Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: D3BhidwbjvpDxdsBRDZ4jSSIlyWN4hUP/GCV0dDTwwA=
Subject key identifier: 57:45:63:18:15:40:41:B1:61:12:B1:D1:FA:B7:7C:DE:62:BA:8A:C2
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 019767723166712ABD23B7D61503C5A392FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 1519
Signing time: Fri 13 Jun 2025 04:00:26 +0000
Manifest this update: Fri 13 Jun 2025 04:00:26 +0000
Manifest next update: Sat 14 Jun 2025 04:00:26 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: pMJf01KBthuvSa7E9Qd0nxLybcbwQ7674ZXh5GeiLn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:31:66:71:2a:bd:23:b7:d6:15:03:c5:a3:92:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Jun 13 04:00:26 2025 GMT
Not After : Jun 14 04:00:26 2025 GMT
Subject: CN=57456318154041b16112b1d1fab77cde62ba8ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:86:3d:c6:cd:57:e7:86:3d:14:7d:8e:79:
f3:03:9f:df:c9:01:82:19:4f:99:38:9b:68:a0:c1:
b5:fb:33:f2:68:fb:4a:42:bb:7f:34:99:42:54:f0:
7c:af:5b:57:d0:f5:33:31:76:fe:60:8f:42:04:0a:
4e:1e:a2:64:6c:f0:73:f0:21:d3:7b:95:79:26:61:
9d:f0:01:67:4d:08:e8:a3:00:e0:77:98:0e:c2:b5:
86:87:e0:fc:b0:2d:83:62:c8:e4:80:90:37:0f:32:
52:c5:e6:a0:b7:39:ed:8e:2b:1c:4a:7a:29:46:b7:
89:b7:2f:00:78:83:e8:81:19:cd:a2:9a:a5:94:6f:
cb:31:4d:01:e0:60:a0:f7:8e:8b:db:3c:46:2c:e3:
5c:3a:cc:b2:d2:6a:29:0b:fa:c2:2b:de:a7:28:b3:
41:d6:dd:53:36:bf:2d:4a:b8:ad:20:ec:c8:96:ea:
80:b9:1a:92:85:24:30:72:86:10:3d:69:a7:d4:fa:
70:0e:38:e2:0a:77:bc:b4:33:15:ed:78:f8:1b:40:
cc:df:7f:33:4c:66:ef:50:77:9b:5f:cf:5a:47:2e:
ad:7a:d5:ae:84:d6:2b:26:82:3e:44:e2:8e:a2:6f:
31:eb:5d:0f:6c:63:f1:c4:01:bd:1a:17:30:6e:fe:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:45:63:18:15:40:41:B1:61:12:B1:D1:FA:B7:7C:DE:62:BA:8A:C2
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7b:c5:fc:d1:96:2a:99:3e:2b:33:61:98:73:67:94:b1:a9:
ab:86:c8:f8:71:42:eb:ba:a4:d0:c8:14:1a:74:4b:a1:58:bf:
3a:16:b3:af:94:95:af:40:4f:eb:22:17:68:9b:ad:5d:51:c1:
bb:88:b5:6c:2e:0c:f3:03:e0:5a:f8:60:6b:13:87:f2:b1:08:
2e:9f:2b:b7:97:cb:fa:39:ab:8a:82:8c:b3:f2:cc:8c:0e:89:
fe:73:fb:3e:b7:54:e6:1a:a6:16:31:f1:04:b5:6c:72:0a:14:
c4:13:98:50:6b:8d:0e:1e:bf:f8:50:93:1b:7a:10:d1:be:69:
0d:0e:06:ef:95:ca:02:ed:d5:b6:ae:d9:fc:e1:9f:35:c0:f4:
5b:f9:99:a8:59:af:e4:f3:6d:fa:3e:c4:d0:f8:ec:5b:65:c5:
bc:a9:53:10:20:4d:2f:bf:8c:39:80:a9:3b:1c:24:e5:fb:6d:
b0:bd:7d:c4:33:7a:e6:74:ca:2d:0a:57:ab:54:fb:66:57:ea:
e5:98:4a:be:3d:16:0d:ab:50:59:bf:45:b5:f8:bc:11:dc:bc:
c5:60:4e:b1:05:e8:07:80:53:d5:ae:77:ab:71:1f:c9:63:94:
56:b0:5a:fe:34:5c:dd:51:d3:bf:4a:7d:4e:40:7a:3b:ce:6b:
b2:2e:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:07:44 2025 by rpki-client