Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
File: ZEXzBZOZaa2QDVjfmskeenW0MY4.mft (raw, json)
Hash identifier: Q8cCl5b0t8WAy/xdeYKvL5586MBS525Y9CVlFFt5zJw=
Subject key identifier: 5F:38:65:24:1A:F9:DF:02:E6:FA:37:41:76:F7:14:37:80:71:F4:DD
Authority key identifier: 64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
Certificate issuer: /CN=6445f305939969ad900d58df9ac91e7a75b4318e
Certificate serial: 01974C6985A6688E3AF0FA59D18F0BAB440D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
Manifest number: 0FD8
Signing time: Sat 07 Jun 2025 22:01:13 +0000
Manifest this update: Sat 07 Jun 2025 22:01:13 +0000
Manifest next update: Sun 08 Jun 2025 22:01:13 +0000
Files and hashes: 1: ZEXzBZOZaa2QDVjfmskeenW0MY4.crl (hash: clTmXUetmDAqzjdLD5SaNkD51kDhC7bc2o+s2mBj4E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:85:a6:68:8e:3a:f0:fa:59:d1:8f:0b:ab:44:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6445f305939969ad900d58df9ac91e7a75b4318e
Validity
Not Before: Jun 7 22:01:13 2025 GMT
Not After : Jun 8 22:01:13 2025 GMT
Subject: CN=5f3865241af9df02e6fa374176f714378071f4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:51:5f:53:38:c0:f7:3d:9e:44:2b:fc:fc:
f8:7d:f1:97:a7:b2:ef:75:b9:b5:10:b0:0b:81:8d:
6e:eb:17:42:92:c0:5a:16:fc:fd:30:5c:a5:96:1f:
52:f7:74:0c:86:74:a8:a5:f9:c8:39:54:8f:4e:06:
cd:b4:bc:91:4e:9e:11:ae:99:c2:6e:aa:24:fa:79:
4b:3a:06:aa:ca:68:7b:0c:1a:39:49:5f:95:c5:26:
fe:2a:a7:01:90:54:6a:da:a4:ca:d9:24:72:b6:0d:
db:ac:f9:09:02:4d:00:2e:91:84:e7:3a:e5:84:d7:
eb:83:bc:c7:95:f8:e4:56:96:8a:b6:fd:b1:b8:3e:
ee:59:67:5a:82:a1:1d:5d:f7:78:2e:eb:a9:57:43:
50:8c:12:13:12:12:2d:ee:3e:1b:01:ae:66:da:86:
53:91:d2:a1:fd:ad:af:1b:d5:f8:a6:1e:0b:9f:b8:
75:b2:04:3f:38:52:5c:20:89:d4:e0:cd:9f:df:b9:
47:6e:27:4d:ae:b2:94:a0:1b:bb:87:97:67:25:21:
0d:f7:7d:3b:16:ef:8d:b9:0c:55:bb:d9:d3:a6:50:
9c:96:55:53:53:ae:56:12:ef:ed:d5:53:bf:78:05:
8b:aa:16:14:ee:71:d2:54:ff:f3:ad:bb:18:13:4f:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:38:65:24:1A:F9:DF:02:E6:FA:37:41:76:F7:14:37:80:71:F4:DD
X509v3 Authority Key Identifier:
keyid:64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3e:cc:01:5b:d2:bc:dc:01:3a:53:f1:26:6c:19:2a:9b:e7:
a3:a9:f9:86:fc:1e:25:ed:40:2c:d3:e3:8e:8f:c0:3f:e8:5c:
0a:0d:1a:2e:6e:6e:db:d4:61:cb:29:0d:49:af:d6:56:3e:f9:
c4:83:c8:fc:5f:23:49:8d:15:db:49:8f:f3:e0:6b:3f:64:01:
88:ab:f7:0f:94:8f:1c:62:83:05:d3:0a:89:19:2e:4f:fe:fa:
82:50:6c:93:5f:20:fe:f2:26:08:b0:1c:8c:75:a8:54:e9:de:
9d:f6:0d:a3:be:14:b3:f1:ae:1a:37:f2:6f:dc:c8:91:3c:cd:
98:d4:3f:d4:ce:de:30:e8:ac:d3:cb:21:aa:89:11:5e:6c:09:
f6:0e:32:62:74:a0:6e:9f:86:34:3f:5c:b9:5c:30:18:31:90:
49:21:be:65:0a:16:96:3a:e4:08:d2:5f:3c:55:e5:bb:79:af:
ae:9d:4a:c1:88:87:ed:ad:e1:d2:24:13:4e:06:e3:60:29:b4:
d2:79:91:5d:6e:e1:04:17:66:de:ab:34:88:41:2d:a3:fd:16:
ba:b4:72:f7:a3:c7:38:da:65:a0:21:37:8b:b2:2e:24:da:b3:
f6:66:64:8f:b2:99:55:29:1f:85:c2:a3:e7:23:b5:fb:05:c0:
d1:e1:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:12:18 2025 by rpki-client