Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft
File: ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft (raw, json)
Hash identifier: IvoOL9wBgDcNBDURGnxgqv7wqQCa0JWw2zsJFYIiiUs=
Subject key identifier: 41:C6:63:13:C2:F0:D8:AE:D3:D6:A4:1B:E0:CB:79:BE:F0:A4:24:65
Authority key identifier: 65:4D:69:21:60:DD:46:27:03:87:99:29:7D:47:75:14:80:D0:7F:16
Certificate issuer: /CN=654d692160dd4627038799297d47751480d07f16
Certificate serial: 01984A0A1FC396CC739F50A999AFD7622D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU1pIWDdRicDh5kpfUd1FIDQfxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft
Manifest number: 146E
Signing time: Sun 27 Jul 2025 04:00:34 +0000
Manifest this update: Sun 27 Jul 2025 04:00:34 +0000
Manifest next update: Mon 28 Jul 2025 04:00:34 +0000
Files and hashes: 1: ZU1pIWDdRicDh5kpfUd1FIDQfxY.crl (hash: 9O05e57F+hD2iTpcjnAkbqAkWK+smP35iPuaP0Cc4pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU1pIWDdRicDh5kpfUd1FIDQfxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:1f:c3:96:cc:73:9f:50:a9:99:af:d7:62:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d692160dd4627038799297d47751480d07f16
Validity
Not Before: Jul 27 04:00:34 2025 GMT
Not After : Jul 28 04:00:34 2025 GMT
Subject: CN=41c66313c2f0d8aed3d6a41be0cb79bef0a42465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:71:17:5e:c0:67:ef:6c:4f:9e:a3:25:12:
94:a9:83:e9:99:f7:a5:d0:46:5a:d6:70:9d:d7:f8:
29:93:a0:a0:e9:f1:e9:06:d2:bb:43:41:96:8d:a0:
f0:60:34:15:9d:8b:46:86:93:0c:e2:71:92:33:37:
8a:d2:dd:84:3b:06:55:9a:e8:c8:42:d6:d6:2d:94:
87:52:3d:be:c8:8f:76:7b:49:ed:85:58:0a:cb:7e:
2d:f2:98:d9:a7:4e:99:0c:85:51:1a:c9:79:90:fd:
6b:43:06:c7:b4:a3:21:f9:1d:1f:24:b1:bd:cb:30:
8e:f3:75:ae:f9:88:0e:b8:d4:18:fd:4a:7b:64:24:
52:3b:3c:73:e2:f3:03:bb:29:4d:b2:c8:51:d8:b5:
42:7f:15:4b:de:1b:6b:2b:dc:e9:95:8c:73:c2:1b:
f2:e6:00:c5:8e:2f:cf:e2:83:89:1f:46:e7:3c:a6:
68:4c:57:22:50:ab:a1:a7:64:6a:50:3d:b1:de:df:
b9:82:1f:fc:8c:7a:25:c5:48:72:74:f0:c6:0b:13:
3f:09:47:3b:f4:b4:4b:dc:3c:5e:34:39:55:e5:55:
d2:15:15:5c:8b:35:b6:ad:23:6e:ae:18:a5:f7:9d:
62:e2:15:f8:86:a9:89:74:f8:09:f9:35:15:f4:bc:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C6:63:13:C2:F0:D8:AE:D3:D6:A4:1B:E0:CB:79:BE:F0:A4:24:65
X509v3 Authority Key Identifier:
keyid:65:4D:69:21:60:DD:46:27:03:87:99:29:7D:47:75:14:80:D0:7F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU1pIWDdRicDh5kpfUd1FIDQfxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:35:17:3a:7f:f6:40:c7:7f:b7:61:92:db:2a:f0:f5:0d:2e:
e3:b6:ed:5e:4e:41:04:60:bd:dd:db:3a:4c:ab:88:77:2f:c0:
d1:3d:ed:da:88:30:f5:e9:4e:87:44:57:ba:24:49:43:43:d7:
ec:6c:93:a5:bd:78:7f:75:97:56:4b:58:2e:c1:84:18:7b:15:
0c:78:6f:b4:64:9d:db:c4:81:f3:5a:f0:c1:aa:2a:e7:70:a5:
59:50:8c:fa:21:0a:30:c8:a8:6a:b1:2b:38:07:2c:69:44:96:
a0:05:be:83:cc:14:81:cd:00:69:95:2a:33:50:13:dc:4a:d3:
f5:02:1d:49:59:90:f2:2d:80:6b:58:49:24:43:8e:7a:44:67:
b7:85:69:f2:bf:c9:4d:6b:a4:d1:31:2a:96:3c:d2:ba:dc:db:
ed:35:af:1d:4e:ee:ce:ad:a2:95:d9:02:7d:eb:10:8a:dd:96:
dd:a4:60:11:21:a7:ed:26:e9:31:63:4e:bf:5e:5e:92:4b:0e:
8f:95:e3:d8:f1:f5:cc:ca:39:c3:a2:23:41:79:14:78:40:b7:
9b:d8:f6:ea:09:1d:ff:14:aa:8b:e8:76:1a:ab:e3:9b:e5:87:
c1:d1:06:d0:39:10:98:29:3b:b4:e0:13:c8:25:39:90:31:3e:
6e:10:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:28 2025 by rpki-client