Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json)
Hash identifier: Lfr+kRFrZ4QdHko5GwXFsVWBnF+MI57n0tB+0UwD5GE=
Subject key identifier: 58:3F:D0:91:E2:86:9F:F9:F8:4F:85:4F:2A:ED:23:4F:32:E2:AB:AF
Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d
Certificate serial: 019747E73E2387050B3984EB3E0513915519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 01:00:26 +0000
Manifest this update: Sat 07 Jun 2025 01:00:26 +0000
Manifest next update: Sun 08 Jun 2025 01:00:26 +0000
Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: /DrdNbFJzSARVMOD+n4tkCOYZOnyOqaVdf4EaZVEuhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:3e:23:87:05:0b:39:84:eb:3e:05:13:91:55:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d
Validity
Not Before: Jun 7 01:00:26 2025 GMT
Not After : Jun 8 01:00:26 2025 GMT
Subject: CN=583fd091e2869ff9f84f854f2aed234f32e2abaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:26:9e:8d:9c:cd:35:36:b4:6c:99:a6:65:
db:55:de:cd:10:58:e3:87:9d:31:35:e1:ca:75:f5:
9c:1a:fe:c7:71:e7:2f:d5:1f:33:c5:ae:27:8f:1e:
57:8a:95:df:8d:dd:ab:47:c9:be:1d:8d:24:5d:48:
d9:2e:f0:8d:1e:3c:75:59:bd:67:32:6f:f0:aa:d1:
b4:c9:ca:70:a6:18:ad:54:55:a8:d2:71:f1:45:35:
7a:35:dc:d1:ae:3f:47:76:31:da:d4:13:58:7b:89:
14:a5:25:08:d4:a9:ea:18:76:e5:75:9b:36:93:86:
46:ad:ae:e4:23:0d:17:59:89:a7:6b:a2:af:4c:49:
83:9c:02:a1:6d:90:13:8f:69:65:50:49:90:01:dd:
45:fa:fe:8e:c4:16:60:fb:65:36:23:28:64:e7:d4:
35:0e:59:bb:46:97:78:ba:86:c1:b7:94:e0:c1:d0:
94:3a:82:d8:2c:b5:d2:4f:b4:8a:c6:5f:59:bd:66:
1a:f6:b7:e6:b6:f5:7f:a2:ff:d9:d9:05:ee:7a:ce:
cd:25:7e:3d:16:c1:35:7c:e3:03:ac:44:19:39:00:
36:39:b0:8e:d5:2f:1b:4b:7e:db:3a:48:73:7a:df:
ea:33:b8:5c:37:26:d0:76:96:d0:ed:37:19:c8:c0:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3F:D0:91:E2:86:9F:F9:F8:4F:85:4F:2A:ED:23:4F:32:E2:AB:AF
X509v3 Authority Key Identifier:
keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ce:ed:d5:17:c1:02:1c:4a:1f:6d:3c:58:80:84:4d:4a:7e:
d0:6b:c7:a4:af:c1:b0:8f:0a:e3:16:00:56:72:23:b2:b7:5b:
f1:05:c4:0c:d4:46:96:f6:bc:23:d0:82:55:11:18:41:15:aa:
ac:cf:51:be:58:56:ba:f8:62:6f:b8:ba:df:60:67:0a:25:97:
d2:34:3c:1b:e7:73:33:4d:29:4b:87:af:9b:f9:33:64:ad:b8:
16:7e:d1:e2:bc:49:2a:2a:dc:8f:49:d7:27:a0:d2:42:59:80:
02:db:5e:44:6c:46:17:30:3e:f4:ca:ef:35:1f:45:0d:cc:3f:
3f:07:b9:7b:f8:bc:a2:13:55:10:2d:58:ca:ff:06:68:3d:5b:
d9:70:b3:0d:8e:44:9d:f7:0a:34:57:77:40:cd:3d:2e:c2:70:
cb:28:1a:14:59:9d:bd:ed:44:6d:e1:6b:a9:39:2d:7f:d2:dc:
04:b0:6a:ec:f9:b5:1f:f9:4b:33:d6:17:ec:c0:53:91:5b:ac:
91:6f:5e:bf:b0:ef:97:94:3f:06:53:f9:6f:1e:d1:bb:5b:eb:
5c:2d:3f:9d:c0:08:42:c9:ab:7c:e5:4c:7a:f6:1a:5e:2d:7e:
81:38:f2:10:85:f3:00:7e:b4:20:26:74:ea:2c:62:fa:e5:a5:
3b:74:de:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:37 2025 by rpki-client