Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: KqJUWzMnbtJUiVVaVgdcF7gbtVyXZtEUjnHcNQKKb3w=
Subject key identifier: 27:00:F4:9F:86:3D:ED:6F:27:32:D4:0E:3E:89:38:AE:8D:4F:F6:30
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 01984A4122E9A6C1756E4FF3743EB662BA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 05:00:39 +0000
Manifest this update: Sun 27 Jul 2025 05:00:39 +0000
Manifest next update: Mon 28 Jul 2025 05:00:39 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: J1CFocRFLXFPo+cKrZUlMNitbU/qAJ/QwdM5KiHdKuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:22:e9:a6:c1:75:6e:4f:f3:74:3e:b6:62:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Jul 27 05:00:39 2025 GMT
Not After : Jul 28 05:00:39 2025 GMT
Subject: CN=2700f49f863ded6f2732d40e3e8938ae8d4ff630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:92:e4:75:36:24:18:ba:c4:8e:bb:a5:ff:
2a:ac:7b:09:5f:9c:15:7c:49:fb:58:9e:16:4c:3a:
ee:0f:37:d4:8c:f8:a9:b4:25:9e:ab:c1:d9:50:d4:
c6:06:84:cd:a0:a7:7d:fd:3e:c7:75:25:81:47:42:
6d:86:15:bd:dd:89:f6:b6:68:70:cf:19:89:ee:b0:
29:e9:d4:2f:21:3f:ab:44:f6:3b:fb:13:be:b2:4b:
7a:29:14:e7:fb:7f:75:fb:01:fb:f5:ba:7e:cf:10:
64:89:db:71:fb:8c:96:02:4a:d8:ea:6e:42:62:33:
5d:d3:c1:c1:38:b0:6c:79:43:8d:1a:3d:40:a5:a6:
1c:a7:b9:c5:10:96:67:0d:00:13:fe:c3:8e:81:b1:
06:7c:6d:21:29:47:2d:47:8c:f6:c4:0b:f8:69:e4:
af:eb:ea:c1:42:93:33:7a:f2:70:34:11:b6:22:52:
78:77:92:17:40:b7:69:8e:6f:b2:67:cf:e4:a5:50:
41:51:b6:80:de:73:bf:aa:0d:b2:3a:1b:2e:d5:93:
d1:57:24:88:1b:a4:55:28:9d:2c:a6:f9:68:0b:e6:
a7:8b:b5:d2:58:3d:da:f0:d9:7f:89:a7:bd:2b:a0:
af:d9:f1:16:6d:4b:31:c6:28:f3:84:ac:ad:8b:d1:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:F4:9F:86:3D:ED:6F:27:32:D4:0E:3E:89:38:AE:8D:4F:F6:30
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:19:e2:93:a6:92:b1:35:a3:4c:a1:e2:a2:57:12:32:b3:aa:
52:e9:28:90:90:6c:7a:2e:6d:b8:33:c6:ef:ca:b4:0e:89:78:
39:75:f5:19:4a:0b:65:be:5e:0b:24:ea:87:ce:9e:ad:59:86:
2c:70:e0:ef:ef:06:91:e0:e5:5d:ec:76:92:17:6a:b6:5c:e2:
b3:6d:a9:a7:3a:e0:e0:75:31:e8:e0:69:53:2a:94:e9:8f:b8:
84:a2:a4:70:9e:df:a9:bf:5c:d8:41:f6:10:e4:49:b2:28:3c:
16:6c:9a:c5:e8:e6:16:f2:0e:a5:53:a8:ed:0d:90:42:96:9d:
1c:9d:d2:9d:35:24:1a:99:e6:3b:36:03:30:4b:e7:27:cc:8d:
cd:e0:b4:29:28:e6:fb:ba:f9:3e:73:03:91:f8:bf:43:e9:2c:
97:5d:36:df:9c:ee:85:5e:0c:49:98:87:ed:2b:05:95:8f:bc:
4c:87:b3:fb:5b:ff:32:20:fa:8c:14:2f:15:0d:16:f3:8e:8c:
5e:54:78:81:63:d0:16:f4:dc:65:3d:f5:14:91:07:c7:05:b0:
ed:13:c7:a2:e3:25:05:19:a0:5c:a8:31:ae:86:5a:11:c8:9f:
c4:11:6d:63:cb:83:29:ed:e0:c8:43:ac:1f:ba:6a:ef:1d:da:
4b:7b:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:25 2025 by rpki-client