Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: Jnp12QzfUbNZocPK31pbJTc4GAhUxv3fuYHG5Ez20zQ=
Subject key identifier: 15:5E:7F:A1:03:08:EA:EB:33:1D:6F:FF:38:C6:51:D9:82:0F:17:04
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 0197696117AA2D3437A701A19BEC3B4E9029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0EE4
Signing time: Fri 13 Jun 2025 13:01:00 +0000
Manifest this update: Fri 13 Jun 2025 13:01:00 +0000
Manifest next update: Sat 14 Jun 2025 13:01:00 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: +xQQ+Pv/93f8S6jqO9y4sQoms5n+GlktbeuamEpYd2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:17:aa:2d:34:37:a7:01:a1:9b:ec:3b:4e:90:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Jun 13 13:01:00 2025 GMT
Not After : Jun 14 13:01:00 2025 GMT
Subject: CN=155e7fa10308eaeb331d6fff38c651d9820f1704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:c3:d8:9a:86:a4:ac:37:b7:1a:32:9a:28:
20:ac:14:a3:3d:d6:98:2a:2e:1e:30:c0:aa:d0:60:
de:72:cb:08:d5:1a:54:05:91:5a:0f:69:b6:c8:74:
34:1d:68:9c:b3:dd:eb:e8:b3:d9:e8:42:0c:06:f2:
b4:93:00:60:1b:15:ed:84:18:85:24:1e:cf:88:c5:
30:00:0e:b5:40:47:2d:74:51:51:28:85:b7:27:46:
20:8f:2b:34:90:fa:3e:b1:bd:b4:69:6a:8f:ef:60:
a3:50:06:c0:6a:e1:49:24:2e:0e:ab:98:94:39:75:
61:30:93:9b:cc:d6:56:48:17:09:5b:1d:ec:64:43:
63:94:4e:ce:df:94:0d:51:9b:3c:c0:dd:1b:49:89:
4b:e0:e0:3c:41:ee:57:15:cb:44:1c:7f:c1:94:98:
ff:0d:8f:da:9b:87:ae:8c:09:cb:fd:48:fc:fc:fe:
e0:9d:01:d4:b7:c6:44:8b:43:1b:43:1c:4f:64:7e:
c5:d3:fb:e6:ae:f6:c0:04:2b:4b:70:e9:36:b0:d8:
b8:96:11:7e:4d:d7:11:b5:55:b0:e1:ce:1d:c2:46:
a7:47:68:5f:67:1f:f0:aa:f7:b2:0c:a2:59:dd:68:
22:84:0e:27:c7:a6:70:dc:e7:26:6d:67:49:03:17:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5E:7F:A1:03:08:EA:EB:33:1D:6F:FF:38:C6:51:D9:82:0F:17:04
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ce:56:b0:ea:da:1f:14:e6:2f:0f:3c:91:fc:3a:73:ed:f6:
d5:ba:be:6e:d7:e0:c7:53:0e:36:5a:69:c6:49:fa:92:30:45:
dd:b3:a5:a9:2a:d7:38:a3:11:ad:8a:a9:cd:88:27:c7:1e:96:
69:7f:26:bb:3b:09:5b:28:75:6c:32:d3:fd:ab:e6:b0:64:d0:
09:6a:29:bb:d1:b3:aa:be:ce:3b:2a:d3:d6:18:52:b0:58:de:
db:00:57:c4:c8:ee:b7:e2:b7:b9:87:55:ad:64:eb:c9:63:25:
34:ff:68:bf:63:b1:38:07:c1:c3:4b:78:f7:1e:a7:10:78:45:
86:81:7d:3c:49:be:83:12:4d:78:80:f9:46:1f:c2:af:47:c0:
90:b7:ae:c7:c4:97:99:43:7d:db:be:ca:b7:69:4c:89:23:d7:
35:02:93:df:97:58:bc:26:df:d6:17:cb:b4:01:2b:66:7b:89:
f9:9e:9a:bf:91:6f:06:28:50:25:fc:3d:7f:27:4e:c5:1d:45:
af:23:02:04:96:12:a4:c8:23:3c:ba:16:f4:bb:b0:ac:c1:8b:
97:7b:a3:72:50:67:87:6c:36:b8:e1:a6:af:57:51:34:f0:8e:
6f:6e:4f:ef:db:f3:30:d0:32:d7:f6:0a:43:18:ca:c7:b5:d3:
d6:db:c8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:10 2025 by rpki-client