Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: 7Z2VWzzTDnXFjI6WTUm6i9DhaDswmtl5jRz6pI/Gvw4=
Subject key identifier: D9:E1:4D:EB:0F:E7:CA:5F:CE:96:5C:9B:3A:71:B9:E4:8F:65:63:AB
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 019761A7539522D316F42D3D134C14C15A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0F16
Signing time: Thu 12 Jun 2025 01:00:45 +0000
Manifest this update: Thu 12 Jun 2025 01:00:45 +0000
Manifest next update: Fri 13 Jun 2025 01:00:45 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: gvbd3efle7AOSyXrI5yEWA/7DTtZtvNGo8EC92boyro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a7:53:95:22:d3:16:f4:2d:3d:13:4c:14:c1:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Jun 12 01:00:45 2025 GMT
Not After : Jun 13 01:00:45 2025 GMT
Subject: CN=d9e14deb0fe7ca5fce965c9b3a71b9e48f6563ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:9c:35:99:cf:b3:0b:b6:1d:ed:7a:fa:eb:
2d:c3:89:dd:33:8e:ce:42:b5:4c:c3:62:db:04:0b:
a1:93:4c:f3:2e:91:10:47:5c:27:44:32:e7:76:b8:
04:e3:de:a3:d7:43:da:db:dc:00:67:45:c7:96:28:
d5:0b:05:97:06:ba:7a:eb:61:d8:f5:95:37:cb:15:
03:1f:c9:6d:08:d8:0e:9f:12:fd:2b:b9:fa:47:34:
e4:16:2f:50:33:86:1d:3a:d1:9b:10:70:ff:b0:34:
47:4c:e1:e9:0b:ba:01:c0:d7:81:ba:71:3d:69:3a:
f9:b6:56:02:20:68:aa:3b:7f:30:f5:0d:81:40:fa:
e3:4d:1e:69:8c:3b:10:b0:df:c4:df:9a:6a:c4:84:
c8:a6:65:86:8c:28:5a:f9:06:6a:e4:d1:e4:6e:78:
8a:1b:42:09:87:f8:e0:4d:96:14:7c:ea:d1:f2:dc:
8b:22:3d:38:00:f3:62:8b:07:a8:29:b2:81:94:ea:
61:d2:2b:3f:fe:3f:24:ac:60:98:7e:70:a6:6f:47:
c9:a4:69:2f:f5:57:6c:9c:f2:7b:ba:88:3c:e9:97:
b6:e7:7b:a4:b1:17:8d:bd:6c:04:5a:1e:2b:ea:b2:
fa:d0:e8:59:19:64:fa:6e:58:38:d6:1f:10:5b:2a:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:4D:EB:0F:E7:CA:5F:CE:96:5C:9B:3A:71:B9:E4:8F:65:63:AB
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:46:fd:86:9d:25:e2:5a:ff:29:35:2e:24:8d:53:b5:3c:4d:
ea:f1:db:78:89:d6:f1:b4:02:aa:f1:31:d7:dd:fa:9c:d1:60:
0c:f2:14:e4:4d:0b:f2:03:77:c7:d9:cf:fe:1b:35:e4:aa:f4:
88:42:35:c9:a6:59:ef:77:c3:d3:cd:39:f6:17:8b:3e:1d:cf:
ab:fe:36:f1:a5:ed:44:ae:8a:14:65:e1:66:3b:65:52:23:00:
c4:ec:da:42:0c:fd:35:54:47:ba:d4:d6:e3:4d:42:33:12:81:
7b:17:ef:03:47:2b:d6:c2:4c:2f:a1:49:0f:4b:31:a8:3f:dd:
3e:7d:ef:73:a1:1e:e3:84:5d:4a:e8:09:10:d3:64:8d:04:7c:
8a:d0:89:2a:ba:dc:e3:7c:4e:3d:43:46:52:16:83:48:94:b6:
ad:66:66:e7:b6:08:fd:e1:b0:78:10:0d:09:85:a4:e7:91:85:
e6:30:aa:ef:4f:d3:b8:6f:86:a5:17:6c:79:02:d3:42:5b:c6:
b3:60:52:af:16:48:9d:c0:b7:58:62:7e:f5:fe:f5:82:f2:5e:
a4:70:4c:f7:fd:67:2e:9c:03:e2:f6:7d:2d:cc:b5:0e:94:f2:
48:0b:d4:42:d9:c0:dc:77:39:38:cd:ac:04:cc:3c:cd:cc:8a:
af:7b:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:26:32 2025 by rpki-client