Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
File: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft (raw, json)
Hash identifier: jUetXVVSLY8hibB+TlPniePa1jTC62f/ZNpgRRlNRN4=
Subject key identifier: 85:4F:02:DA:49:93:B2:16:CB:12:A1:6A:FD:C9:30:F3:78:05:4D:1E
Authority key identifier: 67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
Certificate issuer: /CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Certificate serial: 01976E873EFDDEF19595E5AC026ED057CEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
Manifest number: 017C
Signing time: Sat 14 Jun 2025 13:00:46 +0000
Manifest this update: Sat 14 Jun 2025 13:00:46 +0000
Manifest next update: Sun 15 Jun 2025 13:00:46 +0000
Files and hashes: 1: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl (hash: uUsF0AY3+ySMinJek3neW84gxIANCEg8sw8EaDWxDbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:3e:fd:de:f1:95:95:e5:ac:02:6e:d0:57:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Validity
Not Before: Jun 14 13:00:46 2025 GMT
Not After : Jun 15 13:00:46 2025 GMT
Subject: CN=854f02da4993b216cb12a16afdc930f378054d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:c5:52:4b:28:b2:3c:91:42:0d:d3:d5:37:
c8:f9:54:46:48:a6:64:97:fa:5b:10:e5:2a:d7:de:
a6:cd:9e:2e:c1:e2:51:63:07:5f:d5:27:72:30:13:
86:78:6c:50:39:72:30:04:8a:b9:d8:9b:b6:a7:50:
ef:6e:8c:08:55:3e:5f:21:3c:ed:3f:27:8f:03:4c:
c2:f1:4e:07:54:b9:55:55:a7:42:a5:1f:02:6b:eb:
81:67:0d:6f:03:41:e8:56:79:4b:d3:2b:6a:0a:83:
01:64:73:76:c8:e9:23:fa:bc:46:60:cb:e1:e9:78:
6d:9b:be:76:84:ab:42:fe:3f:f5:12:14:f9:ba:eb:
f6:fc:50:1e:c1:b8:e2:c9:71:4c:44:b5:2a:11:b0:
69:c8:a8:06:8c:35:cc:5f:a6:0e:4e:de:0e:2c:df:
87:85:13:56:fd:9b:35:ec:22:db:78:56:1a:ec:53:
67:d7:6f:99:61:2f:b6:29:4f:74:ea:dd:90:b7:bd:
1b:3c:3c:be:2a:f2:8c:f5:00:56:75:a3:76:ba:8b:
20:4f:c7:9d:31:a5:b2:7d:1e:95:cc:6d:7c:f1:c0:
2a:0d:ba:f7:3a:52:be:9e:3f:7d:95:b9:36:2d:23:
ab:ea:6e:f9:bf:58:08:17:02:e1:66:1c:89:40:f4:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:02:DA:49:93:B2:16:CB:12:A1:6A:FD:C9:30:F3:78:05:4D:1E
X509v3 Authority Key Identifier:
keyid:67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:56:08:c8:2d:3c:64:70:90:96:2a:f9:2a:7a:52:4a:ec:f3:
cc:b2:60:14:3b:52:ed:96:a4:41:ce:15:d4:ae:6e:cb:a1:e2:
b4:98:4c:79:52:95:7b:99:4f:cd:b2:cb:db:f2:9f:7f:db:00:
fa:50:6b:1b:13:7a:18:6e:c6:ea:36:7d:a6:5e:6f:c3:d0:c3:
07:cf:87:32:c7:14:5c:45:9b:30:18:60:4a:ec:5f:b5:f8:5c:
15:83:49:ae:6d:45:5d:2c:91:77:bd:9d:77:90:11:9e:60:90:
d5:32:eb:fb:c7:95:cf:f7:7a:96:14:8c:7a:62:a4:a2:ef:a4:
5c:ec:91:2a:e6:1b:0a:98:e5:09:22:10:4f:f8:79:9b:b2:77:
e6:84:ec:6e:30:be:62:06:ae:b8:db:22:1d:37:a8:c9:9f:ad:
90:b8:76:ed:04:2f:6b:5a:df:6d:62:27:1e:1c:40:a1:2c:d5:
f0:17:fc:2e:70:b3:1e:63:93:01:47:42:3b:70:58:7a:16:0b:
3f:0d:50:d9:aa:93:53:e9:65:96:70:ea:cf:82:b6:d5:83:2c:
a8:92:c6:d3:8e:35:a8:0b:04:c9:3d:6d:25:4f:de:c0:9c:3a:
f1:4e:d7:66:ca:cd:b0:67:09:b1:24:ee:9e:2f:c8:de:87:fb:
0b:f4:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:25 2025 by rpki-client