Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File: zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier: PnJ8PHMCzvRgTVGF9HEuKuLAMPhArpbRbDfAFRaPusw=
Subject key identifier: C9:75:BE:2E:E9:8F:D6:B8:B4:2F:FB:82:75:95:75:B1:AF:E3:50:52
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer: /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial: 01977308E3F807CB51C33420344B88BE03DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number: 0F33
Signing time: Sun 15 Jun 2025 10:00:51 +0000
Manifest this update: Sun 15 Jun 2025 10:00:51 +0000
Manifest next update: Mon 16 Jun 2025 10:00:51 +0000
Files and hashes: 1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: Qc1U0z3fKTg9zBxTduVRq2sT7sGljvfymkEKdsC5mW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:e3:f8:07:cb:51:c3:34:20:34:4b:88:be:03:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Validity
Not Before: Jun 15 10:00:51 2025 GMT
Not After : Jun 16 10:00:51 2025 GMT
Subject: CN=c975be2ee98fd6b8b42ffb82759575b1afe35052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:cf:90:6e:d8:fe:91:91:16:63:35:03:33:
10:e2:39:bb:94:a7:f9:42:8b:99:a3:5c:55:98:ac:
07:b7:b0:e5:73:4c:8e:54:36:13:45:b4:e9:44:b9:
0b:73:e8:40:28:ea:eb:66:2d:b5:f8:03:19:af:ee:
8b:dd:27:c0:70:19:e6:d4:a3:cc:59:be:54:f3:56:
2b:58:a6:03:0d:bc:48:36:93:c5:c9:22:aa:81:e1:
60:e5:2b:ea:86:b9:fa:fe:2f:fc:77:cb:18:68:41:
ee:3f:5c:ed:8c:ef:57:85:e7:52:1a:40:15:1d:76:
d8:2e:7b:12:23:48:60:33:fe:9a:c1:8a:b3:d5:40:
40:a7:04:c7:27:58:b2:80:f4:52:ed:b9:eb:d9:84:
80:99:d6:20:6d:f2:26:90:1f:04:66:10:9b:7a:ed:
b3:40:82:c9:8b:a1:0c:bb:f1:06:22:e3:7b:ad:23:
96:da:6d:1e:be:4f:27:59:2d:55:a0:f7:09:cb:8b:
2f:8a:21:e5:e4:c0:1e:c4:b1:0b:3b:a1:6e:36:96:
42:3a:1e:1b:92:8c:a4:54:10:d7:18:a7:41:e8:9e:
22:dd:45:5c:eb:46:ac:db:fa:78:53:2d:e7:8e:70:
8e:10:25:33:4c:23:11:97:43:1d:03:86:40:bb:15:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:BE:2E:E9:8F:D6:B8:B4:2F:FB:82:75:95:75:B1:AF:E3:50:52
X509v3 Authority Key Identifier:
keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c8:6e:58:0b:c4:1f:71:5d:33:80:4b:7b:00:27:40:16:6e:
07:7e:17:13:70:0c:10:f4:45:73:64:be:53:97:b9:77:39:0c:
d6:0b:5c:b3:77:a6:e5:d5:10:66:aa:07:68:c6:2c:5e:fe:46:
af:7c:e7:4f:30:b8:47:48:20:f2:6e:b5:f0:02:2f:af:31:f2:
20:85:73:85:74:01:9d:25:65:13:d4:26:cd:ec:54:a1:7a:6e:
ac:7f:26:76:9b:df:49:b2:61:66:55:f1:7c:8e:a8:55:16:3e:
3f:91:29:3e:c7:bc:c3:c0:d6:5e:29:30:a3:a0:7f:e9:86:a6:
84:5a:9f:16:71:3f:00:e8:4c:72:4f:f0:4c:75:ec:71:36:83:
2c:63:d9:28:6b:73:1a:02:ae:17:8d:25:e8:fe:04:e6:ad:4b:
49:32:39:eb:2b:f0:6e:62:99:3a:c5:28:3f:d9:e7:e7:02:16:
f8:72:ea:f7:0f:de:85:5f:8f:0a:b9:91:38:01:47:b7:9b:db:
e7:04:61:44:bf:4b:7f:31:aa:5a:58:ff:8c:48:56:5e:56:78:
56:1f:a1:24:24:c5:00:76:28:18:6a:74:d6:c0:d3:68:94:83:
5d:2d:2c:25:7f:b9:0d:0f:24:b6:9d:36:c3:15:db:73:3c:9e:
1f:06:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:59:21 2025 by rpki-client