Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: 0u4kSi+B2NLqNV/VRcMdPrkQV1FYSm9r0T5p6dAcwuk=
Subject key identifier: FC:27:8A:08:71:D9:D6:E4:A8:65:FE:64:76:07:B9:73:56:BC:96:27
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 01976F2CC16B6459EB243AFDFD31C69EDE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 0D29
Signing time: Sat 14 Jun 2025 16:01:33 +0000
Manifest this update: Sat 14 Jun 2025 16:01:33 +0000
Manifest next update: Sun 15 Jun 2025 16:01:33 +0000
Files and hashes: 1: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: 0nsXbI+V0eDScMQzOsobzdVVMDDLf4HCwrxOMTnf1Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:c1:6b:64:59:eb:24:3a:fd:fd:31:c6:9e:de:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Jun 14 16:01:33 2025 GMT
Not After : Jun 15 16:01:33 2025 GMT
Subject: CN=fc278a0871d9d6e4a865fe647607b97356bc9627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:aa:2d:8c:19:6d:72:25:9d:15:4b:9e:88:
0f:54:16:10:46:cc:a9:c3:a0:b5:24:cd:ba:f2:7a:
b1:35:ad:6e:b7:b8:bf:fa:f5:b4:31:90:2b:2c:f9:
72:08:03:27:1a:c6:51:a4:43:a3:5f:ca:1c:c2:9e:
ec:fc:95:c6:b6:38:e9:80:ba:36:8a:ea:02:4a:ea:
36:04:f5:8b:9f:95:03:59:5b:ff:17:72:12:81:b2:
a4:2b:61:ab:4f:2c:f6:5b:3e:87:15:e5:5a:ee:b5:
50:0a:8e:5e:ac:d9:1b:36:77:11:6f:b8:fc:34:3d:
95:13:60:e6:80:ce:07:26:95:0f:0a:be:bc:2c:c7:
77:6f:03:ae:e4:44:42:cb:65:fb:1c:e5:a3:73:de:
a2:92:c5:78:07:6c:7d:c3:3f:0c:c1:31:4f:0d:10:
21:9f:e7:2a:27:33:a0:10:08:26:7d:96:ea:97:84:
a7:57:29:6c:48:41:92:d6:81:4c:42:08:df:8b:09:
64:72:7b:1a:7e:e4:22:77:6d:a7:93:cc:c4:f7:d4:
ae:00:01:ca:93:b7:66:ce:50:f8:83:f4:43:fc:3b:
dc:cb:99:a8:4b:d1:82:17:65:57:88:f0:b2:d3:98:
77:b5:1a:9d:a4:eb:01:f2:9d:13:04:68:2a:d9:2e:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:27:8A:08:71:D9:D6:E4:A8:65:FE:64:76:07:B9:73:56:BC:96:27
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:9e:fe:3b:cd:3d:35:5e:48:56:04:ef:f1:08:77:42:95:5e:
61:97:bc:87:0c:63:87:6f:e7:8f:b3:71:92:c1:4b:a9:a5:51:
b9:5f:eb:15:25:ac:2b:1a:49:33:4c:34:26:dd:14:3e:ef:e7:
ea:23:e2:15:8a:d9:46:c5:d6:63:39:25:b9:9f:43:f3:3c:0a:
25:87:b4:1a:56:38:d4:21:0a:61:a1:3c:12:e0:c3:dd:9f:d2:
72:42:c6:cd:c3:de:60:26:4d:02:1c:4a:8e:1b:02:0e:7b:66:
54:ee:94:45:f9:57:66:53:8f:61:2f:ea:e1:65:db:d9:ee:06:
3c:8d:f7:b0:82:fc:a9:54:50:ee:25:0d:d5:58:2e:f5:8f:11:
8d:4b:ad:33:b2:27:86:30:fa:9c:7e:52:03:76:14:a4:41:d6:
51:ff:3c:a0:fb:39:2b:d4:a7:c2:70:73:9d:81:63:88:c7:52:
b6:53:d2:23:e3:97:72:4e:69:b2:31:d3:d1:a2:77:a7:44:ca:
be:e2:e5:23:f5:88:50:bb:99:42:dd:f1:00:c3:ba:e0:69:da:
e6:58:63:83:4f:67:16:9b:26:ee:00:11:65:f4:a8:2a:09:cc:
cd:6b:30:c1:31:0f:45:9b:91:09:58:8f:74:fc:88:e3:f7:db:
60:b5:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:59:12 2025 by rpki-client