Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: tu8qSXA1h/BmB0mUEpGcEmcf8CeokrhIk7imCnGDOcU=
Subject key identifier: E7:5E:33:E0:4A:DC:91:AF:D3:30:76:B1:1D:4D:52:73:3A:D0:67:9B
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 019779787FECC9FAD89B388CF62C420ED281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0BE2
Signing time: Mon 16 Jun 2025 16:00:29 +0000
Manifest this update: Mon 16 Jun 2025 16:00:29 +0000
Manifest next update: Tue 17 Jun 2025 16:00:29 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: fZApQg8P1JBtH/mhDRoDNKwoFqKXdZM5xHxCN058rhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:7f:ec:c9:fa:d8:9b:38:8c:f6:2c:42:0e:d2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Jun 16 16:00:29 2025 GMT
Not After : Jun 17 16:00:29 2025 GMT
Subject: CN=e75e33e04adc91afd33076b11d4d52733ad0679b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:db:8b:6b:d7:1a:3f:df:79:43:68:b4:57:
83:ae:1c:be:22:51:9d:89:ce:3c:80:4d:9e:e6:f9:
03:98:a1:bd:dd:e1:2e:bd:bd:c9:b9:7f:80:da:1c:
67:cd:82:93:b7:13:26:b7:4c:ab:f8:78:48:19:c1:
d9:e0:43:19:f0:d2:f9:2e:77:87:27:62:0d:c9:e1:
28:5a:0b:ca:4b:27:08:c2:f0:af:bf:34:03:36:01:
7a:77:7b:3c:9e:fa:fe:c0:15:00:f0:0c:1c:67:e9:
13:c7:29:66:b2:11:91:65:4e:e0:bd:99:18:4c:22:
38:06:5f:43:fa:d7:0e:7e:ac:2b:4f:fe:3b:8d:28:
65:29:2f:6c:78:a6:0b:27:4f:2d:c1:17:57:9c:37:
6e:8d:0e:1e:4a:35:fe:2f:7a:9d:07:ed:97:51:37:
e5:fc:cd:51:c4:d2:9e:6d:db:8c:ac:f0:1d:0b:01:
5e:0f:22:64:fc:90:2d:02:9a:ef:d5:5b:11:d4:b0:
88:73:c7:0e:a0:6e:7b:f0:2f:e2:1c:5e:c6:d3:66:
50:99:37:55:00:f7:20:64:7a:f8:d7:3f:48:25:e9:
06:0a:ef:c4:6a:75:3a:67:91:4a:09:35:88:64:cd:
8d:b7:6c:3a:7d:d5:b3:aa:ba:9d:2b:da:a4:d2:1b:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5E:33:E0:4A:DC:91:AF:D3:30:76:B1:1D:4D:52:73:3A:D0:67:9B
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:2c:8e:b7:d7:c7:34:1c:1e:c6:10:ca:9c:5b:6d:37:67:
5d:98:6d:83:9e:ef:1f:eb:e2:56:6b:87:84:5b:70:42:53:e8:
8e:0c:37:92:72:2d:c9:47:11:bb:bb:d7:43:d1:f5:1b:23:19:
d4:9a:55:fe:8d:71:da:5a:6c:bb:fa:53:eb:c5:1e:00:55:ca:
86:7c:7e:fb:1d:fc:4e:48:ce:89:ed:b1:b5:04:31:9b:ea:97:
05:39:1c:aa:83:39:85:eb:bc:c2:79:8c:fc:b7:da:ab:da:86:
eb:c6:13:b8:49:87:e0:0e:9d:6c:b8:f6:74:94:ac:de:ca:66:
02:fa:38:b4:36:d1:63:66:74:d4:88:fa:a9:97:7d:d1:b4:f0:
37:7e:9d:9b:c8:f2:3a:11:12:19:96:45:64:dd:5e:68:f3:c0:
aa:c7:49:43:9a:f5:c1:1e:a7:68:11:b1:00:92:df:c4:c2:7f:
dd:89:67:d0:34:ea:e6:d2:48:a8:ea:0d:6b:f8:08:ca:a2:ab:
c1:ad:29:08:0a:3c:3d:71:71:b8:f8:1d:9d:1b:7f:44:35:db:
3c:f5:37:48:c4:cb:73:3b:d8:c5:01:ad:4a:b5:2a:86:ae:7b:
d1:48:56:1b:1c:53:fb:c0:a3:e6:4f:ef:18:80:37:e9:de:74:
b7:1a:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:48:57 2025 by rpki-client