Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: mAmIS1NZgvaNvso+6Y6Gdde2o88vkYYtnCGL87i7kf4=
Subject key identifier: 84:F0:A6:24:09:74:41:27:17:39:C4:15:18:22:42:84:7D:72:B7:50
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 01984777F722CC9AC0EA7D6DB0B2C8BDB37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 0DDF
Signing time: Sat 26 Jul 2025 16:01:41 +0000
Manifest this update: Sat 26 Jul 2025 16:01:41 +0000
Manifest next update: Sun 27 Jul 2025 16:01:41 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: 3zbOlV4H6xAKpgLMz9EnN2TD8h3fJBM0s692YDG/3qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:f7:22:cc:9a:c0:ea:7d:6d:b0:b2:c8:bd:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Jul 26 16:01:41 2025 GMT
Not After : Jul 27 16:01:41 2025 GMT
Subject: CN=84f0a624097441271739c415182242847d72b750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:26:07:ef:4d:5e:3b:0a:db:b3:e8:77:7a:
40:d1:89:58:ee:d9:92:70:f6:b8:42:b5:48:6d:f1:
83:e9:54:30:c0:7f:ee:63:9e:eb:08:7f:9c:99:f7:
b0:a2:69:5d:46:58:f3:ca:7e:e9:32:38:04:ec:32:
68:c0:5a:a4:33:6b:10:d0:b3:8a:b1:2d:8a:1d:f6:
bd:7c:f5:3e:fc:c6:f3:76:4f:c2:58:39:86:36:31:
69:bb:46:22:e9:70:2b:89:21:0f:43:85:fd:57:f5:
d8:01:5a:4e:e3:50:a0:2b:02:76:9a:af:a5:ef:9b:
ec:4d:07:bf:a7:e2:87:34:7c:9e:e5:4c:71:2f:d3:
b4:46:75:14:95:47:a9:f2:9e:7d:6c:8c:ea:23:13:
7d:0b:aa:45:e0:4d:28:8d:1f:f6:7e:b0:ea:c2:c8:
45:61:45:e8:7c:02:2e:87:c8:a9:cc:58:71:01:94:
ad:f8:4b:39:68:d8:d0:1a:65:bd:47:dc:9e:ba:7a:
77:49:ed:14:43:bb:f7:e9:96:d2:e3:96:47:87:c9:
d3:75:24:f8:33:c8:5c:db:b0:22:25:25:ce:b0:8d:
13:c4:51:00:6a:92:78:25:46:f9:71:f8:6e:56:af:
69:51:7f:8e:65:c0:7a:39:b6:0a:6a:48:6e:4d:f9:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F0:A6:24:09:74:41:27:17:39:C4:15:18:22:42:84:7D:72:B7:50
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:09:c3:b2:b2:9a:aa:8d:25:10:14:76:88:f8:79:fa:6c:ac:
92:ce:0e:99:e0:e9:b2:8b:c9:f0:25:61:92:b9:57:ec:ff:49:
c7:36:7b:f6:32:d0:6d:19:84:d7:2e:cf:f2:a6:28:07:b1:70:
76:8a:2a:85:91:5e:63:d0:a2:09:1f:dc:62:ae:0b:92:9d:1e:
cf:37:ab:10:2d:c1:01:56:5d:79:89:b2:a7:11:fc:23:42:11:
ce:4d:8b:f2:6e:0a:f1:c5:ae:4f:67:5c:3c:c8:93:45:8c:e4:
6a:27:44:f7:e4:10:0d:fa:79:fc:f5:50:de:f0:a2:61:a8:f6:
15:53:36:3e:cc:b9:e0:3a:37:73:a5:03:63:90:1b:f6:4a:93:
2a:9e:d3:15:d5:f3:20:74:82:67:f2:22:41:51:28:23:5b:4d:
74:44:b3:88:06:27:67:0e:3f:fa:bd:9c:a3:1b:0b:16:cb:3d:
08:f0:dc:f2:32:f9:38:85:53:9d:2e:79:d3:56:6f:6f:68:15:
b1:9f:71:0d:05:41:46:c6:ee:ff:58:7a:0e:99:d1:e5:7e:42:
13:68:e8:60:a7:dd:ae:cf:08:b4:f4:ba:58:c9:5b:25:c8:f5:
f7:ae:5b:90:59:27:92:3d:ce:df:be:6a:7d:51:d1:18:06:c9:
ad:2a:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:44:13 2025 by rpki-client