Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
File: ZmW8l5kwxe64oYSlqQOei5nuMK8.mft (raw, json)
Hash identifier: XrAxArcq1dICLzXzH4H9sa+ZLu+DiZYEajbOtI6sCc8=
Subject key identifier: 82:54:B0:EB:44:D7:5F:53:99:9B:3F:AC:7D:5B:7E:CE:60:11:8B:26
Authority key identifier: 66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
Certificate issuer: /CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Certificate serial: 01974A43F9AE0696BA822504D0970EAED04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
Manifest number: 31
Signing time: Sat 07 Jun 2025 12:00:58 +0000
Manifest this update: Sat 07 Jun 2025 12:00:58 +0000
Manifest next update: Sun 08 Jun 2025 12:00:58 +0000
Files and hashes: 1: ZmW8l5kwxe64oYSlqQOei5nuMK8.crl (hash: jevW5EB/j92MbZIpBpo1YsCWN7fvwdFs64sBKzanj9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:f9:ae:06:96:ba:82:25:04:d0:97:0e:ae:d0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Validity
Not Before: Jun 7 12:00:58 2025 GMT
Not After : Jun 8 12:00:58 2025 GMT
Subject: CN=8254b0eb44d75f53999b3fac7d5b7ece60118b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:88:4d:42:79:8e:4b:87:e5:af:d4:5a:02:
cf:5d:5f:b3:b7:aa:8c:a9:19:e2:32:78:17:54:1b:
49:61:a6:a9:fc:ab:5b:f1:8a:b4:ad:67:c5:f1:f6:
fc:b1:dd:97:0d:7e:83:41:72:cf:43:10:af:9c:98:
e1:37:8c:53:97:c5:5d:89:5d:2d:c1:58:86:a6:2c:
09:f8:4c:66:ec:78:a0:89:9d:b9:61:36:44:e2:fe:
2a:9c:7d:35:bd:91:aa:c6:20:90:ad:2e:d2:fc:76:
b0:d4:67:03:d5:a9:8e:fe:ca:d7:04:8f:cd:1d:f1:
50:b4:1c:21:2e:ab:fa:a3:e5:63:a2:ad:94:42:a7:
de:63:f2:67:65:93:fa:1b:2b:87:30:f5:a4:41:9a:
2c:de:f3:2a:b4:d5:82:e4:6b:1f:4d:45:1a:59:95:
56:28:a2:30:92:a8:8d:7d:1c:3b:e8:1c:11:ea:10:
40:17:86:46:a8:11:4f:f8:9d:4a:83:74:01:e2:10:
5d:a5:33:46:42:2c:f2:05:88:51:ef:24:bd:1e:49:
0b:1a:a3:0e:cb:3e:47:9d:aa:e0:ab:d6:51:ee:27:
0e:4e:e5:bd:8d:75:58:b2:5d:06:de:ed:cb:69:8a:
f2:16:74:b3:05:13:d2:64:50:3d:55:96:9d:4c:0e:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:B0:EB:44:D7:5F:53:99:9B:3F:AC:7D:5B:7E:CE:60:11:8B:26
X509v3 Authority Key Identifier:
keyid:66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:48:b3:3d:69:fa:f4:46:ff:9c:85:f9:ad:af:bf:b7:88:ea:
1c:b0:d3:16:b6:0c:c4:61:0e:f0:76:80:4f:7a:6c:8e:84:8d:
ff:32:28:a8:c2:31:59:48:b1:cb:c9:39:de:a5:58:31:86:44:
b5:2d:2c:f4:98:32:54:f9:6b:d2:65:51:85:f1:da:4a:74:2e:
db:01:55:3c:4f:8c:d9:50:ab:41:8f:8c:9d:9e:0d:98:11:d9:
d0:30:fe:df:15:45:ca:f9:79:38:73:cc:ba:fb:7a:d4:0e:d0:
d4:e2:b0:78:17:14:f7:56:90:ba:aa:42:e8:4a:fd:b5:2f:c3:
c9:d5:87:14:e5:00:ae:80:c0:aa:4c:10:6a:c2:b9:5c:79:e0:
48:ab:8c:79:1d:51:15:ed:cb:a3:e4:ef:35:95:11:eb:ea:66:
b8:27:7c:4a:28:10:36:ee:07:4d:6c:f9:6c:b3:c9:24:ab:ca:
80:a5:41:ed:21:32:75:e4:e3:00:de:0c:b2:96:29:97:b4:00:
40:a2:e6:9a:14:05:3f:46:e9:c2:56:6d:65:81:a3:b7:02:2e:
08:9d:f1:90:74:dd:7b:32:2b:4b:be:e8:2f:19:6e:c4:5c:d9:
e0:07:dc:7e:b4:be:19:13:48:c9:43:99:ee:ec:bd:7a:f0:5e:
a4:9b:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:14 2025 by rpki-client