Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
File: z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft (raw, json)
Hash identifier: Cpw83B5jM+iBWcIzvMfGi4wXcsgcYCFrIsIx5GWBYa4=
Subject key identifier: 18:F9:EF:C3:D4:45:68:81:53:83:2E:C5:34:98:F9:20:DB:CC:3A:35
Authority key identifier: CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
Certificate issuer: /CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Certificate serial: 01974DE9E162468702060C381F3FD8A4E252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
Manifest number: 027F
Signing time: Sun 08 Jun 2025 05:01:02 +0000
Manifest this update: Sun 08 Jun 2025 05:01:02 +0000
Manifest next update: Mon 09 Jun 2025 05:01:02 +0000
Files and hashes: 1: z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl (hash: TWMbxOmRIJ55aVGc+4WX7OWx+laOG32cM7g5H2Ychlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:e1:62:46:87:02:06:0c:38:1f:3f:d8:a4:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Validity
Not Before: Jun 8 05:01:02 2025 GMT
Not After : Jun 9 05:01:02 2025 GMT
Subject: CN=18f9efc3d445688153832ec53498f920dbcc3a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:d7:64:8b:2d:e1:8b:70:61:75:d6:da:45:
3b:bc:40:a4:6d:95:34:92:d8:e4:05:92:d5:ec:b5:
96:65:2e:9b:6a:d5:90:4e:25:6f:2a:89:da:24:31:
d2:df:ad:26:1d:bf:1e:58:9a:33:db:0a:fc:52:b1:
b5:d8:87:a5:0d:8d:67:71:02:d6:b2:4d:1b:9b:58:
79:73:22:b1:a3:50:c9:ff:c6:9d:27:3a:20:b4:48:
9a:bd:bf:ca:32:f3:f2:4b:54:ac:32:95:17:62:5c:
b8:14:11:41:c5:bd:82:a9:1b:94:91:0f:f0:ec:52:
09:2f:cc:b3:d5:c2:e5:ef:1c:d8:e6:3b:93:04:7e:
6a:7e:d0:d7:ba:e6:45:9a:30:ef:73:45:11:10:3c:
76:f3:a9:4f:7c:8a:08:94:99:93:44:8f:62:16:a2:
4c:56:36:97:78:fe:dd:02:93:4f:15:db:6d:a8:35:
69:1a:98:53:83:1d:15:9d:47:65:74:e7:80:18:c4:
fc:cb:4a:bf:9a:79:8d:ea:1e:03:70:b7:35:43:b3:
21:a2:3e:1f:a1:7a:8a:34:f8:78:ce:61:0a:93:54:
5d:9a:3d:f2:c8:83:23:e7:5e:41:24:28:c3:ce:e2:
83:04:1a:8b:01:a7:71:85:84:08:7c:6b:b8:4f:da:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:EF:C3:D4:45:68:81:53:83:2E:C5:34:98:F9:20:DB:CC:3A:35
X509v3 Authority Key Identifier:
keyid:CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:82:8d:c1:ea:47:1f:d8:ec:7a:4f:ba:3e:bc:16:47:6e:3e:
f1:68:a7:a0:07:b5:cc:5e:bc:61:d6:b1:d7:0b:e7:ef:37:b5:
84:a6:cc:b4:78:49:c9:6a:bc:05:46:1f:0d:8b:91:c6:c3:6b:
06:bc:c6:62:25:33:6c:f4:61:44:9a:6b:d0:40:59:56:bd:78:
f4:26:10:90:11:8a:3a:e8:d1:b2:3c:7c:6e:97:b3:a8:31:02:
90:36:8f:45:21:2b:58:49:ef:5f:0b:1c:f5:2c:b6:65:de:8b:
29:ba:eb:3a:95:ab:8d:72:99:88:91:98:ca:c7:c4:92:53:5c:
6e:02:fa:44:d6:1d:ab:35:ee:38:fc:37:4f:15:fc:c7:7c:b3:
89:4e:07:0e:b5:45:6e:7b:cb:9b:7d:be:72:f9:1e:ec:18:83:
b0:89:f3:98:14:98:52:1b:a4:f6:06:95:55:0c:aa:8c:eb:a1:
65:6c:6e:5b:db:b4:93:76:86:5d:36:59:40:71:08:33:3c:88:
1a:6e:53:57:e6:8b:18:f4:6f:c5:de:d7:6b:14:74:06:19:f9:
51:cb:d2:16:9c:c2:6c:a5:26:6c:5d:de:55:45:0c:13:0b:98:
74:da:18:d4:71:98:93:d2:69:a3:01:aa:6b:a7:ad:3a:b2:f6:
93:f1:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:14:24 2025 by rpki-client