Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: 81COFNS1G8CrICBo2FI/ah9O+1aUwq3nMY5zQaBvHaI=
Subject key identifier: B8:02:7A:2E:5B:A4:42:4F:7E:4B:C8:E1:AB:E8:1A:E1:6A:32:95:5A
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 01976929C3C634262961B87BAE5FDE0E6A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 0386
Signing time: Fri 13 Jun 2025 12:00:34 +0000
Manifest this update: Fri 13 Jun 2025 12:00:34 +0000
Manifest next update: Sat 14 Jun 2025 12:00:34 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: rEkC/BaamSSsXsodyDAZ9A0DVnjWK4Sbx9YIbHOUki0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c3:c6:34:26:29:61:b8:7b:ae:5f:de:0e:6a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Jun 13 12:00:34 2025 GMT
Not After : Jun 14 12:00:34 2025 GMT
Subject: CN=b8027a2e5ba4424f7e4bc8e1abe81ae16a32955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:16:6c:7a:33:33:f7:73:13:19:50:7c:2d:
04:ec:71:c6:ef:9f:8d:a2:f9:55:33:56:dc:02:6b:
4b:19:6e:ad:73:e7:3a:2e:d6:e0:de:fb:37:e0:fa:
f1:2c:63:c2:35:7d:c1:eb:c3:e6:6e:ce:fe:02:ca:
2d:6f:f2:8a:81:14:5b:82:f5:d7:92:e7:f1:fc:1a:
d6:87:cd:af:42:68:7a:76:74:c7:91:cc:b6:01:b0:
b5:c9:a6:03:f1:9c:51:75:81:e0:b9:ed:ff:fc:23:
85:fc:7d:75:94:12:2f:88:6e:1b:9d:e9:54:cf:f0:
a3:02:fa:4e:3c:54:ae:19:f2:57:15:9b:42:5c:25:
39:f4:46:46:51:49:6f:0e:43:da:45:26:02:7c:9b:
53:8e:87:33:af:28:9e:6b:bf:82:cd:63:b6:20:57:
cb:ae:bf:19:9e:76:9b:48:c1:32:36:bb:9b:07:5b:
76:84:92:24:11:3c:ff:bf:ce:32:0c:15:2d:45:6a:
75:dc:30:14:db:d2:0a:04:e6:f3:64:d6:0f:c7:21:
30:3d:93:99:13:15:79:3b:1a:d3:2d:f0:d8:03:5c:
0f:15:19:b9:19:ad:d3:f0:aa:4e:7c:73:df:14:f7:
37:00:88:a1:54:7b:de:f4:9a:dd:60:6a:80:60:70:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:7A:2E:5B:A4:42:4F:7E:4B:C8:E1:AB:E8:1A:E1:6A:32:95:5A
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:94:3c:4e:76:dd:82:ab:5f:9c:a1:65:f3:8f:b5:0f:42:fb:
f7:c3:e8:8f:2d:c7:36:af:fa:8a:27:24:51:a6:4c:d2:59:6f:
cf:99:58:fb:a8:82:09:53:d0:ab:20:9e:8c:58:26:77:52:92:
b1:b5:5a:24:ce:15:8a:1e:6c:c4:fe:2f:86:14:b4:70:57:36:
bb:59:bf:1c:e2:87:05:59:a9:1d:86:86:a8:22:fe:75:d4:a6:
e2:04:e6:ec:2e:a5:a5:58:d2:de:2a:42:b4:4f:24:1b:4e:fb:
d8:bd:5f:9d:1d:92:cd:db:11:d9:fc:59:40:4a:50:27:cf:9e:
a4:a5:54:18:aa:52:42:82:32:e4:e7:85:34:ab:4a:fd:6f:f5:
ff:54:48:ee:f2:a3:92:0e:52:9c:fb:72:7e:da:b6:45:37:3e:
29:f8:19:05:3a:93:60:30:17:59:ca:9f:db:14:59:77:f1:66:
ec:4c:eb:19:c5:bd:e7:fc:ae:7a:aa:1d:88:fa:86:0d:bc:05:
f5:29:b4:72:e0:e9:67:27:d4:11:44:b4:7f:60:41:85:a4:84:
af:e9:c1:a4:97:19:60:36:95:7b:83:e7:f1:1e:77:32:55:f8:
26:fc:f2:43:96:58:f3:4b:e3:3f:5b:03:ce:9e:bf:72:89:1a:
4d:ee:14:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:38 2025 by rpki-client