Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: Vjat/R4FuH2Aj2k1xcMQ651X0oVJt72513zemGuCatI=
Subject key identifier: E4:C9:BA:F7:BC:63:98:DF:4E:F1:4A:E5:44:3F:75:ED:2B:6D:91:2B
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 0197684E4EAC3CF05E4D4A6C0A8084E894CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0CCF
Signing time: Fri 13 Jun 2025 08:00:51 +0000
Manifest this update: Fri 13 Jun 2025 08:00:51 +0000
Manifest next update: Sat 14 Jun 2025 08:00:51 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: t4PC4tjOluN5GYcajkMsD6J2M+Cqx49zeHWTeXxVY6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:4e:ac:3c:f0:5e:4d:4a:6c:0a:80:84:e8:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Jun 13 08:00:51 2025 GMT
Not After : Jun 14 08:00:51 2025 GMT
Subject: CN=e4c9baf7bc6398df4ef14ae5443f75ed2b6d912b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:4c:d1:33:39:4d:2b:cf:74:19:94:a4:64:
c8:e8:4c:ff:24:10:bb:74:a7:c4:4f:8d:d7:de:79:
5b:f1:ee:1a:ca:c3:17:50:8d:ff:39:f4:d4:f6:96:
98:23:34:78:66:9f:26:58:3c:cd:99:15:21:d0:ce:
a3:bf:75:a1:27:f6:e8:98:c4:ab:6b:2e:13:9e:07:
a2:95:41:7f:98:55:e3:6b:46:70:eb:38:13:07:87:
a9:14:a9:54:dd:0d:4b:3b:c5:a7:aa:32:ac:d6:9d:
07:30:0d:5a:dd:5a:97:5c:b3:13:c0:b3:0b:51:9e:
e2:0f:16:32:5f:9b:b9:fc:35:aa:e9:bb:dc:f2:46:
e5:62:ff:44:74:dc:7f:5a:b6:de:61:00:8c:3b:21:
a5:c7:36:39:33:c8:16:25:d8:25:53:f1:4e:25:3d:
a6:f9:83:94:30:e3:0f:e5:1b:fb:79:19:5a:df:f8:
5f:ba:4b:b5:92:df:6f:01:72:64:29:f5:0c:50:cf:
7f:53:b0:12:e8:71:8f:43:8b:32:6d:03:88:b7:d3:
90:fe:49:e1:f5:eb:4c:d9:f0:88:2b:0a:a6:e9:d9:
c3:35:8a:a0:a3:41:e5:fb:c1:26:b2:4c:11:da:65:
d5:72:77:cd:7c:d7:51:af:6a:f3:15:10:c7:c5:b0:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C9:BA:F7:BC:63:98:DF:4E:F1:4A:E5:44:3F:75:ED:2B:6D:91:2B
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:87:30:25:c9:3c:35:00:c4:7b:4e:4a:1e:06:1f:8b:67:48:
a1:8f:61:3c:dd:6b:85:0f:b4:37:5b:31:de:d1:67:38:53:de:
c9:5e:5b:36:85:2b:fb:f6:fb:8a:e5:96:b7:22:eb:bd:8f:de:
d2:ed:41:04:c5:c2:41:59:97:11:9d:7a:fb:66:54:92:32:76:
06:7e:fa:91:ae:09:5c:d4:e0:f4:41:61:d7:f3:15:96:fa:2f:
a7:fc:a8:1b:00:c8:24:30:99:c4:e3:22:3c:54:0b:ea:79:1d:
f9:a8:79:af:74:15:93:2a:54:57:0a:b0:98:18:7a:4b:e8:41:
51:ac:bc:f5:47:ec:b4:78:da:71:c1:60:f6:e3:72:30:e6:46:
a0:8d:37:84:c9:60:dc:24:fc:29:41:3d:a2:85:6b:92:c1:ba:
a9:aa:1f:57:ec:90:f5:10:15:8f:9d:c7:4a:c1:21:4d:11:6e:
f2:ea:f2:cf:cd:0d:04:42:48:9b:1b:40:7a:35:46:13:23:fc:
9f:a8:fa:87:5c:44:8c:fb:61:85:82:23:85:77:fb:68:ae:9a:
4e:5f:b3:c1:9a:c7:a3:15:9e:1c:bd:4a:1b:12:16:dd:ca:67:
36:5d:3b:e4:77:ef:de:ca:81:bf:78:db:05:3d:ad:03:fe:11:
af:aa:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:41 2025 by rpki-client