Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: 3pULZQ70vf4Qd8F0w1KIrlN5r8Eze88F/7p0+RipuQQ=
Subject key identifier: 9D:11:07:67:46:25:6E:45:29:87:62:AE:F8:14:FD:55:33:71:1A:12
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 0197488C9BE77026E1EC45E332871FADDB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 0D9A
Signing time: Sat 07 Jun 2025 04:01:03 +0000
Manifest this update: Sat 07 Jun 2025 04:01:03 +0000
Manifest next update: Sun 08 Jun 2025 04:01:03 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: Wu42+CdQvLpegO0zlQGbiHydgbO1PIgok1vHXRacEjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:9b:e7:70:26:e1:ec:45:e3:32:87:1f:ad:db:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Jun 7 04:01:03 2025 GMT
Not After : Jun 8 04:01:03 2025 GMT
Subject: CN=9d11076746256e45298762aef814fd5533711a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:73:cc:4f:93:9f:bc:b1:62:2d:78:24:ab:
ef:18:18:0e:88:ce:c7:20:7e:a9:30:d0:b3:63:7d:
88:12:60:52:7b:6a:e8:d3:05:dc:e2:77:fd:27:86:
8d:70:a3:d2:1d:ab:30:d0:80:43:ee:4d:74:dd:e7:
d2:5b:f2:bf:69:0d:97:fd:c1:f7:d6:20:e5:0e:c3:
15:3f:8c:06:76:b6:22:e4:21:56:e9:23:c8:76:bf:
6a:34:00:46:d3:3f:35:19:d5:0a:55:1a:69:72:d7:
62:cd:af:f1:70:03:c6:33:27:ef:63:90:3d:74:82:
74:f8:e2:1b:36:c7:11:6a:c0:24:3c:8f:51:76:1a:
76:ce:11:ed:68:79:cd:24:08:03:cc:9c:24:76:e3:
6c:5a:dd:0d:65:39:e4:b5:01:b7:66:89:f0:3b:79:
2b:e5:b3:59:59:d6:e3:02:30:b6:4b:01:72:e8:06:
c9:52:dc:a5:8d:79:28:aa:93:ab:6a:b9:7c:53:f2:
1b:04:ea:97:a4:67:ee:5a:3c:ce:00:0f:b5:06:a5:
bd:04:9c:0c:52:76:26:14:84:20:23:7d:6c:ae:fd:
2a:d4:33:ad:42:48:d6:4b:3b:39:15:87:cb:9c:c1:
30:b1:60:ba:10:d0:e5:a3:b8:65:8f:41:b8:7e:d1:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:11:07:67:46:25:6E:45:29:87:62:AE:F8:14:FD:55:33:71:1A:12
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e7:92:08:15:9a:78:94:c5:d0:1e:93:b9:b9:83:ca:c2:1b:
8e:41:95:94:fc:3d:ea:d5:ca:20:c2:d0:2f:51:86:7f:cb:9c:
9f:af:ef:0b:5b:6e:09:23:b0:78:8e:a4:c4:de:d8:42:80:82:
e5:48:09:ae:89:c4:3f:a2:e9:7a:2e:a8:ae:2f:3a:22:cc:7c:
b1:f7:76:bb:bf:11:82:fa:73:67:1d:eb:eb:cb:3d:b8:80:3e:
70:65:6b:5e:d6:9e:bf:1a:f5:2b:46:c4:10:72:a0:be:5f:ea:
ca:d1:3e:12:5a:29:4a:16:e7:e6:e5:fa:b1:19:00:67:b1:64:
36:d2:2c:d3:e6:9c:5b:15:92:6d:1c:e8:01:8f:6c:34:4b:76:
1c:ed:49:3c:cf:ca:84:1b:e7:f9:b3:51:4a:22:83:75:67:ab:
ff:72:f3:9b:4b:af:48:6a:61:1e:bd:36:7b:db:5c:fc:e1:30:
80:ec:58:56:72:0b:eb:c1:72:06:76:63:b9:e0:04:33:d1:e9:
21:1d:4d:c7:f7:45:d9:87:92:be:1b:da:ef:8d:f8:83:51:be:
0d:50:5f:d9:e5:64:a1:6b:52:48:87:33:cf:3e:66:5e:d8:4f:
1c:63:7f:36:cf:6a:01:1d:57:09:7f:c3:82:5f:33:af:1d:38:
c6:05:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:38 2025 by rpki-client