Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: x0+ZBDflGcUeco+Q9oo6jKgKXYb3FOgtS2i61IPdcqU=
Subject key identifier: FD:C4:56:A8:7E:82:E3:FE:C0:F8:3C:5F:61:37:8E:E1:04:77:46:0A
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 019768F2B5FBBE6DF523F862D952AC211A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 04EE
Signing time: Fri 13 Jun 2025 11:00:26 +0000
Manifest this update: Fri 13 Jun 2025 11:00:26 +0000
Manifest next update: Sat 14 Jun 2025 11:00:26 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: 8LCmy5N7EIJEEXVDinabjKZ6xb96SE27m0O5O60x4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b5:fb:be:6d:f5:23:f8:62:d9:52:ac:21:1a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Jun 13 11:00:26 2025 GMT
Not After : Jun 14 11:00:26 2025 GMT
Subject: CN=fdc456a87e82e3fec0f83c5f61378ee10477460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:6e:ba:69:c7:3e:45:3c:28:fe:6c:86:81:
cd:d7:48:4c:aa:96:89:25:fa:be:e6:52:12:29:be:
23:49:38:36:92:5b:6d:21:95:d9:4d:af:9c:04:80:
d0:b1:86:a3:f5:f4:c8:47:9a:c8:6d:40:db:d2:3c:
8a:e0:12:38:8d:f6:9f:fe:6e:4f:52:7d:3f:5c:0a:
ab:93:df:b0:d6:e4:de:e9:0d:7a:72:c6:3f:41:77:
da:c9:1c:36:63:c5:38:e0:62:cf:1a:e7:33:ea:37:
e8:d4:5e:82:4e:0f:85:d8:d7:90:95:67:9b:dc:da:
19:5d:a2:d9:84:06:64:32:e2:8d:f0:aa:ff:3c:8c:
49:c0:35:66:a7:86:88:3c:fc:2c:dd:d3:54:9d:85:
cb:78:f5:6b:7c:87:8d:f4:8e:57:28:ea:2e:45:5f:
ab:26:16:56:8c:0d:e9:72:f0:de:0e:a4:d4:56:f4:
a1:51:90:aa:75:ad:51:fe:b2:4f:df:c6:20:28:69:
e3:a9:57:8c:80:13:52:57:2a:aa:26:f5:72:d5:4d:
c8:aa:be:44:f9:c6:90:aa:65:3b:1f:f3:0e:af:ee:
8a:2e:11:d2:d1:95:2e:37:2f:a4:db:86:9e:53:2b:
ca:d2:85:71:42:ce:55:bb:f5:99:40:2b:cb:ec:c7:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:56:A8:7E:82:E3:FE:C0:F8:3C:5F:61:37:8E:E1:04:77:46:0A
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b6:9a:d9:64:ec:7d:1e:a2:92:b3:88:56:e0:33:95:19:e3:
ec:1c:18:c8:b6:bd:ac:27:2e:81:fa:8f:d5:c4:33:6f:a0:e7:
7d:96:d3:b5:23:f7:89:33:c9:07:c2:d9:b9:c1:90:7a:9e:a1:
68:fe:36:c8:7b:93:59:a5:bc:9e:68:bd:ab:e7:de:ce:fb:43:
03:c9:87:d8:1a:55:63:a0:de:f8:09:1c:8c:e0:6c:34:26:cb:
b6:9e:e3:3d:84:d6:e5:96:72:db:08:47:2e:3e:6a:a5:54:13:
30:e8:97:a4:18:47:52:24:49:cd:47:7b:cd:34:0a:9a:41:bd:
3e:50:31:2f:bf:df:fb:a4:ff:e1:ee:15:16:d6:d7:94:a4:98:
13:6c:f6:da:f1:25:62:82:78:f3:ef:99:db:ff:b3:30:bf:7c:
09:48:49:ed:39:0a:23:fd:73:c5:99:24:db:93:72:9f:b4:e0:
19:1e:29:84:4f:dc:06:e2:4c:49:c8:72:10:76:7d:56:34:87:
10:ea:a5:3e:82:ef:d6:ac:30:f6:b9:ac:a2:6f:9a:58:28:7c:
7e:d3:90:9f:ff:81:59:b3:61:3b:de:a9:e1:fd:e3:48:20:91:
ef:5b:59:e1:e0:aa:06:22:4e:7c:c9:d0:c7:c3:cb:82:2d:5c:
26:7c:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:26 2025 by rpki-client