Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier: 9xsbNML68CHcnxNkY4gjwfsmD8bLsR5eclDhlYyhn90=
Subject key identifier: A6:16:95:0C:54:E5:55:87:77:A1:4F:40:3B:C6:22:6D:78:46:02:CB
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial: 01974D45321DDE4EAE65F5D5959C24CD6275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number: 12E5
Signing time: Sun 08 Jun 2025 02:01:09 +0000
Manifest this update: Sun 08 Jun 2025 02:01:09 +0000
Manifest next update: Mon 09 Jun 2025 02:01:09 +0000
Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: g1NW17vPiWIPsym2tOLyyu6m98pM633nin5XR5Jk5ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:32:1d:de:4e:ae:65:f5:d5:95:9c:24:cd:62:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Validity
Not Before: Jun 8 02:01:09 2025 GMT
Not After : Jun 9 02:01:09 2025 GMT
Subject: CN=a616950c54e5558777a14f403bc6226d784602cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:f6:2b:5b:7d:f7:4f:bd:12:bc:54:6f:79:
56:94:98:c8:8a:f5:79:71:69:09:cb:1b:95:93:63:
7f:42:7f:bd:08:79:71:fb:fd:d4:b2:44:76:89:54:
28:85:37:22:72:17:1e:57:ff:e0:26:9f:60:08:66:
ab:bd:bd:76:85:6d:8c:4f:35:dc:68:39:56:ae:a8:
e7:2a:11:37:75:3a:d1:30:6b:55:61:4d:1c:1f:07:
91:b0:49:e1:ac:6f:7d:9e:b1:8e:fd:79:49:dc:aa:
01:0a:c7:10:50:d8:93:23:35:12:f2:02:c9:40:8a:
67:01:0b:9d:ee:f0:af:9a:86:e7:26:1f:5b:74:95:
74:fe:45:28:39:10:10:ed:72:52:a1:f1:54:3b:2e:
39:13:88:0a:3f:21:c0:58:86:3c:4d:31:ef:39:76:
2e:69:6a:3f:47:a7:29:eb:9b:63:28:2d:da:a5:c5:
ec:c9:9f:48:76:c6:8c:e8:65:56:49:0f:00:81:9e:
99:5a:ff:e3:54:42:f8:7e:7f:b1:a0:ba:79:d7:ed:
ca:fc:68:02:1d:da:06:4e:2a:06:b5:92:ee:f0:e4:
2a:b4:40:04:23:e9:0e:cc:91:5d:a6:7a:c3:20:25:
c6:dc:f5:a3:f8:c9:3e:fa:a0:0e:88:28:1f:45:dc:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:95:0C:54:E5:55:87:77:A1:4F:40:3B:C6:22:6D:78:46:02:CB
X509v3 Authority Key Identifier:
keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:27:a2:f1:18:b8:0d:f3:f1:a7:cd:54:11:da:f5:75:aa:58:
0f:ab:0e:e9:eb:d0:0b:ae:e6:bc:36:ae:26:42:cf:df:fc:bd:
60:b9:62:f6:8d:b2:51:2c:f4:58:40:c8:31:fc:8c:7a:8c:8a:
0d:41:36:14:79:5b:2b:00:22:00:db:ae:2f:ba:40:d6:dc:20:
0d:67:12:e6:4e:1a:0b:97:93:94:b6:6f:5f:0c:15:d0:0f:4d:
f0:b5:85:11:dc:fc:21:df:20:f3:7e:1f:3c:22:5c:c1:4f:65:
88:9a:5b:97:0b:24:38:53:f8:5a:dc:82:2b:0f:71:6c:3d:c0:
8e:fd:84:82:e2:bf:67:7a:97:a1:1a:f4:c1:6d:40:8f:a2:9b:
0a:43:d0:1e:08:75:18:8f:ee:af:d8:55:01:eb:b1:36:86:e2:
17:fb:30:80:6c:68:13:92:11:95:5d:b3:5f:5c:af:ea:b4:3a:
b8:f9:4d:ff:ae:69:ff:77:ee:3f:d0:37:75:ea:13:5e:aa:6c:
4c:8c:27:50:ba:ea:26:ad:0b:f0:aa:2f:0b:8b:2e:78:18:0a:
d6:f3:35:6d:03:5b:23:e4:d1:f3:f2:27:e1:01:ad:f7:fa:d0:
fb:0b:cd:f2:e3:a8:fd:59:cf:b9:f6:13:58:c4:4d:43:4e:71:
0e:cc:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:30 2025 by rpki-client