Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: oSmOJdYQ21A+omH7Tg83AQZHpIhJcp9a3YqOIrZv3lQ=
Subject key identifier: 7B:E8:82:23:25:E5:57:9C:07:7D:97:54:35:16:79:17:9F:4C:7E:9A
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 01976BF49C83AF7428A3BBC58125CF08F4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 41
Signing time: Sat 14 Jun 2025 01:01:22 +0000
Manifest this update: Sat 14 Jun 2025 01:01:22 +0000
Manifest next update: Sun 15 Jun 2025 01:01:22 +0000
Files and hashes: 1: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: Yt7vwGJ92kAW5It3r4KQjlUhr9ufwHi6cJe2NiiCy1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:9c:83:af:74:28:a3:bb:c5:81:25:cf:08:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Jun 14 01:01:22 2025 GMT
Not After : Jun 15 01:01:22 2025 GMT
Subject: CN=7be8822325e5579c077d9754351679179f4c7e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:26:54:7e:f0:a0:12:82:27:37:e7:99:8e:
05:b6:75:c9:70:ff:a0:1a:a3:75:94:83:02:0f:58:
5b:5e:3e:5f:4a:47:1f:f1:a8:56:a3:b3:23:1a:d2:
8e:85:d6:b8:79:f4:38:3e:2a:1b:d6:6f:61:93:69:
95:8e:ac:30:ad:75:84:a8:79:59:f3:cf:3c:99:e4:
7d:4a:28:09:75:85:5e:f7:61:ff:76:e4:93:75:66:
2a:bc:1d:bf:42:b0:99:a3:e6:70:46:bc:88:cb:1c:
56:f9:2e:3b:ca:7e:e7:8a:46:5a:bf:f1:e2:4f:e5:
98:69:bc:81:3f:d1:98:a9:3a:50:64:f6:17:b0:71:
08:65:d1:cb:ee:69:62:6e:25:58:13:fa:0a:12:16:
3a:cd:43:b5:a4:a8:5c:ce:fe:68:ec:8b:65:83:e6:
79:1e:3f:2f:d2:8e:70:a3:86:9a:9e:3b:e1:9f:8b:
4a:fd:11:7b:66:1d:6b:b4:ca:f9:6c:69:42:5e:fa:
c2:31:9e:47:22:14:09:e7:75:d7:b1:f1:11:85:b8:
fc:99:09:3a:bc:b9:f8:e0:6d:86:1b:e4:5f:f6:25:
02:ca:93:9a:13:f7:d2:07:a0:01:ba:fa:5d:1a:48:
fe:c3:51:54:c4:c6:63:fe:42:8f:89:78:c3:ac:88:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:82:23:25:E5:57:9C:07:7D:97:54:35:16:79:17:9F:4C:7E:9A
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:59:fa:73:ca:83:ae:06:98:b0:44:d8:7f:2f:00:38:a4:4c:
66:33:e4:5d:ac:88:fa:f0:f9:7c:5e:99:90:fc:dd:df:7f:27:
ae:fe:12:0e:af:13:d0:1d:06:b2:1f:c1:01:83:b3:37:2d:ec:
e1:b0:14:72:1b:2a:bc:11:62:15:4e:53:31:84:d7:dc:55:ee:
23:65:f1:3d:01:86:22:f7:af:65:a4:94:7d:14:61:43:cc:63:
71:7d:06:18:2f:2e:3d:76:fc:fd:6d:5d:a0:b6:28:9c:01:19:
09:ad:02:61:71:f9:2f:f3:c8:84:4e:f2:26:8b:3d:86:2b:5e:
7c:e1:d0:dd:0d:00:59:5b:90:8c:a4:19:51:09:84:8c:3f:ae:
b0:a3:8c:ce:8e:3f:76:c6:78:b8:ba:b2:65:28:c1:ec:41:a8:
dd:25:7d:80:f6:64:40:e6:76:17:ef:44:23:56:6f:07:0e:b6:
d4:64:03:5b:86:0e:4e:e6:7e:d1:8a:f7:ec:55:5d:16:ff:29:
85:92:66:45:eb:67:09:cb:e9:64:dc:37:93:be:e1:51:c2:0c:
ae:e9:98:50:98:7b:13:92:61:32:7d:47:60:b3:23:86:78:fc:
33:b0:8c:d7:e1:ec:8b:0a:24:1d:7c:eb:68:bb:b5:e1:3e:eb:
78:e9:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:42 2025 by rpki-client