Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: zNldpFPA4AVtAw+ByM+sNmu9R8DyMZqxkIFkvRkpmkE=
Subject key identifier: 36:B4:D4:7B:74:FD:AF:5E:54:B1:C0:99:76:A2:B9:B9:B9:E9:E1:95
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019770AC513BD2CB01438AF7DF40EBDC75E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 08FA
Signing time: Sat 14 Jun 2025 23:00:30 +0000
Manifest this update: Sat 14 Jun 2025 23:00:30 +0000
Manifest next update: Sun 15 Jun 2025 23:00:30 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: Fz9W+lAnnafD9SomOPqEPfPWQZBXQdUXJcEg/mQa29A=)
2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:51:3b:d2:cb:01:43:8a:f7:df:40:eb:dc:75:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Jun 14 23:00:30 2025 GMT
Not After : Jun 15 23:00:30 2025 GMT
Subject: CN=36b4d47b74fdaf5e54b1c09976a2b9b9b9e9e195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:1d:a5:36:e2:2b:3b:d0:32:d4:a8:3f:52:
14:2b:4f:09:91:1d:b3:7f:9d:c9:8b:80:58:b5:0d:
3f:ca:d6:84:33:fc:06:83:8e:23:9f:d6:5f:10:8a:
31:ea:76:b9:ab:5a:a1:ce:d5:1d:16:de:5e:ac:3a:
e8:f0:cd:88:ad:a8:50:76:8e:e6:34:84:76:da:60:
44:70:1d:0e:ab:80:e3:1e:34:cc:f6:64:68:46:95:
7c:4a:ed:0b:9e:c9:17:eb:13:d3:82:ca:26:b5:fb:
aa:06:da:09:ad:a5:a9:dd:fd:bc:02:b4:08:f1:f7:
56:19:59:5c:16:8a:41:5d:32:b9:17:a3:4d:cf:38:
68:3e:89:22:a3:80:bf:af:85:2a:66:b1:40:05:93:
8a:d6:84:f1:f0:f6:1e:a2:a7:8a:f9:45:86:fc:f5:
a6:a9:f1:a2:c9:ab:b6:f2:ca:53:44:fc:38:56:e6:
69:2b:1e:c7:f7:81:2a:66:17:97:c9:c0:02:ee:87:
04:82:36:f3:0f:56:5c:a2:d0:97:af:6b:96:2a:71:
b7:55:78:5e:68:49:a0:67:c7:c6:ba:38:11:e9:68:
98:9e:08:b2:af:94:4f:12:25:90:46:97:5b:93:c5:
1b:31:57:3f:bd:a5:3e:c3:b6:0f:82:54:47:d8:00:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B4:D4:7B:74:FD:AF:5E:54:B1:C0:99:76:A2:B9:B9:B9:E9:E1:95
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:d4:e7:9a:2d:f1:22:49:3b:9c:3b:c0:91:6f:31:f3:4c:
ee:f3:ce:5d:f5:b3:e5:fa:ec:e8:8a:7c:d5:4a:94:ca:20:5f:
f7:0b:3c:dd:53:18:ad:96:29:ee:da:e5:dc:f8:f2:13:f4:5b:
c8:e5:6d:48:18:c2:c4:ad:27:7d:62:3f:fc:20:e8:fc:77:d6:
c4:6c:62:c6:98:33:57:06:2d:0e:6d:66:7c:5a:b6:e1:07:69:
82:1e:07:8b:05:f8:28:c9:b2:4b:d8:96:90:af:8c:7f:55:4c:
af:38:ce:5b:97:5d:b1:65:9e:dd:05:dd:8d:f3:c7:04:f7:3f:
bf:b7:1b:5c:b8:86:e1:2c:34:b5:72:dc:e1:f3:7b:cc:44:3c:
e0:b4:fe:d9:40:ca:fa:6a:bf:73:0b:4f:51:f0:24:d5:97:07:
ba:67:5f:2a:68:d7:31:bc:a2:73:10:4a:1b:19:82:6d:44:a5:
aa:7c:d2:ba:a4:c4:50:46:e5:be:71:01:c7:f1:7b:c4:45:0a:
7c:e7:b3:91:21:d3:28:f8:41:0b:a9:12:82:25:db:80:c3:c4:
2f:ab:51:01:b7:f2:bd:4e:eb:7c:d4:e2:6a:d4:c7:d0:a5:66:
5a:a2:09:79:3b:27:75:74:19:54:fc:12:f6:78:48:61:ff:5f:
bd:d9:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:05 2025 by rpki-client