Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: 6G4WqxTRc7IMKf9ESJdPcfVZ9dLEAwdkSAQZwiWInwY=
Subject key identifier: 52:92:EA:EE:74:35:57:A6:6E:4E:BC:34:BF:CA:6C:68:24:86:A5:0D
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 019873E2A0822B0686D322FB58593376F49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0C6C
Signing time: Mon 04 Aug 2025 07:01:28 +0000
Manifest this update: Mon 04 Aug 2025 07:01:28 +0000
Manifest next update: Tue 05 Aug 2025 07:01:28 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: hNxRsppVhJi7y5xiz+K+l2qyzzJQSVfvga2KmobhSj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a0:82:2b:06:86:d3:22:fb:58:59:33:76:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Aug 4 07:01:28 2025 GMT
Not After : Aug 5 07:01:28 2025 GMT
Subject: CN=5292eaee743557a66e4ebc34bfca6c682486a50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:1d:1d:07:fb:9c:08:ca:7f:62:26:11:e7:
0f:eb:74:77:41:97:6d:0f:e0:bf:06:d1:25:1d:e3:
8e:d5:31:f1:8b:82:da:ed:a6:ef:c1:17:86:bf:83:
fe:7f:f4:a3:4a:f1:28:be:da:3b:7b:32:33:2d:55:
c4:4a:37:93:1b:45:77:f6:86:73:a3:44:8c:2e:b8:
f1:d2:b6:c8:08:f0:cd:ef:74:66:10:ca:ee:38:ed:
e5:64:ad:e6:89:e5:e6:47:5b:58:b6:1c:af:15:e4:
b9:0c:ae:1b:34:c2:a1:41:d7:9e:52:99:48:9d:3d:
97:9b:8b:b5:3e:5c:71:0f:c0:bd:a8:64:81:43:d9:
69:bd:61:ab:19:7a:d8:ba:02:78:6a:0d:3c:9d:47:
c7:ad:05:7f:d6:95:e5:07:31:c6:31:3e:24:44:32:
92:19:a9:91:fd:52:35:62:d9:5e:dc:26:13:88:bc:
5c:e3:81:9d:65:9e:53:f6:8b:04:56:a9:25:14:9b:
e0:27:46:5b:2f:d5:74:70:c4:fb:8a:ce:6a:4a:00:
0d:8e:61:9f:d3:54:ef:51:67:0e:f8:9c:7a:5f:4b:
ba:9f:4e:b8:03:a8:9c:58:a5:46:16:2b:76:5e:c7:
3a:09:4c:66:04:49:cf:e1:da:6f:d7:61:f3:29:b7:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:EA:EE:74:35:57:A6:6E:4E:BC:34:BF:CA:6C:68:24:86:A5:0D
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:57:90:eb:c1:4d:6a:24:8f:a2:45:b2:ff:28:ac:4a:df:91:
b7:52:03:c1:31:c0:b6:52:fe:17:28:46:c0:36:01:eb:6e:a8:
a0:a5:98:78:dd:9f:2c:8e:e2:2a:28:c0:f6:69:3e:d0:e9:10:
57:7f:a4:bf:8a:57:ad:e0:3e:db:bd:c6:ad:90:84:47:ed:51:
ef:1b:2b:ff:2c:4e:0b:7c:44:62:8f:4e:f6:f1:20:5e:7c:97:
b6:d3:33:75:0f:63:11:d9:24:f6:af:ec:09:3d:d8:69:c4:94:
23:60:60:39:17:c8:89:9a:3b:2e:05:3b:41:6c:1f:de:9b:14:
05:b7:be:a1:66:c5:e9:4e:85:12:61:30:a5:32:16:24:1a:11:
4a:0e:0f:64:2e:bc:c5:6e:5d:ae:30:59:0a:15:85:d2:c5:36:
b8:3f:b3:12:8c:d8:3d:28:80:7e:ee:37:f7:53:fd:1c:b0:f7:
26:78:58:75:f8:eb:5a:ad:40:f7:95:ac:e9:ed:5b:6f:81:1a:
c5:80:26:1f:10:16:92:ea:80:13:24:39:7e:8f:8f:15:f8:1e:
9c:b5:9e:e8:df:8b:76:10:32:3b:71:40:60:7d:9b:b9:04:82:
34:be:11:7c:4e:49:80:8f:9b:49:c5:2d:28:92:4b:69:e3:d0:
1e:ea:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:51 2025 by rpki-client