Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
File: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft (raw, json)
Hash identifier: bOLJrPGDdZS86laPmZ5hdi5gaah1mPQBtba8N/jD3NY=
Subject key identifier: C3:97:65:08:27:AA:46:F9:95:71:71:24:91:66:D1:8D:6D:85:D6:60
Authority key identifier: 66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
Certificate issuer: /CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Certificate serial: 0197715129C4A176FC9A6CD3CE5D779AF612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
Manifest number: 62
Signing time: Sun 15 Jun 2025 02:00:33 +0000
Manifest this update: Sun 15 Jun 2025 02:00:33 +0000
Manifest next update: Mon 16 Jun 2025 02:00:33 +0000
Files and hashes: 1: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl (hash: 57/Y0yoPKIIRDm0qfF9yjfEb661UXN8lVspx1j6qMFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:29:c4:a1:76:fc:9a:6c:d3:ce:5d:77:9a:f6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Validity
Not Before: Jun 15 02:00:33 2025 GMT
Not After : Jun 16 02:00:33 2025 GMT
Subject: CN=c397650827aa46f9957171249166d18d6d85d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:53:c9:4c:4d:e2:1d:63:80:f0:67:12:7e:
c1:d0:1a:4e:07:a3:d0:0d:b2:c3:49:0b:cd:22:7f:
d4:e1:69:37:22:2c:5a:b7:fe:a8:fe:bc:28:1e:57:
c1:83:fd:76:75:ac:7e:d2:0a:28:bb:8b:07:a0:d9:
2f:99:0b:8e:64:ed:5c:20:20:03:4d:6f:a2:50:8b:
46:58:e0:d7:76:40:b7:69:e8:f6:cf:88:f0:a8:51:
f9:da:e7:a7:6f:56:84:16:47:a4:37:c6:4a:df:09:
4c:a7:87:2e:68:7a:fe:a1:5d:f5:5e:59:65:fc:d0:
25:08:a2:a6:ea:f3:c4:31:64:ea:e3:2e:29:98:f3:
9c:bb:6e:f6:46:db:48:24:d9:b2:38:e2:73:4d:9a:
5a:34:b0:a9:55:c8:fb:d3:21:49:88:f3:51:b1:ad:
09:89:81:5b:71:55:3d:07:23:a4:e7:2e:53:5e:74:
22:4b:cd:ed:fe:e1:0a:3f:09:7b:ad:1a:15:e8:82:
2f:0a:e2:c8:55:15:dd:dd:27:1d:91:54:5b:fc:68:
5b:1d:4b:fc:f8:cd:4d:04:f2:56:bc:e4:d8:e9:4e:
2b:52:51:39:8c:42:a5:f1:b4:46:00:8f:49:95:bc:
ba:67:c6:06:b1:48:5d:a7:1e:22:ca:b3:fd:cf:cc:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:97:65:08:27:AA:46:F9:95:71:71:24:91:66:D1:8D:6D:85:D6:60
X509v3 Authority Key Identifier:
keyid:66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:00:14:93:b3:d7:2c:04:07:43:5e:59:e5:90:90:6b:1d:68:
d6:f2:eb:01:a3:30:e9:46:98:09:d3:94:59:b4:8f:c9:4c:8c:
d4:33:b8:39:72:0b:7b:89:9c:54:1c:83:48:44:5a:61:fe:da:
2b:d8:30:29:46:4a:69:85:23:f1:7e:64:c0:51:0c:e9:1b:61:
cf:33:ef:80:60:5e:a8:67:c4:df:eb:52:e0:df:77:7a:a3:fe:
34:70:76:a2:da:85:17:33:2d:b2:de:8f:46:b8:37:f6:43:e2:
bb:28:c6:88:99:50:14:a5:0a:46:b4:d8:18:44:c7:d4:fc:6d:
db:dc:5c:69:96:d2:bb:46:70:26:4e:d1:db:89:aa:ba:f5:66:
d6:75:49:fc:81:3b:c4:c5:c2:67:81:85:70:d5:45:65:86:e0:
a9:e6:ef:62:9b:ad:fa:33:d6:8d:c9:17:0c:33:e8:c7:9c:a7:
64:6a:15:44:09:d7:2e:88:02:f4:60:97:5e:cc:c1:e4:f8:bf:
67:c9:e7:96:f7:2b:63:de:ed:92:15:9b:a9:59:35:38:07:f0:
82:28:a2:e0:18:f8:0a:4c:8f:c9:5e:6c:9a:a5:b6:c7:e8:3c:
80:50:7a:a8:8d:c1:ce:ac:0a:f2:84:72:d7:d5:89:ef:37:3f:
e0:6f:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:13:56 2025 by rpki-client