Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: 9BxLlLXttNdNs66RqmrISCtJwwaIR8PCtt/2DVtiuyQ=
Subject key identifier: 45:9E:60:6E:DE:C0:FA:05:18:49:3C:BB:62:BB:A4:60:C2:BA:75:1F
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 01977075ADE0DA642FA63D5932509B2A8E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 09DE
Signing time: Sat 14 Jun 2025 22:00:49 +0000
Manifest this update: Sat 14 Jun 2025 22:00:49 +0000
Manifest next update: Sun 15 Jun 2025 22:00:49 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: AnWW/QnVdkUh4hKtVdO/+9mhrO8T/GwB/ak+NDtliGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:ad:e0:da:64:2f:a6:3d:59:32:50:9b:2a:8e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Jun 14 22:00:49 2025 GMT
Not After : Jun 15 22:00:49 2025 GMT
Subject: CN=459e606edec0fa0518493cbb62bba460c2ba751f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:2b:27:41:23:04:de:91:b1:e0:b4:79:d0:
fe:aa:3c:65:31:51:d3:64:34:00:39:c2:0d:7d:55:
18:ab:eb:c4:d6:93:3d:03:11:29:56:d7:d0:a0:0a:
ca:49:2d:03:d9:89:5f:c1:87:ec:12:5e:cf:1b:4b:
5f:1a:c0:1c:ac:61:7c:6b:92:5e:16:31:6a:0f:27:
c1:ac:7b:93:e0:ef:de:24:9b:ed:11:d6:fe:00:f6:
fd:79:c5:62:9c:5e:90:a6:6d:45:08:58:08:23:0f:
f6:6f:27:83:31:ce:c5:b1:62:1d:2a:c1:b8:9f:ea:
35:8c:c8:83:43:b6:79:83:39:83:8e:74:23:f0:71:
bb:15:58:41:9e:17:77:54:77:74:ef:eb:7b:8c:87:
64:2c:5c:27:ea:df:ca:cf:cf:35:52:c4:e0:bb:c7:
0f:ec:a1:d1:9c:d9:4c:0b:43:0e:2c:d9:85:ed:d7:
11:96:42:4f:3c:1f:43:2a:b2:33:e7:c3:71:e0:09:
99:3b:ce:c7:d0:c2:3e:e1:26:86:d4:11:ed:da:37:
e8:39:1c:c8:69:dd:e1:8a:02:f2:06:27:3d:df:63:
dd:17:7f:6d:3d:f1:fc:6d:b6:2c:07:5a:0a:22:6b:
b0:77:2c:23:6d:5f:fc:10:3e:9c:48:d6:1d:9a:c8:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:60:6E:DE:C0:FA:05:18:49:3C:BB:62:BB:A4:60:C2:BA:75:1F
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1e:32:1e:9a:b2:3c:35:e8:5a:94:46:4b:7f:8b:64:ee:bc:
fd:f8:11:7e:10:52:dc:03:4e:2a:24:6a:f3:36:65:4b:b1:30:
44:82:e3:34:35:22:6f:4f:f8:40:9d:9d:e0:c6:aa:4c:2f:2f:
d0:a0:5d:fe:d5:af:46:fc:71:16:b5:7f:6a:25:a7:9f:e0:70:
35:67:c9:e8:52:62:0d:0a:81:8c:74:65:50:72:47:eb:9b:a8:
0e:c0:81:85:9f:3a:e5:c7:cf:7f:75:18:06:46:bc:71:88:7f:
6a:68:03:6c:f0:03:25:f1:e2:7c:e5:e5:ef:80:4b:c2:7d:53:
7a:de:84:92:e8:8e:b1:ac:85:4b:44:47:8c:74:c0:88:50:db:
6a:25:84:8c:9e:b8:39:55:6e:9a:a6:e8:39:88:5c:ff:50:71:
dc:2c:c1:9a:2e:d8:dd:0b:61:8b:5c:f7:39:2f:7c:5a:6b:5b:
46:57:66:55:ff:e2:98:ab:6c:b8:f6:a4:7a:77:fd:2a:79:ec:
df:9c:27:da:4a:b9:03:86:e5:da:2d:44:dd:9d:93:56:b0:56:
32:dc:13:96:63:6c:af:35:86:a9:40:70:87:66:42:91:8c:11:
fe:5f:42:30:1e:d8:6e:af:cc:75:cb:0f:a4:75:27:12:5c:1b:
b9:e9:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:54 2025 by rpki-client