Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: YHn18ZPWb7rUDiyjI2OcGMxKU1lkhIKRJQX5EkJT1qo=
Subject key identifier: D1:AF:05:4E:16:BF:E3:21:57:A2:54:15:B5:6B:FD:F9:47:97:59:16
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 01976F2C4621B5AA5A3493B07A3B2247B82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:01:01 +0000
Manifest this update: Sat 14 Jun 2025 16:01:01 +0000
Manifest next update: Sun 15 Jun 2025 16:01:01 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: PBx02mSilLkWnOozqQshV0VSLKYLkipUFZAKYJ5qqQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:46:21:b5:aa:5a:34:93:b0:7a:3b:22:47:b8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Jun 14 16:01:01 2025 GMT
Not After : Jun 15 16:01:01 2025 GMT
Subject: CN=d1af054e16bfe32157a25415b56bfdf947975916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:37:11:5e:8c:52:d3:a7:4c:6b:f8:27:13:
92:45:96:00:77:a7:05:3e:56:82:8b:0c:3a:bb:09:
0d:49:c3:fd:ae:d3:18:60:79:b7:f2:45:f7:3b:90:
b6:f7:56:41:4b:30:02:cc:d2:50:69:b5:44:e9:0f:
b9:80:23:96:f8:4f:f0:ac:6e:b3:0e:17:80:7c:80:
e1:81:6f:a7:3b:99:43:d9:07:a2:e4:39:0a:5f:a0:
b2:b1:10:67:ce:6d:51:ff:a9:cc:da:3a:2a:5a:76:
7d:eb:7b:90:09:35:e1:38:2a:f6:2f:65:fa:50:15:
04:e9:e1:0b:ce:17:68:db:ca:31:06:d4:1c:f1:de:
13:37:18:3e:b2:ab:8e:d7:f7:9c:1e:46:47:c8:cc:
72:a7:22:7c:e9:12:6f:51:7e:f6:bd:1e:f7:a4:14:
b9:4f:1f:d0:ab:c6:32:81:45:58:e2:20:f2:f9:80:
4f:17:45:a4:4f:c9:eb:45:9e:69:ae:7d:e1:50:39:
06:6f:4f:8e:db:bf:71:f5:7d:82:39:11:ca:4f:11:
32:7d:a5:8d:b6:6b:7d:d4:4f:92:ad:38:cd:79:6c:
a6:8b:33:b2:22:35:e2:40:80:32:9d:a9:47:0e:98:
6a:6b:49:41:0f:07:86:1e:e8:0a:22:11:d8:b4:59:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:05:4E:16:BF:E3:21:57:A2:54:15:B5:6B:FD:F9:47:97:59:16
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ca:60:f4:6d:39:f1:02:3c:8a:51:a9:d7:07:95:02:85:9d:
d5:61:d7:07:05:b0:ea:46:65:2c:86:bc:e2:42:55:18:3b:93:
c7:a6:bd:ca:25:6a:56:04:95:a5:43:b2:9c:6e:a5:48:85:23:
09:e5:aa:5a:f7:7a:2c:5a:2d:43:e4:aa:82:b9:d0:8f:52:ea:
0e:f8:d3:bc:c2:24:6b:c6:2c:e9:46:20:20:7f:75:75:3b:5c:
fa:9d:87:13:c1:b0:a2:29:12:1d:0b:2d:4e:83:29:88:f4:e6:
08:f2:3b:ec:90:76:1b:94:8f:d0:b9:cf:86:dd:23:e9:49:bd:
95:f7:1b:28:14:d3:96:65:99:30:54:0c:09:b6:e0:3e:8b:70:
b2:55:e2:3a:d1:23:be:e4:6e:55:38:66:69:91:1c:61:73:db:
6c:e4:aa:cd:9f:b1:6f:e6:a5:8d:24:9f:9e:ff:5c:b7:05:89:
d4:eb:a7:23:eb:21:f4:b5:3d:72:91:19:5c:00:93:bb:fd:84:
fb:14:72:62:56:90:a5:34:9f:85:a8:9f:8a:f7:ae:87:75:49:
d1:a7:d7:74:5d:cb:be:b7:01:99:b4:0d:46:ac:89:0e:a9:9a:
01:24:6a:c0:9d:11:c5:b0:64:95:f7:ed:d2:07:af:24:0f:e2:
fd:38:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:01:58 2025 by rpki-client