Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: ZjCorN8eJKy3MSgHf38r1glbslJ25i+4TBpNkNW9gG0=
Subject key identifier: 40:BF:96:AB:51:E9:1A:3A:91:95:24:F6:84:10:9D:03:85:71:F5:85
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 019769617988D9566F36CF444A4374D7FDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0DA9
Signing time: Fri 13 Jun 2025 13:01:25 +0000
Manifest this update: Fri 13 Jun 2025 13:01:25 +0000
Manifest next update: Sat 14 Jun 2025 13:01:25 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: NeMhPUq07LeOlx6KlzwfbPiS6i34lLxEMPJFhyHYgww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:79:88:d9:56:6f:36:cf:44:4a:43:74:d7:fd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Jun 13 13:01:25 2025 GMT
Not After : Jun 14 13:01:25 2025 GMT
Subject: CN=40bf96ab51e91a3a919524f684109d038571f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:68:5d:19:7d:62:73:b2:09:ac:d0:3c:fd:
47:1a:5f:ec:db:e1:63:e6:c6:7f:fc:4e:94:b8:6b:
f7:64:fd:78:14:58:19:2b:05:e7:00:99:2e:90:4b:
31:97:1d:e3:11:a6:45:48:56:57:31:92:18:cc:11:
bf:3a:67:2f:9d:8b:f1:9e:cf:04:c0:79:b4:86:f4:
06:35:5e:b4:1f:8e:47:1c:87:09:50:88:dc:69:6d:
69:58:ce:66:71:a2:ee:66:12:e8:f9:da:5c:67:4d:
e9:53:e8:0d:92:bd:a3:d3:b8:38:e5:a4:08:fb:b6:
c6:21:35:42:eb:89:4c:1f:bf:d5:8d:b0:0c:b1:9c:
e9:8e:fa:9f:b7:7f:1b:09:f0:a3:70:2b:3a:7a:ef:
d8:45:d7:7d:97:37:b4:0d:9b:fa:3c:1c:fd:4e:d0:
e7:bf:a9:ef:22:a1:6a:99:fc:35:37:53:cc:07:17:
f2:ed:18:c7:69:81:90:f2:6c:7e:60:7d:50:e7:9b:
0f:84:dd:41:7c:47:5c:fc:47:4b:49:b2:00:da:d6:
ab:e9:6e:74:e7:72:73:7e:6e:d7:44:6b:c3:81:8d:
a9:8a:40:c2:d3:3d:26:4f:5b:c0:07:90:e7:f8:d6:
21:09:26:3a:ed:60:c4:c2:21:9f:fe:1b:c6:c9:16:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BF:96:AB:51:E9:1A:3A:91:95:24:F6:84:10:9D:03:85:71:F5:85
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dd:8a:e8:d7:61:24:4f:dc:70:d1:86:30:7c:b3:b4:eb:3c:
bf:af:21:99:24:55:65:e7:08:d8:22:18:ea:4a:f9:e6:d5:c7:
a1:87:83:99:5e:12:50:1a:ad:49:af:22:4c:5a:52:5f:61:17:
fc:30:9b:84:9f:55:5f:d6:ac:dd:96:39:89:58:a2:de:9a:b2:
11:0f:ae:81:23:b6:5b:a3:a4:48:0b:31:7f:a6:18:38:80:ea:
95:60:90:66:6c:15:5b:95:c1:b9:28:8c:24:a5:7a:1a:21:7e:
56:5a:56:65:7a:e9:d0:34:cc:db:7d:f6:70:f8:d1:47:79:71:
57:62:d8:6c:90:66:a7:46:03:2e:99:43:b4:70:45:a6:39:be:
ce:26:c0:d2:e9:31:15:e0:b7:34:c4:c0:94:eb:63:1a:ad:eb:
76:7e:87:cd:ea:d7:ba:b8:b0:ae:3b:14:e6:38:69:00:ad:ac:
61:d5:8f:35:04:85:bd:05:aa:99:89:71:3b:37:88:c8:54:19:
2d:46:56:10:34:78:ef:9d:5d:3b:14:30:1b:36:ac:0f:70:55:
3b:bf:a1:2d:a5:55:cb:ee:82:75:83:2e:4f:37:e9:6c:73:d1:
65:f7:7a:3a:d8:4f:30:14:12:bd:4a:44:67:6b:38:bf:06:62:
9f:5b:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:44 2025 by rpki-client