Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: XrMMeG07xnAYv3+D4L0S9rMwR787u4AW5d3oolM1Gs8=
Subject key identifier: 22:A9:59:D2:AC:98:62:1D:F6:1A:D4:AA:D3:9D:22:D9:6D:FC:55:D6
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 01975FB8B2BCE77372AE34DCCADC6284B54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0D85
Signing time: Wed 11 Jun 2025 16:00:29 +0000
Manifest this update: Wed 11 Jun 2025 16:00:29 +0000
Manifest next update: Thu 12 Jun 2025 16:00:29 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: xqHIbV81A91NazNkCZtBB8vDTGE5+TkjElfdmoC0sn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:b2:bc:e7:73:72:ae:34:dc:ca:dc:62:84:b5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Jun 11 16:00:29 2025 GMT
Not After : Jun 12 16:00:29 2025 GMT
Subject: CN=22a959d2ac98621df61ad4aad39d22d96dfc55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:5a:b8:3d:88:94:61:55:9c:60:08:9f:9e:
44:33:9c:86:da:ae:3a:70:ef:e1:d3:4a:43:fb:22:
12:fc:97:89:72:ec:de:b8:7e:2c:5c:66:8e:e3:83:
53:c8:3e:45:8a:c1:fe:d4:72:c9:b5:a5:25:88:a0:
1e:aa:48:1b:18:ac:df:08:21:52:97:f7:92:ad:91:
b4:90:75:8e:eb:b8:1a:91:96:26:c5:03:01:61:c5:
fe:49:0c:6b:51:c0:5e:63:89:dd:73:2c:28:fa:3e:
4e:fc:d0:75:1f:26:12:c8:40:1f:3c:3f:47:68:92:
12:93:9c:e8:8f:4e:fb:18:c2:d3:7d:aa:99:45:8a:
eb:6d:96:25:bc:b7:72:8f:c8:1f:7a:05:07:74:39:
2e:52:c6:fa:90:c7:59:f4:df:7f:aa:00:d3:f2:46:
f7:fb:e4:a2:f6:d2:ae:ba:f6:bf:f6:bc:f9:d3:79:
35:0b:1a:a4:2a:50:b5:63:a8:ff:64:2d:3e:cb:0d:
17:92:26:5b:bc:59:15:aa:e4:2e:45:35:a3:04:da:
c2:ee:44:c8:04:38:96:45:f6:8c:81:c9:60:00:34:
16:b4:a7:52:52:af:57:5f:81:4e:57:c8:89:b5:6c:
d1:7c:70:de:84:af:5b:66:fa:19:88:2c:00:e2:07:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A9:59:D2:AC:98:62:1D:F6:1A:D4:AA:D3:9D:22:D9:6D:FC:55:D6
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a9:20:99:de:1c:ba:84:cf:cb:64:50:24:b0:84:69:60:59:
ec:cb:0f:ee:66:c8:c5:43:4d:9a:bc:c7:66:7f:d9:b9:41:55:
d8:4a:cc:c7:34:7b:c5:6d:c2:b8:7a:f2:d6:4a:ac:b4:06:c0:
70:7e:7b:d2:03:a2:79:97:36:b7:7d:fa:b5:a0:8b:14:95:61:
5c:dc:17:43:be:23:23:8a:e9:59:2f:27:95:02:a3:51:f8:9a:
ab:36:3c:7e:5f:28:4b:12:79:d9:43:d2:62:35:2a:e3:04:ec:
d6:6d:56:f6:54:7e:eb:1d:6e:7e:1b:1d:b7:c9:d5:54:ec:d8:
d3:d2:b8:28:a4:8f:89:e7:f2:17:ad:78:87:0d:32:ac:aa:4a:
47:37:52:bf:a8:b3:66:2f:5f:ea:c3:1d:c3:d9:4c:ca:a1:67:
03:3a:54:f2:8a:ba:17:2e:d6:e2:a7:86:8a:87:43:da:84:07:
c0:5b:db:dc:29:1c:3d:10:f5:e7:4e:e7:b2:c3:40:d4:2c:10:
49:8d:6a:ed:bc:63:10:e1:b3:fd:4e:d9:23:ea:05:2b:62:dc:
16:85:5b:e1:90:4a:73:af:15:80:dc:87:75:2f:38:c5:a0:b0:
4b:52:fe:20:81:c2:13:c1:94:7c:04:ea:db:07:0b:0b:c4:39:
b6:6a:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:08:50 2025 by rpki-client