Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
File: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft (raw, json)
Hash identifier: uXmsOHdxVTDWPk9FvoGOWt6wsSZQQCIWgqoIwD412p0=
Subject key identifier: B7:0C:39:3E:CB:7D:F7:08:B9:F1:6B:51:EE:B1:6D:9C:7B:B5:5B:C2
Authority key identifier: 66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
Certificate issuer: /CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Certificate serial: 0197507CA04607950BCCAF18DFF7D7F4B78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
Manifest number: 51
Signing time: Sun 08 Jun 2025 17:00:34 +0000
Manifest this update: Sun 08 Jun 2025 17:00:34 +0000
Manifest next update: Mon 09 Jun 2025 17:00:34 +0000
Files and hashes: 1: ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl (hash: K1Z9vU5hR+//CuRuU42yL1WzVaVUAj8yg4xs/nx14oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:a0:46:07:95:0b:cc:af:18:df:f7:d7:f4:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6620b73604e18555a8fdf27671ddd0894f83c14e
Validity
Not Before: Jun 8 17:00:34 2025 GMT
Not After : Jun 9 17:00:34 2025 GMT
Subject: CN=b70c393ecb7df708b9f16b51eeb16d9c7bb55bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:b7:30:b2:77:47:46:c6:e1:b1:6f:34:d0:
3c:b7:6e:4b:8e:d6:dc:f2:e3:bb:ad:01:7a:88:b9:
0e:72:62:95:ff:9e:b5:d8:b7:15:90:77:ec:25:9e:
01:f4:ab:3d:e6:01:e2:6c:f6:d1:a7:03:20:36:25:
d8:d3:9f:04:3b:02:2d:b6:bb:81:b4:2a:e2:8a:d4:
db:86:fe:3e:d6:c9:4c:45:d9:cf:44:a9:35:06:d1:
b8:06:ac:b5:bb:23:71:1e:e6:78:52:78:59:51:65:
f2:d9:57:63:38:fd:65:ca:88:f7:22:38:9c:09:9a:
7e:be:06:bb:2d:48:11:5a:9b:e0:54:87:07:66:c3:
9c:0a:b3:21:39:33:f8:ca:b2:4f:b8:a9:a9:09:bc:
47:f5:74:a5:d5:0f:89:18:b9:b1:fa:07:39:14:f1:
59:0e:5a:77:c2:85:e7:2e:7c:bc:24:ca:6a:bd:49:
c5:29:b2:93:5f:43:76:a5:1e:75:7a:2e:62:a5:ec:
f9:6f:ec:51:dd:c8:55:d4:b6:c2:6e:a5:17:5c:5d:
15:4c:84:ac:72:6b:0c:07:e4:3a:0d:a3:1a:1c:d4:
7c:47:ee:86:2e:d2:65:e5:20:aa:13:c9:6e:1a:47:
8f:8c:87:98:19:45:4b:fe:ac:c5:4e:ef:35:7b:4e:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0C:39:3E:CB:7D:F7:08:B9:F1:6B:51:EE:B1:6D:9C:7B:B5:5B:C2
X509v3 Authority Key Identifier:
keyid:66:20:B7:36:04:E1:85:55:A8:FD:F2:76:71:DD:D0:89:4F:83:C1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/66b875-6a5a-4f93-a4e1-2935e7b5a499/1/ZiC3NgThhVWo_fJ2cd3QiU-DwU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:07:27:c7:7e:dc:5e:5a:8a:0a:9f:d6:9c:e5:e1:35:03:
03:10:90:46:5e:14:88:55:7e:a9:87:9f:69:cd:12:9d:0b:14:
eb:2f:11:47:f3:4a:7f:9b:4c:9c:ec:64:03:31:82:cd:11:fd:
c0:d2:1b:9e:f8:b4:90:af:ae:b2:a4:a2:6b:09:ad:0b:38:b3:
ae:90:6d:0a:ee:9f:82:36:60:f9:44:fc:61:67:a3:d1:2b:60:
3b:13:55:19:74:83:ba:4d:c6:17:fb:2d:ee:a2:3b:a2:dc:b1:
94:48:bc:71:7e:02:31:dd:6a:10:a9:67:cd:c5:d8:81:af:59:
b3:87:64:00:c4:82:99:38:f3:a5:ae:4b:99:76:5f:cf:7c:2f:
f9:06:72:bc:d1:ae:0f:72:98:b4:e9:23:80:1a:e7:cd:46:64:
89:ae:c6:a7:29:8d:80:bf:bb:30:57:b8:fd:be:2a:9a:5f:4e:
55:4e:fe:04:94:88:75:e8:a6:6a:d1:2f:6c:7e:8c:23:e5:e5:
95:35:f6:c6:ef:0c:91:1f:84:90:99:35:18:ea:ae:42:b7:a1:
ac:eb:05:48:97:3f:a4:36:43:4f:da:db:fd:6b:3c:01:34:88:
0b:ad:d8:08:d7:27:67:74:85:40:91:04:98:38:15:56:e8:a5:
fe:21:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:10 2025 by rpki-client