Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: DVLgz7LUEr51tgY2fJUWnzmNe0JhhXQt4v3ZcbDHV4A=
Subject key identifier: 36:52:22:98:2C:B5:6D:18:4E:1C:70:C8:B4:C0:FC:4D:26:E3:34:01
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 01976BBDBA42D83F2B4C7DEDACF8715FD126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 0951
Signing time: Sat 14 Jun 2025 00:01:25 +0000
Manifest this update: Sat 14 Jun 2025 00:01:25 +0000
Manifest next update: Sun 15 Jun 2025 00:01:25 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: SwtaHIL/e8wqib9GkFxSy2nD1J/ZeKJGybBkRnYB7c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:ba:42:d8:3f:2b:4c:7d:ed:ac:f8:71:5f:d1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Jun 14 00:01:25 2025 GMT
Not After : Jun 15 00:01:25 2025 GMT
Subject: CN=365222982cb56d184e1c70c8b4c0fc4d26e33401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:cd:50:0e:5e:90:7a:d1:99:a3:f0:ac:51:
d8:e4:b1:82:a6:1c:e8:35:d9:4d:07:f5:cc:9a:47:
55:6e:58:97:8d:18:a0:04:43:1d:7f:98:43:19:c7:
cd:a7:ff:9d:09:b0:bb:9c:a9:d6:0e:2e:e8:3a:bf:
46:74:8a:7c:b1:7d:9f:34:0b:81:89:cf:3e:97:89:
5c:59:7a:0a:96:6e:12:80:ce:c8:10:87:bd:43:56:
86:2b:78:15:cf:7f:43:d3:88:17:47:01:a8:a0:b3:
90:17:cd:69:f6:1d:73:ba:03:d9:06:30:f7:26:5f:
19:45:20:d3:c3:81:ee:6f:9a:a2:56:b6:f9:e1:4d:
72:73:39:ea:3e:37:14:25:62:94:f1:54:b3:e2:2b:
cf:78:c0:b3:02:ae:96:c0:ba:23:f5:e2:0e:59:ab:
90:17:07:a2:b7:58:c1:c9:97:26:e2:1c:61:b3:38:
e0:f5:10:9d:d5:22:0e:da:30:d5:be:12:f1:b7:8d:
b3:a1:fe:a6:69:b9:16:77:82:6d:c2:a5:8c:98:3f:
ce:1a:4e:6f:d2:b8:6c:c7:75:2c:84:8a:cd:f8:ca:
5e:23:f1:b0:73:eb:7e:e3:41:83:f3:09:32:26:87:
b7:2e:5e:6e:41:2a:01:d3:64:96:63:55:3f:3a:e6:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:52:22:98:2C:B5:6D:18:4E:1C:70:C8:B4:C0:FC:4D:26:E3:34:01
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:fa:f9:69:d6:fd:2c:68:59:68:e1:68:4f:9d:d1:5f:83:
08:b6:2d:52:38:20:79:11:8f:db:e7:bc:08:4e:14:79:04:df:
9c:a9:19:30:53:1d:31:48:6f:5c:7c:f7:ff:c6:03:b5:e3:90:
bb:4a:ec:87:4f:ba:80:35:7b:82:99:e8:74:43:63:59:9f:23:
1e:4a:f1:78:4c:43:3a:24:34:30:8e:98:e9:c4:76:4b:8c:60:
e7:ff:a6:93:f7:cf:fa:0f:a8:0a:15:23:79:b7:fc:4f:8e:4a:
a3:af:2e:de:08:f6:f7:e7:38:0f:4f:ad:f6:1d:7c:2b:4e:59:
a7:4a:b2:da:13:ab:b5:ef:16:45:ae:9d:e7:9b:fa:7d:eb:49:
93:bf:9b:e6:63:cc:bf:8c:8f:e5:0d:5c:f2:22:f6:51:56:d3:
38:45:7c:ea:5d:98:77:d6:08:81:23:c6:68:81:0a:95:82:bd:
b6:d0:fd:38:5e:a7:b4:3d:fb:3a:f6:a0:e9:11:66:cb:ee:71:
f0:85:9b:30:c2:69:28:f8:83:7c:fe:d1:23:7a:90:90:f5:87:
39:3b:75:ab:89:3e:1f:c9:03:97:78:22:6b:b5:cd:cf:ad:c1:
6d:38:82:f3:5d:80:3b:a0:a1:f2:bb:5b:81:7a:2f:58:42:45:
23:7e:d4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:57 2025 by rpki-client