98:b4:
8a:33:af:9b:c9:54:47:93:b5:e9:b5:8d:92:36:f4:ba:98:11:
50:06:3b:4f:54:bb:d5:e9:7d:2a:b9:7a:c3:56:3a:c3:eb:c5:
47:fa:18:61:23:59:b4:b3:a8:cd:05:69:ee:03:91:15:03:bb:
e9:8f:72:db:54:2c:20:a1:6b:f6:9a:aa:bc:a0:29:94:b4:0a:
0e:38:2d:5b:65:a5:ca:3d:61:a5:b0:f0:9c:40:80:88:99:87:
ad:55:35:25:e7:9f:04:5c:60:75:1f:01:fe:12:20:5c:d6:d8:
d1:0e:19:6b:fa:f6:84:b2:96:9b:83:e5:d1:61:9f:9e:36:ca:
1c:77:7b:6e:a0:cf:d8:e1:85:d4:a7:93:f6:a9:f3:5b:6c:fc:
b6:8e:70:01:d6:dc:a0:3f:07:ac:ea:6a:09:31:37:e0:84:7b:
01:f8:a2:b8:61:98:f2:bb:ea:dc:14:cf:b9:22:ca:3b:b2:0d:
9d:e4:91:98:74:8e:e9:9a:c5:4f:22:f3:e1:6d:1e:d7:72:9a:
24:1a:e3:da:4e:c7:cc:c1:24:8e:2c:71:10:7b:18:8c:b5:e3:
37:5b:48:8b:d7:bf:ab:87:2d:65:86:a0:ef:73:13:d2:25:09:
ea:85:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:44 2025 by rpki-client