Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: rkJQR5w1u6GgE+akHCh+nolVC07F2scWveLlebGS0V8=
Subject key identifier: 52:F9:E7:D3:09:0C:84:06:E4:FE:A2:6D:C3:07:68:C4:FF:9C:51:85
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 01976960DBDEE3327528DFA0267FA348B01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0F1A
Signing time: Fri 13 Jun 2025 13:00:44 +0000
Manifest this update: Fri 13 Jun 2025 13:00:44 +0000
Manifest next update: Sat 14 Jun 2025 13:00:44 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: BKVeZnhddt7hWgujinYQ+rDKwZ3iwAJ5RMam+OuZDA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:db:de:e3:32:75:28:df:a0:26:7f:a3:48:b0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Jun 13 13:00:44 2025 GMT
Not After : Jun 14 13:00:44 2025 GMT
Subject: CN=52f9e7d3090c8406e4fea26dc30768c4ff9c5185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:cf:53:44:11:96:86:55:e0:2d:11:50:9e:
c6:2b:02:7a:d1:53:28:88:88:ad:19:bc:d0:50:56:
e9:c3:fe:fc:9b:f9:86:3b:9d:bb:fb:54:72:e1:ac:
b4:2a:f5:89:5f:df:24:71:7f:c8:d1:1f:fe:34:66:
d5:c0:54:f0:6a:3d:81:3a:47:96:9d:3b:93:f9:69:
8a:85:69:fd:f3:87:99:c3:91:37:20:52:aa:e6:7f:
d1:28:40:d0:3b:65:88:2b:2c:f5:76:52:42:5f:e7:
54:67:94:55:a6:a9:c6:e1:ee:0e:4d:6e:be:bb:6e:
3d:23:22:9f:66:5c:be:70:79:a0:40:b8:f2:60:47:
d8:5c:96:2f:6f:5c:03:ee:ef:4e:26:e9:56:50:56:
1d:6b:b5:d1:94:4c:0f:03:fa:50:9d:fe:39:52:d5:
b3:ec:a3:5e:bb:11:26:c1:77:ef:e5:df:7a:31:13:
40:8a:53:a5:8c:75:d3:02:a1:2c:c4:ad:a9:23:e4:
41:40:7b:42:56:a7:42:40:c5:7f:4d:7f:29:ee:0c:
77:67:6a:9f:0c:d0:f0:3b:20:55:36:66:34:c1:b4:
b2:35:db:c9:1b:71:f4:30:4e:d1:e5:81:40:1c:40:
70:10:e6:d8:2e:0e:fa:ea:27:71:f4:99:c3:0c:4c:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:E7:D3:09:0C:84:06:E4:FE:A2:6D:C3:07:68:C4:FF:9C:51:85
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:dd:e2:5e:d5:00:27:5e:97:ad:1c:fe:88:97:d1:72:70:
d5:06:44:52:83:c6:ac:2b:c5:9a:4d:11:ca:dc:d8:fd:1f:fb:
a9:65:83:b4:a6:30:2f:b9:e3:e8:ac:6b:99:64:c7:cd:76:ac:
fa:38:8f:30:27:8e:28:8b:12:6b:81:a3:f4:82:d6:e8:1d:e1:
51:95:df:01:8b:5e:89:cc:83:8e:3d:43:b4:de:75:9f:7a:29:
56:4e:46:1e:95:3f:68:27:8d:c4:e1:0e:da:86:bf:4d:65:a2:
92:05:14:01:20:f8:10:a6:f0:dc:ef:bf:65:e0:d1:bb:54:5f:
48:dc:d5:30:4c:12:41:64:65:cb:48:f9:e6:2a:a8:04:dc:7f:
5d:8a:5f:fe:80:f4:87:b8:fc:48:23:e5:81:e4:f3:a5:4d:f2:
ea:ec:1b:62:ea:be:39:97:be:a8:eb:9d:b4:1f:81:0a:d6:56:
78:81:a5:b9:6e:37:14:d9:1b:1f:94:43:9c:e9:38:0a:e2:bd:
b0:2f:c2:72:57:30:9d:c0:23:26:7e:20:ab:c9:19:cd:fd:9a:
43:0c:d6:8e:78:bf:e7:b6:2d:3f:f9:e6:22:fe:a0:b7:5e:d7:
24:72:4d:56:1e:e0:ca:5a:fc:5d:42:9e:ee:14:b3:4c:ca:9d:
de:fc:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:11:13 2025 by rpki-client