Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: NdwHWacipyDlRqO8uVMxcVj+AzwcFiVzSI/EfsWLkZA=
Subject key identifier: 25:FD:28:62:A3:8B:F4:6A:99:24:F5:A3:0A:DD:0E:96:C3:0C:FE:99
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 01976BF3FFD3A2AE9A77975000C040EDCB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 1063
Signing time: Sat 14 Jun 2025 01:00:42 +0000
Manifest this update: Sat 14 Jun 2025 01:00:42 +0000
Manifest next update: Sun 15 Jun 2025 01:00:42 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: /ofjyQFXRuilQ0+Y/D5lRg7TULii6aA+RA75zj0ayCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ff:d3:a2:ae:9a:77:97:50:00:c0:40:ed:cb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Jun 14 01:00:42 2025 GMT
Not After : Jun 15 01:00:42 2025 GMT
Subject: CN=25fd2862a38bf46a9924f5a30add0e96c30cfe99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:06:67:4c:a8:71:91:10:cf:de:32:0d:c5:
9d:4d:8d:29:3c:ba:c2:34:ee:6b:69:f1:08:a4:e2:
d6:70:be:ca:ae:2e:c4:9b:f4:26:a4:43:fe:c3:1d:
46:a9:ed:2c:e9:1f:69:33:d5:c9:2f:d6:21:0b:1e:
d3:3a:0a:f8:e8:9f:f2:d4:86:3a:19:53:2c:c8:7c:
cf:be:d0:a1:43:31:05:86:90:e0:7c:3f:26:2c:57:
3d:42:de:6a:20:55:bc:51:db:8a:ef:75:bf:49:ae:
d4:73:14:eb:c3:6c:7f:32:d0:8d:26:8d:78:fd:c7:
c1:b8:b7:cf:52:08:93:b0:a3:eb:a7:7f:c5:c6:ed:
37:db:76:0b:7b:62:bb:d1:27:be:a2:f1:cf:2e:7d:
8b:d4:62:7f:44:0d:c2:2b:f7:76:72:5e:65:28:e7:
9b:63:ce:0a:de:6f:b2:0e:55:3a:27:93:1a:84:32:
61:e7:fc:10:e0:2a:6b:3b:61:74:85:51:04:fd:a5:
91:ba:4d:5f:e5:d5:52:98:b4:ec:f4:87:86:57:3d:
00:e1:87:d5:c7:78:19:66:07:26:fd:0b:75:8d:d9:
a4:5c:25:2e:c6:24:bd:4b:a2:96:65:dd:f2:b5:b4:
86:24:05:e8:3a:e0:8c:a4:cd:be:5f:4f:d0:ac:d5:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:28:62:A3:8B:F4:6A:99:24:F5:A3:0A:DD:0E:96:C3:0C:FE:99
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d7:e7:6f:c2:1d:9c:0b:3c:0a:5c:5a:97:47:e8:46:13:19:
02:1f:f5:e7:e2:8f:f1:1e:42:a7:26:62:11:b2:be:7a:0a:a2:
04:90:96:7b:b1:04:ce:94:1c:15:58:a0:6a:0b:14:4c:84:64:
fa:6c:ad:c4:c9:0b:42:08:14:2b:d6:07:72:80:ff:f3:ef:52:
d8:2b:fa:57:f2:eb:db:b3:32:1c:79:6a:10:a7:d2:d8:11:3b:
e7:29:5d:22:34:15:9b:e6:5d:67:08:ee:1e:17:27:74:b6:c7:
09:03:c0:66:6e:d7:a1:4e:e3:69:5d:94:67:cf:47:1a:1d:48:
db:db:69:62:90:44:19:1b:f4:b7:a2:70:0c:4f:b7:a6:e8:47:
d5:f1:1b:5d:c9:a8:28:2e:7c:76:c0:a6:18:02:34:c7:30:5d:
66:4b:b6:96:a9:0f:76:ec:66:96:9c:93:7b:e3:ca:69:15:79:
78:79:94:4b:5f:75:84:c5:40:c6:99:6f:07:6e:eb:b4:c4:c0:
38:dc:65:3c:5f:96:71:6e:e1:ce:2d:14:68:5a:29:3a:da:07:
80:36:a8:b8:0c:03:44:79:0b:59:6f:1a:5f:8a:dc:cf:b7:94:
bb:be:e0:8d:95:37:92:5f:21:7a:d0:c1:d8:81:bc:cd:0b:c5:
a5:76:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:40:56 2025 by rpki-client