Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File: Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier: wZ4oxiIhQ5H//L19dyQanMTitjtMnZOHpwm+o81Uois=
Subject key identifier: D0:A8:3F:AF:CC:4C:C3:6E:72:B0:9D:88:3B:25:02:9D:5E:14:F9:1C
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer: /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial: 01977941ABAF9ED3C1C39CDBA04131804719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number: E9
Signing time: Mon 16 Jun 2025 15:00:36 +0000
Manifest this update: Mon 16 Jun 2025 15:00:36 +0000
Manifest next update: Tue 17 Jun 2025 15:00:36 +0000
Files and hashes: 1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: mVZCbhl5/7qjzSkhEdbXW7uIT2iRYwWybiGJJFs7fB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:ab:af:9e:d3:c1:c3:9c:db:a0:41:31:80:47:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
Validity
Not Before: Jun 16 15:00:36 2025 GMT
Not After : Jun 17 15:00:36 2025 GMT
Subject: CN=d0a83fafcc4cc36e72b09d883b25029d5e14f91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:bc:be:16:d8:d9:b5:e8:bc:17:23:53:f6:
2b:92:78:e4:17:86:41:8c:f4:69:2b:63:a4:ea:f5:
60:c2:8b:31:00:16:e9:69:86:a0:f4:a5:4e:2a:3b:
d5:ed:8b:14:76:ad:16:a1:f6:d8:54:0f:97:6d:2e:
00:2c:f3:a2:ec:71:66:18:13:97:95:fe:36:0a:66:
e0:81:4d:e6:1b:cd:7a:44:21:b7:ea:dc:57:66:7e:
1d:93:2d:46:47:dd:64:97:40:77:da:b3:4c:ac:3b:
bc:26:e2:a4:af:e3:e4:72:f3:a4:9c:23:2f:24:61:
02:48:e6:bc:33:08:b8:99:51:c0:e9:72:01:e6:5c:
ec:03:21:e9:df:91:2d:3b:f6:8d:0c:51:77:fc:43:
2f:c7:aa:96:50:49:6a:e5:2d:42:50:94:78:1d:33:
97:0b:0d:a5:9a:d7:94:42:7f:78:a6:2c:c2:23:2e:
83:91:64:7e:65:cd:a1:2e:89:89:3e:0c:53:9b:20:
59:13:22:63:7e:35:75:b8:ad:23:1f:14:f8:fb:e8:
7c:3b:0c:10:4b:71:a9:58:0a:e2:e2:a6:2a:bf:12:
6d:e1:5c:03:6b:22:7d:c9:54:67:a6:45:57:bc:a0:
0d:11:b9:6e:b8:21:1b:db:f8:de:db:68:02:1c:2d:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:3F:AF:CC:4C:C3:6E:72:B0:9D:88:3B:25:02:9D:5E:14:F9:1C
X509v3 Authority Key Identifier:
keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:bf:bd:98:01:0d:59:a8:67:1d:90:60:99:3b:0b:9e:0d:5e:
d5:94:5e:e0:35:3d:3d:ec:7a:47:44:03:b2:3d:fc:39:8b:75:
32:a3:b4:c7:c5:22:42:2f:9b:ee:79:84:fe:32:25:35:c3:15:
a0:4e:c2:8a:57:53:00:97:e6:7e:96:ba:a6:aa:cb:a1:2a:69:
3d:eb:51:4a:93:80:69:7d:a0:ab:0e:d2:3e:4c:ef:6b:4a:6a:
d2:32:31:60:32:7b:f5:7f:0a:ab:46:54:a6:59:20:c4:72:bc:
72:53:dd:c5:ba:89:b6:b5:e1:cd:e9:8c:cc:2a:bd:b9:08:10:
c9:14:78:be:58:37:a7:13:5f:a2:d2:0e:ba:06:82:35:bd:91:
45:a4:66:e5:06:55:a8:86:6d:d3:34:2e:39:1c:be:91:82:bd:
af:b6:7e:21:92:44:c9:48:83:49:8e:d0:a6:09:2a:40:68:c7:
22:ab:3e:8c:d6:29:6a:03:3a:6f:7d:44:76:eb:d2:92:6f:39:
8e:65:e5:44:7d:f6:e1:b4:15:92:4f:9c:6e:70:ec:c9:80:f4:
65:5e:23:e3:4f:34:c7:94:9e:09:01:3e:54:9e:bf:db:4f:d6:
fc:a3:25:1f:cb:9b:82:2d:04:cf:0a:e0:17:db:20:81:a4:c8:
39:5f:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:08:52 2025 by rpki-client