Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
File: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft (raw, json)
Hash identifier: Wms0G3NGYA76k+O0+cVqDYeWrzxUb4oWhN9GsSUj5Vw=
Subject key identifier: CC:78:4C:9B:56:8D:B7:62:5D:DA:3A:77:79:6A:66:34:AE:E2:3C:3B
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 0197789D14016B897AF08DE139C202C1AFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
Manifest number: 0E5A
Signing time: Mon 16 Jun 2025 12:00:49 +0000
Manifest this update: Mon 16 Jun 2025 12:00:49 +0000
Manifest next update: Tue 17 Jun 2025 12:00:49 +0000
Files and hashes: 1: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl (hash: gMEexjSykAnmIexSCU8jbD0LhAbcIWkuaqWU54ZYz4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9d:14:01:6b:89:7a:f0:8d:e1:39:c2:02:c1:af:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Jun 16 12:00:49 2025 GMT
Not After : Jun 17 12:00:49 2025 GMT
Subject: CN=cc784c9b568db7625dda3a77796a6634aee23c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:b3:57:81:39:8b:98:7a:08:02:a0:37:8e:
c5:ff:19:64:db:eb:b6:bb:c5:73:d6:a4:e9:eb:84:
72:82:1f:a4:11:f6:1e:b5:a0:6d:bf:e5:b5:0c:7b:
22:fd:f1:aa:c8:9b:ab:b1:d0:08:63:20:63:1a:31:
6c:af:6b:5a:f5:5a:bf:59:23:d0:66:ba:1f:0b:45:
ab:b7:b7:48:60:0d:ee:aa:bf:ce:4d:02:7e:83:e0:
30:c4:9c:7b:40:fb:45:ae:98:45:e4:6c:c5:b4:79:
4f:78:2b:68:f5:2d:12:41:75:7e:18:c3:aa:e5:e1:
83:bf:c0:d3:82:4a:bd:f7:08:d3:0a:2b:5c:cf:27:
45:4f:e3:19:d4:ce:c3:e3:52:d1:82:1f:f7:75:48:
4c:79:22:17:20:97:c2:0a:bf:ac:e8:a9:eb:c1:69:
1a:7d:8d:3f:93:c0:27:93:77:ff:c7:66:90:e8:80:
00:02:63:00:36:14:13:42:9a:3f:78:1d:cc:c4:0c:
e5:7c:b9:d3:c7:ea:54:8f:f3:51:66:8e:51:f2:c0:
67:b2:7a:49:82:a1:5b:d2:ba:cf:74:f7:93:b4:09:
78:83:92:02:48:d3:14:46:cc:5f:4e:ed:99:6d:6c:
6f:1e:13:ff:03:9a:72:ab:a5:b6:99:76:db:18:ac:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:4C:9B:56:8D:B7:62:5D:DA:3A:77:79:6A:66:34:AE:E2:3C:3B
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:95:fe:88:7d:3f:77:8a:66:e6:68:d1:31:e3:5e:c4:24:ca:
b4:cc:14:2b:a1:c9:6d:be:63:d1:d3:3f:0e:94:f9:49:38:cc:
b8:b6:55:64:93:3e:49:34:52:e3:11:ee:b1:d9:79:b3:7d:34:
6a:0c:ec:d8:7f:4b:15:71:15:61:a4:a6:51:e2:72:75:6a:d2:
ff:c5:4a:11:2e:5b:16:f8:73:e3:97:23:21:5a:6d:14:1d:19:
65:b3:35:d3:9d:41:5e:a8:fc:53:d3:b5:58:28:f9:b3:b2:5e:
5c:b0:48:d0:c8:2b:42:40:5c:53:89:e3:ba:75:c0:f0:10:6a:
e5:20:2c:a3:38:f7:f1:d9:02:bf:0b:a7:52:33:70:cc:f2:c3:
34:d7:14:b4:49:63:db:08:38:9b:c5:1e:8d:4e:58:a5:b4:ab:
51:e7:c4:75:91:06:6f:e4:d8:4f:a3:a1:5a:15:e2:9a:ab:7d:
c3:8a:9d:66:54:9f:2c:44:cc:76:41:ea:ff:24:3d:8e:c7:c1:
89:19:1a:bc:c2:eb:dc:73:38:d8:f3:01:64:c6:fe:9e:d7:3c:
a2:b1:9b:41:ae:d1:8f:92:d1:97:67:4b:7f:32:0d:f5:c5:ae:
5c:50:42:90:07:2e:53:cd:f7:f2:2b:d1:61:52:dd:96:1e:be:
01:7f:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:58:56 2025 by rpki-client