Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: dI1mwm1ghHptbybEvTwHsc0I7yuYFb6vMJKQ7RS24W8=
Subject key identifier: BD:79:BB:08:A4:DF:4A:DC:7B:DC:55:8B:27:6F:F8:3A:BD:E7:3D:AF
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 01975422BD54638273E6E407B8A7DF7E9483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0F0F
Signing time: Mon 09 Jun 2025 10:00:52 +0000
Manifest this update: Mon 09 Jun 2025 10:00:52 +0000
Manifest next update: Tue 10 Jun 2025 10:00:52 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: V6fCVS9SX5R8zdRgZ1iV2Sb/tRB8E2fwtHjeTb3BcW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:bd:54:63:82:73:e6:e4:07:b8:a7:df:7e:94:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Jun 9 10:00:52 2025 GMT
Not After : Jun 10 10:00:52 2025 GMT
Subject: CN=bd79bb08a4df4adc7bdc558b276ff83abde73daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:d1:68:8f:af:7e:73:38:ff:22:79:c3:01:
2c:df:89:f1:5d:71:52:79:c2:1d:50:c1:a4:a7:fd:
84:fb:ea:0b:66:e7:bc:cb:e5:d7:8a:b6:06:c4:c8:
09:ba:0b:fd:ee:b8:1a:a5:87:14:d3:7c:a2:fd:81:
57:e3:b3:e8:05:e8:fe:b9:df:5f:ff:80:4b:57:c7:
87:6d:a6:af:59:9b:81:9b:f0:85:e6:47:75:be:07:
ac:34:13:6e:f5:58:71:21:67:7f:a3:11:32:44:53:
c2:f3:06:9c:c9:d4:77:c9:5c:4c:d0:4b:8c:c6:99:
3b:d4:2a:0b:b8:ef:60:46:69:2c:47:4a:2e:d6:a0:
7b:fd:c9:f6:30:71:3a:55:59:42:9c:2e:cb:e6:4c:
fb:ee:30:ac:39:65:69:d5:d0:4c:53:ae:ed:4c:b6:
41:b9:a7:31:da:e0:d8:87:89:a5:60:17:83:e7:32:
51:a6:59:0a:ed:ea:aa:ac:4d:cb:ec:a3:21:6b:85:
1c:1a:d0:70:a1:e4:49:b2:5b:45:e5:cd:ff:bf:7f:
49:57:90:10:db:4c:d4:0f:a7:de:d7:96:3e:fb:45:
73:30:de:f1:bc:b9:d0:63:0a:c5:e6:28:ac:a6:4e:
56:c3:f3:39:22:7d:95:26:ec:55:38:17:99:64:1d:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:BB:08:A4:DF:4A:DC:7B:DC:55:8B:27:6F:F8:3A:BD:E7:3D:AF
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:dc:a3:49:5e:4c:96:8c:82:ce:1e:e2:f7:44:4c:df:43:8c:
49:5d:21:c3:b7:f8:d2:e4:bd:7e:75:61:d0:12:20:f0:69:11:
9e:47:72:b6:f1:2b:f7:f9:fa:d0:85:29:fb:9a:4d:4f:26:5c:
8a:d7:d3:ac:5d:06:00:ad:1d:3e:10:20:58:9e:b3:76:d0:10:
4d:24:53:22:12:38:6f:c0:f1:02:26:7f:34:af:15:b3:9e:28:
04:f5:3d:c3:71:c0:c4:24:41:5d:fd:ff:a7:41:05:ec:eb:2d:
b6:a4:dc:63:c0:4a:d9:13:d0:04:8f:cf:b8:f3:09:7c:69:f0:
69:0e:f8:6f:6f:ee:0c:4f:64:64:2a:cc:79:b7:d0:34:96:32:
ba:50:81:9b:27:fe:8a:f3:84:0c:83:1e:b6:23:21:5b:0e:81:
81:4f:b6:37:74:6f:40:c4:7e:4a:5b:e1:cd:8f:07:bb:fe:6b:
e2:a8:e7:e3:e2:b7:d6:69:a6:ca:23:95:fa:39:01:c2:b8:21:
f6:6a:0c:88:e7:7e:61:7b:2a:fa:1f:f3:42:73:00:2e:14:b6:
e7:0c:e7:36:0f:93:60:a1:13:7e:60:ad:6a:5e:b2:90:34:ff:
30:a1:36:38:3f:5c:6f:41:c2:b8:15:34:ee:51:a1:9b:20:6f:
af:28:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:32:47 2025 by rpki-client