Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: zlkL29M7HXzVIhkmvkwGwL5ky5arVTS0F57Af8g6LTw=
Subject key identifier: 29:C2:6C:83:A3:6B:C8:1C:74:DD:08:A2:91:21:A0:E5:C1:93:B9:47
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 01976C9883630332642AD5FCEC30BDC6C600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 13AC
Signing time: Sat 14 Jun 2025 04:00:23 +0000
Manifest this update: Sat 14 Jun 2025 04:00:23 +0000
Manifest next update: Sun 15 Jun 2025 04:00:23 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: YMdjbApwEaniIQdZBguRTwY9jiKgO9f92TCdtKuwqWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:83:63:03:32:64:2a:d5:fc:ec:30:bd:c6:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Jun 14 04:00:23 2025 GMT
Not After : Jun 15 04:00:23 2025 GMT
Subject: CN=29c26c83a36bc81c74dd08a29121a0e5c193b947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:e7:ce:ff:eb:48:1c:53:69:d1:02:f9:1b:
75:5b:96:74:e3:20:ac:7a:af:ed:f3:d0:68:7d:91:
eb:53:26:7d:1a:b3:06:98:4b:0b:07:fb:27:d7:35:
8e:cd:20:c8:10:ea:f3:53:44:b9:c7:8b:70:a6:f1:
e0:e3:b2:3a:75:68:a9:a9:6d:18:2e:c0:c1:bc:12:
95:2b:32:71:0a:89:f6:7b:5f:7a:3c:39:c2:fb:88:
02:86:6b:1b:55:fe:19:3b:af:0f:3e:ca:8b:d0:57:
ca:75:3b:3d:43:f0:f2:90:67:f9:e9:4b:56:fb:8b:
04:37:5c:c1:fb:5e:12:57:55:c6:bc:97:8d:4c:41:
78:7e:f7:45:ce:63:4d:ba:e0:c4:d9:89:ce:d4:bf:
de:c6:e0:6e:af:6d:76:75:8b:d6:a8:85:d1:1b:25:
ed:55:18:21:b0:5a:47:10:78:3a:d5:81:e6:2e:97:
95:ed:be:50:7d:f4:45:4b:6f:79:06:14:2c:ad:e6:
68:a3:68:7b:91:a3:da:b5:0f:11:fe:e7:de:c5:5d:
ae:6a:33:5b:73:12:87:f9:70:45:05:57:c1:c5:d3:
7c:4a:a4:26:06:06:3e:18:ba:6d:d6:48:b1:9d:50:
52:26:fb:c5:c4:88:61:1e:ca:dc:71:d4:de:f1:bc:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C2:6C:83:A3:6B:C8:1C:74:DD:08:A2:91:21:A0:E5:C1:93:B9:47
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:16:da:ac:20:ff:19:58:b1:9c:6c:2d:ad:3e:00:61:75:
85:dc:a6:50:53:f1:f3:e3:67:21:0e:c6:25:4b:8e:43:25:e5:
02:1e:b7:7b:8b:a4:ca:ba:e7:c5:c7:76:7d:1d:c7:16:45:4b:
a4:8c:e2:d5:49:48:84:fc:d1:c4:1d:17:02:c9:d4:40:e5:09:
2b:9e:38:6b:86:ac:08:1e:09:a9:e6:39:dc:fb:3c:94:8b:42:
c0:eb:09:3b:a1:78:39:10:f1:19:2c:33:95:1d:61:35:dc:03:
46:90:81:b5:ec:59:c7:62:7b:10:cb:6d:c9:25:78:d9:a6:cc:
e4:fa:6c:df:ca:44:3e:1b:53:55:08:5c:6e:dc:a9:b4:45:c8:
3e:67:e0:a8:7c:00:dd:12:fa:1b:7c:b2:0d:a4:46:50:70:69:
00:2d:ed:b6:37:cb:ba:2c:ce:9c:dc:f6:c5:55:03:26:69:b7:
13:09:5e:d9:5f:93:50:f8:1f:fc:4b:88:72:8a:eb:d9:fc:28:
7b:e4:98:64:06:76:d0:4e:ff:48:5d:ae:0f:cd:45:d0:62:f8:
24:22:a9:7b:05:a6:90:a9:71:22:42:ad:53:e3:1b:61:2d:30:
30:df:b6:ef:90:e1:49:2c:a4:a9:5c:6b:92:ed:68:6b:53:1a:
f3:86:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:32 2025 by rpki-client