Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
File: zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft (raw, json)
Hash identifier: Fh35j7Whygcohqp12RWAh1JVHTUeisVTMFqdb0TYq5U=
Subject key identifier: D1:DD:38:43:37:26:B9:83:76:DF:6B:E4:FD:3D:7B:E8:79:A2:54:0C
Authority key identifier: CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
Certificate issuer: /CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Certificate serial: 0197722D3705114CE88D327C31CDA8F16C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
Manifest number: 43
Signing time: Sun 15 Jun 2025 06:00:55 +0000
Manifest this update: Sun 15 Jun 2025 06:00:55 +0000
Manifest next update: Mon 16 Jun 2025 06:00:55 +0000
Files and hashes: 1: zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl (hash: dYamoWeJgS1jechFuFAhr9IAt6KHsIHWVU3XFFHBmyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:37:05:11:4c:e8:8d:32:7c:31:cd:a8:f1:6c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Validity
Not Before: Jun 15 06:00:55 2025 GMT
Not After : Jun 16 06:00:55 2025 GMT
Subject: CN=d1dd38433726b98376df6be4fd3d7be879a2540c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:25:7c:0d:ae:26:69:ec:68:f4:d8:5a:b3:
14:ff:97:7f:23:8f:3e:8b:d1:f2:f1:eb:cf:4b:b2:
04:73:70:f0:b1:d3:20:2a:04:fa:70:e3:33:24:d2:
75:52:02:6b:2d:cd:3e:62:27:fb:02:c3:b7:3d:ee:
66:2f:fa:e8:69:27:b0:b5:a6:53:7c:4a:25:46:10:
ad:9c:32:2c:61:32:7d:d8:6e:d4:9f:fe:b8:7a:92:
00:7e:60:7b:ff:f5:0c:a7:3f:2e:d0:65:34:7f:ce:
e1:cd:77:e1:eb:49:b3:d2:cb:dc:7e:2b:c7:5f:4d:
ee:19:5b:06:7d:35:af:5f:7d:19:a0:f7:e2:66:e3:
14:bf:1e:6c:17:31:f2:a5:b2:19:90:39:90:6f:a1:
98:63:61:80:6e:3d:28:4c:f8:4c:bd:aa:98:ab:8d:
b4:29:87:ca:f1:e8:60:1a:27:5d:75:47:e7:ec:b6:
97:d5:58:88:f2:7d:09:84:44:78:b6:f0:0d:38:cd:
70:88:81:c1:26:60:e0:10:db:6a:b6:a3:01:f4:4f:
8a:a9:52:ee:c1:35:54:ef:10:70:56:0f:62:ba:4d:
2e:e4:9f:c7:58:4b:57:02:8e:6d:bc:8f:1c:7f:2b:
4b:d5:97:99:10:5a:0d:23:83:48:92:bb:d0:3b:24:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:38:43:37:26:B9:83:76:DF:6B:E4:FD:3D:7B:E8:79:A2:54:0C
X509v3 Authority Key Identifier:
keyid:CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:bc:2d:85:5e:f3:c8:23:49:b2:44:cc:28:1e:25:f9:b3:
f7:cb:99:01:43:ae:7b:63:59:0c:b5:bb:28:5d:e2:8a:41:1f:
ac:ed:6b:1b:81:a5:24:8f:12:1b:2c:cb:ba:06:1d:df:9d:a4:
7b:e7:f2:74:87:43:7d:31:0d:95:4c:a9:ef:a2:25:73:10:9b:
77:55:f4:92:86:84:ea:ee:9e:48:f0:5d:95:e9:11:ef:6e:ef:
65:69:d0:21:2c:ff:a0:15:d3:7f:b7:28:c0:1c:84:1a:f1:88:
99:df:68:f1:98:e3:25:8e:f9:20:1e:5a:27:65:02:c7:28:4f:
50:e6:2a:26:c2:f3:7d:a1:26:88:d8:0f:63:d4:06:38:1d:f6:
2e:e3:33:d6:76:47:67:84:a0:7f:b6:69:51:0e:38:f3:f5:7e:
9c:f3:e4:7d:a4:04:0b:4f:a6:df:fc:fd:14:51:97:be:94:e7:
d1:e8:bd:eb:94:7a:5a:4d:a4:23:d7:6c:a0:84:35:63:cf:9c:
a2:90:9b:47:a5:a5:74:80:97:b5:f5:43:e2:58:ad:3f:0b:f3:
e1:ae:a5:1b:07:31:2d:da:d5:3c:d5:cb:25:8e:cd:c4:2a:d4:
e6:fc:d9:bc:24:f3:af:52:19:5a:70:88:b8:51:36:f0:35:28:
5b:1a:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:47:32 2025 by rpki-client