Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: TTwUdMSNGuYtJl9zFVIIqUKtORnjxiogTF0/ek150+s=
Subject key identifier: 53:36:01:04:2C:EF:6E:A7:EA:EB:75:48:D8:C3:7E:4F:5B:0A:F1:01
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 019778D434A37DDAC53E9AD31B78CD5D0B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 0D74
Signing time: Mon 16 Jun 2025 13:01:02 +0000
Manifest this update: Mon 16 Jun 2025 13:01:02 +0000
Manifest next update: Tue 17 Jun 2025 13:01:02 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: fvjNYf+XaMmf5iyG6h6h8gVoZJ6UgVPJcdJLoEQ8dXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:34:a3:7d:da:c5:3e:9a:d3:1b:78:cd:5d:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Jun 16 13:01:02 2025 GMT
Not After : Jun 17 13:01:02 2025 GMT
Subject: CN=533601042cef6ea7eaeb7548d8c37e4f5b0af101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:e4:c6:fe:05:1c:98:76:e6:62:20:62:0a:
15:c5:c4:e3:c6:a6:a3:1a:38:aa:46:d2:46:0d:a4:
46:60:4d:0e:40:23:62:73:7a:ff:f9:e3:eb:fa:dd:
f0:9c:48:04:c9:c3:c5:d1:31:cc:d4:8d:cd:39:41:
90:f3:d3:bb:10:38:7c:a5:b9:fa:33:06:5e:21:64:
43:dd:7c:5a:eb:4a:fc:77:a7:f5:ae:55:c5:25:f7:
f0:25:e7:27:63:81:b1:c9:32:f7:2c:26:61:7b:7f:
d0:ea:d2:6c:dc:55:40:c8:53:67:00:aa:43:aa:67:
f4:dd:22:c6:49:dd:3f:6e:48:bd:dd:a9:a1:ee:e8:
17:13:cd:9c:5e:97:27:d7:c5:15:aa:e9:d6:b3:ba:
38:1a:1e:6b:af:a9:13:a8:d6:86:95:2e:cd:3d:a7:
31:70:a3:2a:1a:e8:ca:6e:05:48:0f:97:52:74:c2:
56:10:a3:75:54:bc:83:76:c4:c4:db:f3:16:a6:5c:
23:86:8e:f0:ca:a8:54:aa:62:de:69:b5:c7:8f:bd:
0f:9a:f6:ee:60:cb:f0:2b:2e:ac:44:ef:e0:cb:9b:
2c:41:12:d0:fd:df:4a:09:01:40:0f:7f:38:58:9e:
95:87:e6:7c:b4:20:57:f2:ad:01:38:ab:57:92:6c:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:01:04:2C:EF:6E:A7:EA:EB:75:48:D8:C3:7E:4F:5B:0A:F1:01
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:20:b6:a5:7c:15:3e:90:53:3f:13:cf:ab:22:7e:ee:cd:c1:
83:d7:87:1b:66:5d:39:84:a0:03:6e:35:d0:00:f3:75:3b:b4:
d1:16:d4:95:43:1f:3d:ee:83:8a:50:45:f7:31:85:44:3f:15:
35:45:27:30:17:f7:a3:a4:22:bd:e9:43:1c:12:06:a0:69:99:
72:3d:20:a7:da:97:6f:1a:34:e3:48:48:95:c0:bf:f6:7a:eb:
d9:71:02:4e:88:d5:8b:3b:12:98:37:e1:fa:fd:8a:ef:35:34:
96:9c:46:1d:5e:1a:f7:47:ad:3a:2e:a8:b3:44:fb:95:6c:cc:
db:b3:5d:96:3c:3b:cf:8a:1c:ea:df:5f:b9:9d:ac:32:5b:11:
4f:2c:b1:7e:57:72:57:46:27:09:f7:cf:c7:d2:52:b9:f1:22:
ab:97:dc:e8:7f:b5:12:0a:2e:1d:55:e6:02:ea:b5:6c:1e:39:
64:06:3a:53:43:c2:a7:e5:55:43:40:0f:78:54:09:97:25:dc:
3a:03:28:32:6e:d9:2d:0c:8a:cf:71:17:dd:59:0c:b9:d5:8a:
ce:d0:9b:84:bc:0c:b5:07:14:a2:f4:15:64:13:81:4a:28:de:
6d:b1:f6:01:2c:23:6e:a9:c9:52:cc:07:97:95:80:17:07:20:
da:12:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:14:54 2025 by rpki-client