Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
File: E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json)
Hash identifier: o/+JZqmlwLyRNzViWRtU0fzHNUc3NbXw2P5dflK+AKM=
Subject key identifier: 83:ED:75:D0:D0:28:84:6B:DB:A3:10:9F:EB:1C:52:02:A3:D9:0C:93
Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Certificate issuer: /CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Certificate serial: 01975234B461350C77E7B33E2CE3F6258F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
Manifest number: 07F7
Signing time: Mon 09 Jun 2025 01:01:15 +0000
Manifest this update: Mon 09 Jun 2025 01:01:15 +0000
Manifest next update: Tue 10 Jun 2025 01:01:15 +0000
Files and hashes: 1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: aafbXuC3RhEyRzNfnMtkXDxkMAIN8PjnilFSk+uuTao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:b4:61:35:0c:77:e7:b3:3e:2c:e3:f6:25:8f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Validity
Not Before: Jun 9 01:01:15 2025 GMT
Not After : Jun 10 01:01:15 2025 GMT
Subject: CN=83ed75d0d028846bdba3109feb1c5202a3d90c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:4e:8d:c1:ce:be:b4:b3:03:d7:9d:ee:f2:
fe:43:70:b3:ca:ae:40:9d:44:86:ed:8a:0e:c3:fb:
51:d0:55:65:0d:0c:52:a1:5c:a1:88:c9:59:2b:16:
5c:21:65:15:18:47:8a:1d:fc:64:b1:68:6f:f2:a5:
f4:f4:a3:50:bb:46:f1:7c:20:49:1a:45:32:42:ea:
19:6d:6c:b4:cf:05:f6:72:85:e5:34:ae:fa:07:a7:
72:ed:0e:03:06:48:6d:49:83:85:9b:b5:78:bb:99:
6e:56:48:18:75:4f:18:22:a9:b2:ca:76:af:e3:e2:
db:52:b0:2e:9f:57:cd:ad:dc:dd:a6:74:3b:13:c7:
87:0b:21:8e:82:26:0b:5a:63:83:f1:a5:2c:bb:8d:
b3:b8:b9:d0:93:95:4f:6b:f6:55:d4:04:6d:82:c9:
9e:a6:88:07:7d:70:10:09:9f:e9:6b:58:2b:9d:67:
c6:69:ef:b1:fa:3a:73:e0:cc:20:e2:69:05:20:e9:
cf:5e:34:36:5e:c3:fb:9d:9f:0d:6d:b2:e5:11:22:
ef:dc:5a:bf:95:c8:96:fc:89:7d:29:54:e7:10:cc:
12:a9:24:a1:82:92:f3:2d:ef:c6:28:c0:69:6c:b0:
89:08:79:33:1b:44:dc:a2:17:d5:97:e3:48:27:31:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:75:D0:D0:28:84:6B:DB:A3:10:9F:EB:1C:52:02:A3:D9:0C:93
X509v3 Authority Key Identifier:
keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:98:eb:43:53:04:13:d7:85:9e:10:c7:ec:f6:b1:65:8f:b6:
d6:31:38:69:56:ef:56:0a:aa:d5:27:e2:d7:a2:bf:7f:68:11:
01:a1:78:ab:92:ac:ad:5d:0b:a0:1f:b2:93:7d:51:87:47:6c:
2e:bb:8f:bd:64:b1:d3:50:73:1d:19:ea:2b:18:48:10:37:40:
af:cf:d0:5e:96:e5:74:1c:f4:49:b7:5b:17:a4:76:9a:bb:70:
4a:5b:e6:09:82:6b:8b:f1:84:40:8d:eb:48:33:01:1c:f7:37:
21:9c:34:95:be:f7:24:26:d5:df:7e:48:14:f0:91:84:d3:dd:
1a:54:da:a3:9d:65:1c:8e:c6:0f:1b:5d:0c:52:ee:68:15:9f:
13:73:8b:ca:5b:5c:71:59:ef:f3:ea:52:4d:6c:f6:3d:14:15:
48:08:55:44:1d:ae:6f:81:21:01:99:68:2b:00:78:a6:55:15:
2a:bf:7e:d3:c7:e0:41:47:7f:ee:94:1c:49:c8:9d:df:65:93:
d9:b8:23:98:2f:62:37:6b:49:b1:61:ff:51:16:4a:90:63:f1:
94:e0:31:6f:56:92:cb:d5:37:28:98:b6:37:82:1a:5e:a3:cd:
6e:c3:76:90:c2:4e:52:2d:ee:4c:b2:af:e2:c6:0f:9d:b7:fd:
a8:40:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:30:52 2025 by rpki-client