Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
File: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json)
Hash identifier: NQX9R84G3MBtUyDfTaZwRSPeKYhMqSahLoHs9hNXzSU=
Subject key identifier: D3:4F:73:E8:3D:88:18:25:39:DF:4F:FA:2C:9F:8D:B6:B1:13:7A:A7
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Certificate issuer: /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial: 0197696153C3ADD72633864B947CF207A77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 13:01:15 +0000
Manifest this update: Fri 13 Jun 2025 13:01:15 +0000
Manifest next update: Sat 14 Jun 2025 13:01:15 +0000
Files and hashes: 1: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: MKsnYmPxB/3/SEh3DCL3EYQqh9up11mmbeUu3d8bxPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:53:c3:ad:d7:26:33:86:4b:94:7c:f2:07:a7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
Validity
Not Before: Jun 13 13:01:15 2025 GMT
Not After : Jun 14 13:01:15 2025 GMT
Subject: CN=d34f73e83d88182539df4ffa2c9f8db6b1137aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:6c:62:f2:8b:5b:64:ca:b8:7f:b9:44:97:
2e:39:a6:86:62:a4:d8:e5:cb:a4:55:a3:1d:df:f1:
79:f7:4e:16:d6:69:da:55:f5:03:96:4b:a9:49:db:
45:7b:12:37:5f:1f:64:6c:18:1e:12:4c:09:85:df:
50:54:ce:86:54:06:d3:92:fc:3e:86:a8:1b:4b:40:
fb:46:61:f3:fb:9e:73:c7:c9:64:1c:22:bf:b1:fc:
93:92:ee:ff:8e:c2:c1:5b:3e:fb:6c:79:ad:fb:2b:
43:21:83:63:d5:f0:87:fa:bc:86:1b:a9:be:1e:eb:
7c:48:bb:f7:a1:e3:40:b1:32:bc:43:a1:46:80:9f:
ed:aa:8e:cd:30:4a:fd:a8:df:a6:d1:3a:a4:11:98:
3f:a1:c5:6e:22:8d:68:83:dd:db:a8:b7:4c:10:44:
a3:6c:0b:77:53:03:31:65:7c:ee:84:e0:91:78:db:
fb:88:0b:d3:1c:d2:08:04:73:f7:2f:27:ce:db:55:
14:bc:22:cc:a7:18:61:9f:31:58:ed:64:83:ab:cc:
07:af:1c:ac:4d:3a:fd:39:f4:92:ed:3b:b1:24:d6:
e9:bb:b8:b0:a0:1f:2e:ed:fd:fa:12:b2:44:6b:83:
ec:bd:76:9a:85:98:9f:63:ca:62:34:01:01:85:25:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:73:E8:3D:88:18:25:39:DF:4F:FA:2C:9F:8D:B6:B1:13:7A:A7
X509v3 Authority Key Identifier:
keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:10:8c:73:a8:33:fe:99:96:02:b8:2c:58:e3:a1:b7:a7:a9:
49:06:1c:7e:cc:63:12:13:fa:e3:09:4b:2d:ef:36:bb:70:b8:
2d:18:12:a5:94:6f:54:01:51:99:01:93:54:0b:6e:98:83:8f:
7e:d8:38:72:a8:f3:60:f4:f3:ad:e9:4b:2b:fd:8e:e6:6a:39:
df:9d:fb:60:fe:04:9b:ca:f7:95:cb:58:c4:a5:42:3e:d7:59:
50:3f:14:9a:0c:29:1f:c5:9b:5b:e6:77:df:18:21:35:29:72:
64:76:8b:d8:8b:ab:da:49:0f:35:46:c2:fc:f0:ef:15:03:91:
d9:93:38:b8:5d:1b:77:ce:4f:28:cc:09:2a:9c:60:f6:b0:33:
c7:a3:d8:2c:d2:9a:80:69:e4:a4:83:8e:38:c2:a3:5d:8c:82:
7f:c7:4a:88:fe:8b:c4:d4:e4:c5:e0:a7:7c:30:da:4f:76:53:
c1:5a:98:ee:95:56:c8:56:d0:7f:78:d6:89:45:e8:31:81:72:
b8:e1:cd:3e:49:cc:38:a7:1e:2f:2d:63:85:96:45:9e:ee:07:
19:75:da:21:84:1a:e0:f6:1b:4f:2e:c2:aa:3b:34:c2:fc:c4:
0b:8a:10:3f:26:16:19:01:7b:b4:ef:a7:cf:a4:d8:6d:c1:0d:
8c:08:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:47 2025 by rpki-client