Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: 77sNNUKI9h2bo6pA7UjivVh2ozztAr6kna4khUU4qUA=
Subject key identifier: 08:83:8E:43:3B:FF:DB:48:56:FF:37:D5:F3:F9:C8:99:B6:B9:09:35
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 01976DE27D3DB5BF1C2892312E50035F99A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 132D
Signing time: Sat 14 Jun 2025 10:00:48 +0000
Manifest this update: Sat 14 Jun 2025 10:00:48 +0000
Manifest next update: Sun 15 Jun 2025 10:00:48 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: 25xRc3/Rf7IMbBs8Y5RndbdIdArMZ+reFzRyu3GZD5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:7d:3d:b5:bf:1c:28:92:31:2e:50:03:5f:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Jun 14 10:00:48 2025 GMT
Not After : Jun 15 10:00:48 2025 GMT
Subject: CN=08838e433bffdb4856ff37d5f3f9c899b6b90935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:e0:a9:ce:8a:26:0b:a9:45:60:9b:9f:d6:
dc:48:fd:c4:bd:58:71:9d:86:5f:64:ee:bf:6b:bf:
9c:ed:54:55:06:0c:07:57:19:2b:1f:3d:a2:5a:60:
e3:56:75:1e:be:83:c1:34:91:79:e2:08:f6:c7:b4:
39:89:88:07:75:4a:df:4c:a2:36:64:7f:bc:7e:23:
43:49:8a:a4:6e:94:af:5a:b7:3b:19:35:bf:a3:14:
29:42:4b:11:8d:fb:e7:de:b7:08:e4:ab:ce:63:4e:
d3:7d:5c:68:6a:c1:5e:f3:ba:ba:fb:61:b0:22:88:
3d:ad:8a:f9:fb:8c:bf:fe:b2:af:43:91:58:55:88:
cb:3b:58:ad:41:0c:b3:de:41:ec:fa:2d:c2:a3:cb:
22:5a:d2:86:a0:13:67:ca:49:28:dd:1c:97:81:12:
6b:75:6a:ef:dd:d4:5e:19:f9:72:19:0f:04:6c:29:
9e:8a:20:31:06:85:d7:42:66:87:f7:21:01:dc:62:
43:a4:d2:74:7e:68:99:53:f4:b3:d0:5a:b8:0b:97:
f2:a3:2f:43:5b:f8:b7:5c:f3:66:02:4b:43:12:e3:
88:a8:12:b9:f2:4f:84:d5:57:17:5a:ff:55:e5:c2:
72:33:7d:98:39:85:5a:c5:13:7a:ec:42:83:0e:15:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:8E:43:3B:FF:DB:48:56:FF:37:D5:F3:F9:C8:99:B6:B9:09:35
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b1:e4:6a:09:75:31:11:fe:b7:49:93:fb:05:ad:96:90:db:
94:94:b9:4b:c0:70:6a:02:a0:93:6f:27:72:0d:c8:d3:12:53:
c1:7d:cb:5d:15:aa:51:39:41:9b:1f:93:85:93:67:be:34:39:
db:a5:d0:fd:3f:2b:b3:fc:cf:46:80:78:32:11:07:3d:e6:32:
38:dd:44:8d:71:6b:7e:d0:69:11:9f:9b:35:18:26:6c:d5:e2:
6b:52:ea:19:ba:27:f1:d5:1f:95:1b:fb:21:5e:6f:3d:f2:12:
3e:a7:7b:ae:61:c0:4d:7c:ed:6d:36:cd:12:6d:10:23:da:e0:
41:ba:fd:37:48:38:4b:3d:ea:ea:60:0a:fb:26:4a:e7:0f:dd:
dc:95:dd:5f:57:96:cd:68:5d:61:78:4e:bf:06:ae:67:fb:d8:
41:b2:da:af:a2:47:41:b5:10:04:47:b9:6c:04:1f:bc:17:0e:
68:7d:28:58:9d:04:9c:58:0f:6e:15:1a:3c:21:e4:91:95:d5:
e7:42:46:ed:0e:41:fd:15:c4:04:8a:46:a9:b6:b6:ca:93:a1:
5b:69:fc:41:5b:4f:83:d8:0d:ff:2c:27:41:b8:5f:38:8b:2c:
a5:f1:01:21:43:14:13:c9:ae:85:09:4a:ed:d1:ba:09:ac:b4:
1b:85:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:16:55 2025 by rpki-client