Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: bHrR8gA0lTbYOKGUEzD7DiMtn+lAMVQhq9nk8VWyIDk=
Subject key identifier: 2E:95:5F:C6:A2:7B:1C:AB:C4:FD:09:94:D7:80:D4:6F:FC:26:48:EF
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 01976BBD56A2E18DA9614897874CA4F5B715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 00:00:59 +0000
Manifest this update: Sat 14 Jun 2025 00:00:59 +0000
Manifest next update: Sun 15 Jun 2025 00:00:59 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: 7lplnif2oDou47LS2U/sjDNF3v/3QyY1IiwjFan7XzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:56:a2:e1:8d:a9:61:48:97:87:4c:a4:f5:b7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Jun 14 00:00:59 2025 GMT
Not After : Jun 15 00:00:59 2025 GMT
Subject: CN=2e955fc6a27b1cabc4fd0994d780d46ffc2648ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:d5:d7:fe:82:18:49:fa:f8:e4:62:5f:3f:
13:a8:58:57:71:0d:1e:69:88:38:69:ad:9b:c8:ac:
d8:fd:10:d0:51:90:fe:60:47:b6:09:99:7f:09:f8:
35:4a:ef:46:25:93:28:42:4f:82:68:62:0f:6c:f3:
c6:35:90:d3:cf:65:eb:58:73:3f:a2:fc:50:ba:0c:
c9:6f:18:90:55:ec:9d:8a:b7:94:42:1e:df:13:73:
13:bd:4c:76:f6:b1:4c:4d:07:8c:ea:4a:e5:fe:dd:
19:1e:67:75:a1:9e:9d:47:d0:04:a5:41:80:b7:4e:
3b:cf:2e:dd:30:20:f4:c0:77:d7:53:9f:17:9a:e9:
fc:e9:26:72:ac:ab:c1:65:00:06:78:92:8e:e6:ed:
16:f1:36:e6:df:16:06:c3:a6:f1:d8:82:54:a1:35:
f5:cc:f5:8f:24:b3:f3:4e:98:7c:f9:82:83:b1:87:
cb:2b:d1:bf:22:c8:a3:ea:0b:31:d3:e3:53:65:95:
82:ef:1b:f9:c3:2c:6a:6d:f3:54:88:b4:1f:6b:be:
f3:b9:d7:2e:e3:24:dc:28:86:98:b8:54:2e:ac:54:
dd:7b:16:65:a9:85:b4:b7:8a:68:4a:ea:e6:7c:08:
3d:4a:eb:4b:ea:ab:f4:79:30:a8:a0:54:9a:18:6b:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:5F:C6:A2:7B:1C:AB:C4:FD:09:94:D7:80:D4:6F:FC:26:48:EF
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:28:27:f3:3e:6a:18:73:60:99:32:fb:07:bd:6d:b5:55:cc:
9f:80:ce:80:26:e7:f3:ba:c8:e8:2f:11:06:2f:71:9e:09:82:
21:59:28:49:a0:24:32:84:e5:8c:b2:d5:a8:aa:53:5c:a0:9c:
d2:c8:59:19:c2:61:45:a4:b1:09:26:8e:d8:8e:3b:43:b7:ac:
0a:2b:2b:14:17:48:92:9b:8f:12:55:1a:6f:8d:c2:9e:a1:19:
72:5d:43:81:b1:94:6f:9a:bf:ec:7e:65:07:5e:5a:59:59:aa:
db:2c:8e:64:85:73:45:98:4f:f0:cc:9c:9b:3f:27:d7:ae:5b:
57:69:42:68:d0:ee:7d:70:34:3f:9b:ee:02:aa:b3:50:4d:f4:
b8:10:99:c3:00:25:3b:05:e7:75:dd:8e:2d:fb:e8:53:08:1a:
8b:f1:85:3e:04:83:1c:32:91:80:b2:a3:a9:01:4d:7f:8d:70:
47:01:17:11:f6:66:3e:3f:4b:5c:dd:be:10:10:35:ff:78:c1:
5b:10:e9:5c:20:21:7b:55:e5:a2:f2:ce:e0:c2:82:17:05:58:
e3:7b:f2:20:26:8d:43:03:fe:24:49:8d:dd:8b:fe:00:6b:c2:
e4:dd:37:ba:17:0a:84:0d:63:2a:d1:c6:4f:db:d9:df:49:aa:
da:d5:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:22 2025 by rpki-client