Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
File: ZTwsX-3AjoxdH2VGksPkVkDIou0.mft (raw, json)
Hash identifier: efwhRA8TkWR91FG0FBTuSXQR5ZGy/ExNAdj2O5ovZjw=
Subject key identifier: 28:BD:2F:B0:99:2A:41:1B:0A:82:A3:5F:BF:7F:C8:AB:99:FC:8A:02
Authority key identifier: 65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED
Certificate issuer: /CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed
Certificate serial: 01976D3DDA373C96F81C920C6D72AD50BCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
Manifest number: 0A92
Signing time: Sat 14 Jun 2025 07:00:59 +0000
Manifest this update: Sat 14 Jun 2025 07:00:59 +0000
Manifest next update: Sun 15 Jun 2025 07:00:59 +0000
Files and hashes: 1: ZTwsX-3AjoxdH2VGksPkVkDIou0.crl (hash: hm0Zqs3UGiI8dN7YPK7XovgFcd7AgGj4gCaivjfXQOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:da:37:3c:96:f8:1c:92:0c:6d:72:ad:50:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed
Validity
Not Before: Jun 14 07:00:59 2025 GMT
Not After : Jun 15 07:00:59 2025 GMT
Subject: CN=28bd2fb0992a411b0a82a35fbf7fc8ab99fc8a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:29:f6:2e:46:9d:ac:94:f1:a7:e0:06:d4:
a9:56:19:3e:ea:fe:2e:21:fd:c6:13:85:05:dc:ef:
3c:10:64:b3:fc:96:75:96:d0:41:07:e7:2d:50:45:
d5:fe:09:6f:1b:89:fc:3f:df:97:43:13:56:3a:7f:
07:d3:b6:ee:0d:da:3f:2b:c8:c9:a8:28:bf:ed:84:
b9:85:30:5c:14:cb:0a:31:00:ca:67:6c:a7:c8:8e:
68:4b:59:6b:05:ac:99:88:5c:80:34:6a:c8:5f:28:
f0:00:e4:a2:d9:d8:b5:8c:42:ef:16:59:f6:74:28:
9c:09:aa:1c:b9:f0:38:ce:4e:61:65:b5:ef:15:d3:
6a:35:63:72:d6:cc:6c:eb:3b:f9:dc:36:43:d1:3c:
f1:02:bb:d6:cc:7e:fc:80:7c:71:aa:c9:f9:fc:a2:
47:ae:85:3a:ce:9e:df:02:5e:1f:33:76:58:03:c0:
a1:6d:96:38:8c:52:ea:ef:76:c5:2f:df:4d:fc:2e:
dc:6d:d7:7e:0f:c1:54:9b:0e:71:58:bd:4f:53:ed:
b9:6e:8b:cf:95:54:e7:bf:15:e9:fb:3b:08:5c:ef:
a3:b9:c6:68:93:eb:d2:67:4c:b1:22:0f:9b:ab:d5:
4a:9b:26:ae:91:77:21:74:80:fa:a8:6f:06:e4:ba:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BD:2F:B0:99:2A:41:1B:0A:82:A3:5F:BF:7F:C8:AB:99:FC:8A:02
X509v3 Authority Key Identifier:
keyid:65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fe:d9:b2:39:82:16:6a:10:0e:66:e3:4c:8b:79:1f:b0:e3:
ca:51:cf:cd:dd:95:a3:15:23:50:6f:83:42:73:4b:38:30:cb:
2d:bc:7d:44:c6:a4:8d:68:6c:5d:ba:f4:83:b8:4c:97:7b:c1:
b5:76:01:9d:75:a5:24:48:e5:d9:0b:d7:e3:78:62:fd:4d:c2:
58:15:42:7f:7a:2a:10:7f:d7:f1:95:fe:df:06:cf:fb:a1:13:
1c:52:19:25:6a:01:60:4d:b3:4d:47:86:17:ff:0a:c4:f8:db:
c3:f9:69:a4:c9:29:75:e8:b6:54:dc:d1:e3:e5:78:f9:30:81:
41:16:a8:8f:96:07:25:f1:33:7d:2b:04:9c:09:4d:e1:34:c3:
ab:55:ea:b8:80:ac:36:2f:2d:86:ad:c7:3c:26:80:f0:60:fe:
6a:fc:34:60:34:76:d3:8f:41:f0:5e:fe:02:bd:eb:48:1f:bb:
39:e8:dd:69:5c:e8:da:35:b5:98:15:e5:75:0e:01:da:05:cf:
d3:60:ca:3f:51:5a:45:d6:24:d7:0b:b2:80:3c:8d:1c:05:bb:
98:8c:44:78:49:c8:9b:b0:1b:c4:6b:85:28:bf:10:76:82:04:
71:a2:05:7a:6e:53:6d:b2:01:f5:ff:16:1a:ae:92:bb:80:e6:
18:db:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:38 2025 by rpki-client