Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File: Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier: aBzHpw+R4G9qZu1fEMyzus3ogz63Kx60rIHCVIX+1KE=
Subject key identifier: EA:7D:D7:5B:C2:41:59:E2:FB:17:F4:D4:1C:20:BD:8D:9B:E4:FF:13
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer: /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial: 01976D3E28CC6E6AEC4B5C2C9ACEFF5B2A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 07:01:19 +0000
Manifest this update: Sat 14 Jun 2025 07:01:19 +0000
Manifest next update: Sun 15 Jun 2025 07:01:19 +0000
Files and hashes: 1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: 75trXg7Fold3XZEn27autpaZefGG5f/TIwz3ccd1vpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:28:cc:6e:6a:ec:4b:5c:2c:9a:ce:ff:5b:2a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Validity
Not Before: Jun 14 07:01:19 2025 GMT
Not After : Jun 15 07:01:19 2025 GMT
Subject: CN=ea7dd75bc24159e2fb17f4d41c20bd8d9be4ff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:90:47:bf:8e:2c:f4:9a:0c:0e:c1:f1:9e:
4b:90:2f:24:2b:59:ca:b5:3e:c6:06:d0:97:98:00:
4c:90:67:bb:e0:66:22:d9:e4:52:14:e7:45:65:9f:
37:b4:9f:0f:c0:85:ea:1c:1b:ea:c2:d1:8d:bc:e9:
2d:53:eb:db:a4:c0:8d:d8:ed:25:c8:d5:df:87:bc:
47:2e:96:4b:80:1d:ac:d8:23:b3:ae:e3:06:77:f7:
eb:10:c6:10:bd:22:a6:ea:a1:9f:3f:3f:04:b3:2d:
d8:0f:2a:b7:3b:41:43:28:dc:89:89:b4:fc:eb:46:
ab:bd:98:a5:93:e6:5c:1e:96:2b:29:7b:7b:c4:96:
99:99:92:b5:ba:16:8a:f1:b9:d9:cf:03:cd:80:d0:
a4:12:d0:12:7d:32:32:2c:91:8f:aa:e1:26:ae:64:
39:b7:78:af:d5:a6:e5:77:b1:12:b5:75:47:ab:b0:
d5:b3:77:aa:d9:8d:63:c6:2a:d0:27:21:17:a9:ef:
73:b2:ba:5d:28:2f:36:b6:19:de:07:f1:c2:f8:e0:
bd:3c:d0:ac:85:05:65:b1:f6:67:94:98:5f:71:5c:
a4:21:e5:98:6c:04:ee:84:2b:5f:b3:de:62:51:d7:
6b:47:2a:78:62:d8:55:a6:4e:46:4b:d0:1b:95:8d:
63:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:D7:5B:C2:41:59:E2:FB:17:F4:D4:1C:20:BD:8D:9B:E4:FF:13
X509v3 Authority Key Identifier:
keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bf:d2:d9:c4:d6:1f:dd:61:0e:01:a3:44:10:ce:21:fd:c9:
47:f3:ff:e5:f7:c6:ec:14:e7:9c:0d:1d:30:c3:44:3a:7b:94:
0e:e8:d1:c8:57:a7:c1:cf:89:0a:5c:b4:c7:04:e6:32:e4:b1:
86:d4:dc:61:f7:49:6f:b3:ab:7a:85:94:62:c2:2e:02:4e:01:
0e:c0:18:f3:1b:ed:b5:8a:b8:52:8a:b8:a9:21:da:ce:35:53:
5f:62:13:45:7b:c7:ba:d5:92:9c:70:c5:0b:37:c8:2e:b8:0e:
e5:c6:fa:c6:91:81:f7:c1:b2:2d:06:4d:e8:af:c0:91:02:d6:
9c:88:c7:c7:a6:93:c0:4d:bb:5f:18:ee:a9:00:8e:0a:53:0c:
30:ca:6e:fb:f6:e4:f6:1b:3f:d0:77:2c:4a:a9:f2:85:dd:f3:
26:bc:b6:3b:12:f8:f9:f6:b6:ae:57:49:48:7b:a2:06:3c:48:
c3:b7:48:27:f6:0d:85:b7:43:2d:45:ac:6d:b6:68:40:fd:c5:
c5:f3:6f:c0:3d:79:d5:c2:67:e8:33:ff:9e:27:5a:7c:46:6c:
44:d6:06:e2:aa:00:a5:5a:86:48:b9:78:dc:fd:45:c6:13:dc:
ae:23:02:f5:25:7f:84:ef:f6:5e:c1:7b:8e:2a:b5:16:f5:7c:
b8:69:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:22 2025 by rpki-client