Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
File: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft (raw, json)
Hash identifier: NewG11WseKgBMRhrVFIG4PxJYJsiScJss2jff0wnUsY=
Subject key identifier: BF:78:FC:50:92:1F:B3:6F:2E:30:F5:02:C0:9B:51:A7:2E:35:AE:17
Authority key identifier: 64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
Certificate issuer: /CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Certificate serial: 01976EBE08744B0FFDF2750891F22A870BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
Manifest number: 02C5
Signing time: Sat 14 Jun 2025 14:00:37 +0000
Manifest this update: Sat 14 Jun 2025 14:00:37 +0000
Manifest next update: Sun 15 Jun 2025 14:00:37 +0000
Files and hashes: 1: ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl (hash: gne7mqVyS7xbfGypHZt9iFMGqwk250ijeByAPtOhRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:08:74:4b:0f:fd:f2:75:08:91:f2:2a:87:0b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e1144edc8c7bb2dde52bec1e2fd8e7af13b1dd
Validity
Not Before: Jun 14 14:00:37 2025 GMT
Not After : Jun 15 14:00:37 2025 GMT
Subject: CN=bf78fc50921fb36f2e30f502c09b51a72e35ae17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:1c:84:24:8b:45:f9:fd:0d:0d:54:0a:3d:
fe:7a:74:d6:d8:a1:31:d5:de:df:31:8f:62:1f:b1:
d4:d9:37:7c:b8:db:2b:2a:dd:41:d1:19:2e:a0:34:
89:9e:6f:d0:ee:7d:a8:34:c9:4e:4d:30:d3:93:18:
d8:83:ac:08:69:b3:ff:af:66:60:57:7d:92:c3:11:
66:c0:47:68:6e:ed:45:99:cf:d9:af:01:c1:23:f5:
c3:e8:fa:b0:e2:d7:04:f0:3e:b0:da:10:be:2b:28:
0a:91:60:03:e7:fa:ef:cd:56:3a:2f:74:b5:43:56:
4a:be:70:3f:83:4d:6d:dc:c7:86:0c:29:a7:90:2c:
94:27:62:a9:5e:4f:96:36:49:dc:53:63:d8:26:67:
1b:26:6e:99:33:28:3c:95:63:8a:22:65:3b:38:e2:
b8:a1:7b:46:ef:09:3e:72:1f:fa:16:39:82:14:4b:
5d:73:17:16:55:77:eb:a6:dc:99:56:1c:26:90:87:
35:6b:f4:72:f7:f9:89:22:8f:d0:85:ee:3d:61:d7:
57:00:13:ca:3d:86:11:58:d1:2d:58:06:e9:77:ae:
6f:b8:63:b4:c9:5e:52:57:be:f4:32:90:d4:77:47:
0d:0f:be:ef:db:32:85:29:ec:ff:ab:ea:02:0b:04:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:FC:50:92:1F:B3:6F:2E:30:F5:02:C0:9B:51:A7:2E:35:AE:17
X509v3 Authority Key Identifier:
keyid:64:E1:14:4E:DC:8C:7B:B2:DD:E5:2B:EC:1E:2F:D8:E7:AF:13:B1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6d05e2-8d68-4b79-8c2f-85deaab50927/1/ZOEUTtyMe7Ld5SvsHi_Y568Tsd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9c:99:05:48:97:85:bd:37:cf:3d:62:43:72:a6:bc:1e:4a:
73:fb:a4:d2:6a:42:f7:07:6d:97:67:09:37:e8:16:6a:5b:76:
50:92:76:5a:7a:47:ab:6b:f4:19:19:63:20:e1:72:a1:62:85:
66:e5:14:31:c1:f9:68:60:e6:bf:a6:f9:cd:71:75:ef:b7:a4:
aa:22:94:49:00:ff:49:c5:8d:f3:27:08:20:11:a3:dc:e2:09:
47:66:62:aa:d8:e8:86:05:c8:b5:7a:60:6b:5a:81:f7:10:80:
19:99:8d:4e:97:ea:54:83:72:99:6f:10:ca:64:fb:04:a2:7a:
25:c5:c6:ec:b1:44:84:6e:15:a0:ac:83:11:35:61:35:31:d7:
79:e6:51:ae:3c:eb:b2:c0:7d:2c:72:b8:ab:83:81:a5:9a:59:
f7:0d:74:56:0d:de:ac:8d:85:dc:28:d3:e5:60:b5:2b:f9:a0:
0c:6e:f4:ea:7a:64:2a:6a:f8:43:0e:c0:d5:99:67:41:57:45:
32:41:d8:0e:22:85:7c:39:e5:38:54:ab:69:9a:5c:8d:b4:e3:
38:36:e2:b6:4f:c9:7c:93:89:f9:80:d1:b5:4c:e3:07:b8:26:
16:f3:d7:f3:df:34:da:22:9a:ed:80:2c:68:d4:4b:f9:83:17:
ba:f0:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:43:14 2025 by rpki-client