Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier: wde4URwwVMxtsAFhUSJwDw0tdL/WjaVcArr3mbJv6t8=
Subject key identifier: B6:4D:23:5D:25:DA:C1:B4:E5:72:AF:A3:9D:94:1B:D4:03:12:67:F0
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial: 019746674A75D15F3E29F3CAE5D2D884E235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number: 2F
Signing time: Fri 06 Jun 2025 18:01:03 +0000
Manifest this update: Fri 06 Jun 2025 18:01:03 +0000
Manifest next update: Sat 07 Jun 2025 18:01:03 +0000
Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: Tsl0U35HbYQeXCH0U4BxwMHJIavetB8T1Jtkzp9gQ3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:4a:75:d1:5f:3e:29:f3:ca:e5:d2:d8:84:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Validity
Not Before: Jun 6 18:01:03 2025 GMT
Not After : Jun 7 18:01:03 2025 GMT
Subject: CN=b64d235d25dac1b4e572afa39d941bd4031267f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:27:21:13:56:43:bf:f9:fe:35:a4:ab:c6:
13:74:3e:0e:5a:c5:73:14:85:f2:a5:25:39:54:28:
a8:28:e5:36:87:79:cb:6f:6d:61:f2:d5:d8:40:8b:
12:56:bf:13:65:30:1e:8d:42:35:f3:66:cf:f7:07:
4a:8b:2d:17:52:2f:1b:6e:03:98:c9:70:bc:5f:e9:
88:06:f1:16:2d:8d:87:8a:f7:5d:9a:98:63:5a:4b:
c5:2f:0c:56:3a:41:c9:07:a5:33:89:7a:25:3f:85:
e6:d0:a2:38:52:f5:eb:a8:c4:89:da:f2:cc:13:be:
dc:81:bf:f9:a7:49:2c:fb:9c:a9:1d:01:33:bb:5c:
2e:e2:34:07:a4:c0:57:f2:81:53:b9:90:d4:60:72:
0a:09:51:05:0f:9a:61:29:70:51:09:60:1b:44:b1:
f1:29:59:88:54:3f:23:95:99:78:db:d7:6b:37:cc:
55:32:c2:3d:dc:76:2e:37:c6:38:2b:c4:22:e7:0a:
74:da:5c:28:74:44:cb:13:4a:f4:8c:61:d2:6e:27:
07:8a:48:68:d4:24:5a:c8:99:d1:1e:a4:54:7a:72:
86:48:ac:ea:1d:62:7b:e9:2a:04:c4:58:a3:4e:c8:
79:2c:25:d3:53:ac:c6:c9:5d:13:fd:ff:ef:cf:e7:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:23:5D:25:DA:C1:B4:E5:72:AF:A3:9D:94:1B:D4:03:12:67:F0
X509v3 Authority Key Identifier:
keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9b:25:85:fc:e5:58:03:c8:16:02:bb:b4:3f:45:3b:e2:4a:
25:36:a9:bc:93:d3:5a:8a:ce:d1:dd:fa:54:a4:68:87:0d:12:
06:bf:70:15:79:1b:06:f6:70:65:9f:07:f6:f6:d2:01:a5:7a:
8d:8f:59:d7:2f:17:65:20:ff:bc:89:0b:93:86:a0:65:d6:7a:
cf:c0:53:eb:fb:76:9d:db:82:7d:ac:cd:40:4f:ec:31:3a:07:
c5:d6:d2:71:ea:56:cd:05:58:b0:d1:86:6e:03:60:e9:3c:cd:
58:4c:3d:72:bb:79:8a:d1:11:d2:70:3f:a3:ad:1d:29:e6:c7:
4e:2e:71:3f:60:5c:8e:f6:d7:49:16:8b:2f:42:c8:e3:b2:8d:
c2:b5:3f:36:c9:dc:2b:ed:87:fc:e1:2a:2a:07:1e:00:db:b1:
5d:b4:b7:de:f9:a9:95:18:02:10:5d:ed:5d:be:a7:1d:3e:c0:
dd:31:c4:0c:6c:2f:d9:a3:db:45:93:7e:08:25:ac:70:c2:2f:
1e:7e:a4:77:01:b6:7d:eb:f1:10:c4:f2:ef:02:63:80:24:15:
ee:d5:2b:05:5c:84:aa:f4:e0:c8:9c:2d:10:16:57:9b:91:9c:
55:9d:af:4c:3e:d1:74:70:9d:cf:78:bc:9a:2b:1e:2e:54:e9:
6f:07:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:36:42 2025 by rpki-client