Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: RmaNszL6p4UO5xwGezyjwNiaVNh0MNjKOk3InQEAwZ0=
Subject key identifier: 66:E6:07:40:BE:A1:E6:E3:B2:C3:02:C5:E4:A9:1E:42:4E:9E:CD:4C
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 0197684DCEAC2BF0F5FDA1636F8758978733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 0D56
Signing time: Fri 13 Jun 2025 08:00:19 +0000
Manifest this update: Fri 13 Jun 2025 08:00:19 +0000
Manifest next update: Sat 14 Jun 2025 08:00:19 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: Intaxqs0/xCumADIbEdAJ5/bOrmQncOQMTI7ru8HV2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:ce:ac:2b:f0:f5:fd:a1:63:6f:87:58:97:87:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Jun 13 08:00:19 2025 GMT
Not After : Jun 14 08:00:19 2025 GMT
Subject: CN=66e60740bea1e6e3b2c302c5e4a91e424e9ecd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:23:1a:ba:99:fb:ac:08:68:ae:e6:a9:f0:
37:d4:f3:c4:69:5c:22:4f:e8:59:cf:64:f3:3d:d7:
18:ee:cc:82:4d:6e:c4:32:12:77:e6:04:63:49:67:
be:8d:0a:75:cc:dc:1f:5a:b3:65:4f:27:01:f4:cc:
9d:30:af:6e:05:36:04:ab:bb:2d:e1:39:12:04:ce:
d6:e5:a3:eb:b2:40:35:ba:a1:ab:d1:bd:74:98:03:
04:93:91:50:0f:6d:32:88:ee:e8:2a:4e:12:58:85:
96:d0:3f:29:8b:68:0c:2d:fb:c5:ad:a9:2f:ca:2b:
59:73:07:2c:87:25:ca:12:8e:3b:a9:0d:cd:aa:17:
53:89:a6:5d:25:47:65:cc:c2:ea:00:4c:47:d1:04:
93:51:40:5c:73:e6:00:6b:58:e2:57:90:db:3c:32:
4c:c2:dc:e0:a0:40:33:0b:38:95:8f:48:4b:70:7a:
4d:08:db:7b:70:32:67:b2:ca:0e:52:72:5f:e7:88:
1e:c0:10:5e:42:b7:23:97:ca:2f:d2:8a:60:0b:f1:
ff:b7:ae:33:3d:e0:38:50:ad:c5:f1:47:0b:86:c2:
81:11:6d:3c:1b:45:ba:94:57:65:00:4a:44:42:11:
3a:46:b9:38:93:6a:8d:2f:c4:d8:03:93:e8:95:24:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E6:07:40:BE:A1:E6:E3:B2:C3:02:C5:E4:A9:1E:42:4E:9E:CD:4C
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:54:bc:12:00:de:cb:aa:7d:12:fd:b0:10:05:e5:7a:2b:
7b:ca:0c:42:8b:22:cc:00:5a:58:79:33:3d:d6:b3:6f:72:40:
81:be:e0:65:ed:c8:97:90:cf:27:ce:be:df:f5:bc:a3:08:3c:
06:c7:c5:a7:db:65:be:01:b5:3c:50:1c:81:fc:8c:3a:ec:50:
a8:3b:f2:78:95:f7:4b:81:38:78:4c:7f:dd:0f:e0:bb:d5:4c:
a6:35:d1:e2:70:ee:1c:99:c1:d2:e8:47:22:bf:2f:5a:01:c9:
d0:da:77:7b:ec:13:63:a4:5f:a5:3b:d9:70:70:fe:15:bf:63:
69:93:7c:2f:62:a5:90:00:b1:f0:d3:3a:84:d3:5a:05:66:41:
53:47:b3:b2:e6:dd:a0:95:15:d5:44:68:f0:12:ea:e7:e3:db:
bc:fc:ac:d8:b1:72:19:06:c6:49:e7:95:f3:3f:4d:21:20:b6:
17:1e:df:6f:d5:c4:57:f6:73:d1:23:37:ad:0d:aa:14:70:8a:
98:3b:aa:51:ec:0d:46:b5:1e:52:79:f3:51:da:56:f0:df:4e:
aa:bf:ab:7a:75:89:9b:cf:b5:cd:79:48:08:11:e3:d9:39:68:
38:22:91:57:af:0f:f7:dd:d9:e7:6d:f6:59:65:b2:af:45:82:
5e:fb:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:44 2025 by rpki-client