Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
File: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft (raw, json)
Hash identifier: anvGTPrG8gHVkF3g6ws0v93YI6TG1UTuQptcAM4sdZ4=
Subject key identifier: 14:E9:52:55:CF:E3:B2:E6:F2:E1:51:CE:78:A3:E5:CE:2C:FF:61:17
Authority key identifier: CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
Certificate issuer: /CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Certificate serial: 019769CEF017A6196B1345C3EBE6E9886CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
Manifest number: 019C
Signing time: Fri 13 Jun 2025 15:00:58 +0000
Manifest this update: Fri 13 Jun 2025 15:00:58 +0000
Manifest next update: Sat 14 Jun 2025 15:00:58 +0000
Files and hashes: 1: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl (hash: ekki4nIFgOnEscRzNZMCAAGJNTp1iPbzZ/W5Pb9n2GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:f0:17:a6:19:6b:13:45:c3:eb:e6:e9:88:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Validity
Not Before: Jun 13 15:00:58 2025 GMT
Not After : Jun 14 15:00:58 2025 GMT
Subject: CN=14e95255cfe3b2e6f2e151ce78a3e5ce2cff6117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:46:5f:da:9d:a3:f9:f3:74:78:6e:18:5e:
04:ca:53:f2:f6:d1:66:48:20:47:2b:0f:28:ba:25:
11:d6:56:31:7c:e3:79:d3:d9:55:9d:0c:8a:e2:82:
8d:c0:aa:5a:7b:30:74:4f:2f:76:e3:21:5e:81:3b:
7e:e3:9f:60:f6:b1:5d:b0:fd:37:12:c9:ec:d6:93:
2f:a3:b6:b9:3f:c9:46:1c:e7:b9:c9:29:89:c5:0b:
e1:3b:c2:8f:a3:a4:dc:9f:56:52:cc:f3:03:39:c5:
c9:b1:a6:69:c6:70:f1:dc:03:17:54:08:fa:0b:79:
48:ec:74:b5:0b:ff:e7:78:1a:e6:b1:3e:a2:55:b3:
2f:f9:45:fa:0f:9e:fc:54:45:6f:42:b7:ee:68:ae:
e6:36:a4:9e:4a:78:f9:88:fa:53:cc:54:c9:c9:5f:
30:a8:09:fd:e3:17:b1:9f:f9:df:c1:de:d1:c5:bb:
4d:c9:82:77:cb:51:65:da:70:09:40:8d:24:fe:33:
41:a7:d0:a9:63:3d:7a:6d:e9:6a:20:d9:5a:49:62:
c8:00:4d:d3:2c:af:9f:9d:19:18:58:29:fe:3c:b9:
ed:06:72:85:2c:13:58:f0:f0:08:02:4c:8f:cc:e8:
54:8a:83:c3:02:60:ed:8c:2b:50:4f:a0:bc:04:85:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E9:52:55:CF:E3:B2:E6:F2:E1:51:CE:78:A3:E5:CE:2C:FF:61:17
X509v3 Authority Key Identifier:
keyid:CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2d:70:76:39:1b:b9:18:73:b7:d6:27:d8:7a:99:5e:c9:c3:
5d:5a:d8:a9:6a:0e:b8:10:03:95:c0:c7:ea:99:74:e3:a0:7f:
31:9b:4e:d5:aa:06:7c:54:14:ea:4e:fe:d1:3c:ab:82:92:e0:
36:af:8a:e6:14:46:9c:93:e6:0a:67:41:21:ef:07:17:90:db:
69:e6:a6:68:b8:54:c8:e7:be:6e:cd:d4:4c:46:e7:03:31:75:
63:d9:af:78:9c:91:40:04:29:e8:b3:d1:2d:71:ba:ee:d3:0b:
4b:03:82:38:2d:b9:8b:e3:66:9f:a3:67:a9:d3:d5:61:b8:24:
ee:7d:c9:38:8d:32:49:6c:17:21:f0:fc:36:e3:27:32:20:b7:
5b:48:d9:5d:84:c0:47:68:8d:8e:8b:5c:54:bf:57:6d:b2:43:
08:05:93:b2:fd:10:63:2d:e6:93:1c:29:24:b9:3f:f6:9a:ec:
83:ce:c5:8b:3d:a1:a6:95:67:02:49:01:db:77:79:cc:e3:49:
6a:6b:e9:64:84:6b:cc:d0:63:32:89:4c:26:57:4e:0f:c5:6b:
91:b3:49:8a:8f:7b:9a:e8:32:c1:55:cd:89:0c:48:cd:bb:ed:
30:89:6b:ef:a7:c0:07:fc:86:30:41:65:f1:6d:30:30:00:8e:
83:db:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:09 2025 by rpki-client