Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: PQ0s7HdraLMc/HKt7jLiy6e/KwPaWpKCGuqQcjsNMeg=
Subject key identifier: 29:11:23:9F:CD:48:6C:B4:E5:4C:26:10:BA:08:77:9C:23:C6:25:B0
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 01978E7FD60405DE09C4879345E150CDCF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 1260
Signing time: Fri 20 Jun 2025 18:00:31 +0000
Manifest this update: Fri 20 Jun 2025 18:00:31 +0000
Manifest next update: Sat 21 Jun 2025 18:00:31 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: kj8wnBPo/RPAvnzXkW70DOULq/NNXzV3X5atsggas7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:7f:d6:04:05:de:09:c4:87:93:45:e1:50:cd:cf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Jun 20 18:00:31 2025 GMT
Not After : Jun 21 18:00:31 2025 GMT
Subject: CN=2911239fcd486cb4e54c2610ba08779c23c625b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:d6:4c:8b:1c:89:a0:62:91:80:fb:cd:92:
1e:0c:8c:5d:60:f9:d4:6b:4b:55:65:e8:1c:f7:c9:
e7:c5:3b:c7:c8:88:14:d7:e0:08:4d:4e:48:a0:5c:
8b:bf:ff:6b:88:72:06:2a:b7:ea:4f:6e:ce:a4:fc:
96:9d:28:43:dc:2a:7e:c7:3b:15:01:79:12:af:e9:
aa:33:fd:72:df:b7:ba:98:65:8d:92:f4:0b:e1:8c:
08:76:a4:a5:34:dc:78:f3:db:b7:36:2a:fc:32:d5:
61:0f:8a:a1:85:8f:af:6a:39:bb:aa:5c:e1:fc:28:
50:3b:c9:ca:7e:06:75:df:2a:99:b2:49:13:24:c1:
06:58:18:a2:46:93:e4:22:d1:39:7a:83:4b:ac:37:
c8:e1:2e:47:45:8d:64:75:22:80:04:e3:bc:22:4b:
ab:32:2e:44:91:52:5f:a7:f5:7f:f5:75:07:3c:cd:
5e:fc:25:f2:39:ee:9c:be:fe:34:d2:9f:07:ea:57:
20:47:f8:44:0b:2a:ac:d3:9e:b1:2b:4c:38:61:5e:
47:5d:d7:2c:90:32:e9:ba:54:b9:7d:5a:cf:93:64:
2d:fb:74:66:57:97:9a:ed:e8:ec:b6:26:1c:3c:1b:
a6:79:bc:77:cc:b1:9d:03:49:db:73:d6:7a:03:1a:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:23:9F:CD:48:6C:B4:E5:4C:26:10:BA:08:77:9C:23:C6:25:B0
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e0:d1:f5:5e:27:3c:f5:1e:74:45:1a:88:22:dd:fc:df:70:
f0:85:67:2b:8b:52:db:7d:33:61:9a:9b:ac:ba:dc:79:a3:b9:
ae:81:d3:0b:36:ad:ce:fb:52:de:29:66:e6:47:a0:03:77:b0:
75:f4:81:21:1d:75:18:ad:fc:48:5c:f7:5f:9b:3c:8d:1a:4c:
94:e0:eb:f7:1c:3c:84:07:6d:7c:55:64:3f:c8:57:f3:c4:8a:
c0:74:50:1f:46:23:3b:cd:e7:91:fe:b9:ab:90:66:bc:cf:5b:
6e:08:ec:d4:82:94:08:61:e3:36:ce:ce:e1:11:cd:3a:11:91:
46:03:de:e5:a8:6e:62:25:fc:f6:03:3e:cf:58:b4:c5:5a:17:
80:48:3e:01:36:08:89:cc:48:3b:5e:8b:1a:a6:e5:fa:2d:c7:
37:b2:f7:16:5a:c9:1d:85:7b:22:94:04:85:e1:57:a1:b6:85:
9d:87:08:e7:2a:21:ef:25:2c:9c:e8:02:6d:86:16:b2:df:55:
75:b6:e6:e5:db:65:ac:6e:b3:a1:8d:a3:29:dd:12:33:d2:34:
d5:ab:e5:be:ca:39:83:c5:e7:fb:2f:aa:6a:e6:4a:e3:9f:8d:
7e:1c:a2:8d:59:2c:6b:54:84:41:cd:af:16:0d:f0:ed:16:ef:
2e:47:98:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 22:47:33 2025 by rpki-client