Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
File: ZYzRSR-oTUghjThg8zI9ybhoV4w.mft (raw, json)
Hash identifier: MkpGmA88+z8HsftF1LhdVAcP1y4of9jZxOXdADFwiac=
Subject key identifier: D4:6B:28:65:5D:A8:9D:42:F4:96:C6:61:C1:A2:54:0C:A3:F7:C0:18
Authority key identifier: 65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
Certificate issuer: /CN=658cd1491fa84d48218d3860f3323dc9b868578c
Certificate serial: 0197469DBE3A4B1F826EB763DE04378BAD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
Manifest number: 0DE3
Signing time: Fri 06 Jun 2025 19:00:32 +0000
Manifest this update: Fri 06 Jun 2025 19:00:32 +0000
Manifest next update: Sat 07 Jun 2025 19:00:32 +0000
Files and hashes: 1: ZYzRSR-oTUghjThg8zI9ybhoV4w.crl (hash: 95R9W+7buQYOxCijlUojzOvpobQjTPIcbS26SOhPTl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:be:3a:4b:1f:82:6e:b7:63:de:04:37:8b:ad:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658cd1491fa84d48218d3860f3323dc9b868578c
Validity
Not Before: Jun 6 19:00:32 2025 GMT
Not After : Jun 7 19:00:32 2025 GMT
Subject: CN=d46b28655da89d42f496c661c1a2540ca3f7c018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:bf:b6:98:e6:49:31:18:dd:5a:4a:3a:97:
d4:bb:29:57:9a:b0:bf:f2:c6:2b:f2:98:be:6b:3f:
08:0e:a8:73:8f:a1:cb:d8:26:5c:a3:8b:51:51:e1:
3a:6d:75:91:c8:74:5f:f2:42:6c:60:7a:f4:d6:6e:
ed:53:c5:f7:61:51:9a:4a:d6:d5:7d:04:6f:a2:4e:
30:a0:12:f4:60:da:34:7b:0d:01:ab:fd:04:0b:e9:
18:ce:47:3a:5f:ee:eb:4e:ac:8c:bb:c0:93:14:c6:
0d:e8:e9:95:c9:1b:69:57:aa:2c:73:ce:8e:f7:e3:
18:90:da:02:91:cd:7b:4d:dd:e2:e3:be:ba:03:8a:
d1:55:ee:58:b9:97:59:02:c2:68:af:4d:e2:ab:a1:
1f:d6:b9:81:98:2d:42:4a:dc:38:19:fd:14:f3:e1:
a5:b3:e3:be:4e:48:31:87:f1:db:32:35:d8:91:61:
99:02:0a:b4:20:73:bf:ae:98:23:89:ea:28:17:e4:
08:ae:03:c6:c5:9e:74:1c:5b:15:f4:80:a1:43:3a:
58:de:27:bc:22:ef:5d:46:67:56:3d:50:97:59:3e:
44:78:44:da:44:fe:2b:70:01:85:46:1d:3e:c9:95:
85:79:98:c9:cb:5f:24:fc:c6:b0:4f:89:0f:a0:28:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6B:28:65:5D:A8:9D:42:F4:96:C6:61:C1:A2:54:0C:A3:F7:C0:18
X509v3 Authority Key Identifier:
keyid:65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4c:89:92:0b:14:f5:f7:bd:49:ab:3c:14:42:cf:11:59:f4:
b3:7c:ec:3c:96:e5:f7:db:8a:41:a9:ce:6e:2d:e5:de:df:15:
99:26:75:43:8d:51:74:df:63:82:bc:f5:de:48:67:b9:3a:34:
47:74:f5:b4:b9:e4:26:ab:3e:c4:61:b6:58:39:5d:15:13:06:
10:27:4c:8a:df:c9:6e:32:c6:7e:32:b9:3e:b5:6a:8c:7b:94:
52:d6:ac:0e:83:31:51:c2:2c:15:fc:9b:ff:e4:de:70:20:0b:
27:cf:e9:f3:43:fe:da:44:3c:2f:c7:14:96:9a:6c:04:ad:7e:
75:fd:f1:16:78:1d:3d:b1:f3:5f:fc:1b:13:a5:01:08:af:27:
24:62:95:d5:2d:d3:8d:50:b1:cc:49:91:0b:9a:f5:9a:80:72:
d6:b4:81:9c:05:9b:81:3b:7b:f6:99:69:26:45:c3:04:86:bc:
01:db:82:31:e8:38:0e:87:03:b6:52:7e:92:1e:a0:e2:9d:41:
f5:64:93:d8:db:db:34:b4:9a:2e:21:91:84:f9:ff:29:84:7a:
e4:bb:71:22:3c:aa:aa:6d:ab:00:43:89:5c:1d:7b:d9:ec:21:
24:64:7b:cf:80:56:18:e4:9e:62:86:97:6b:34:99:53:f3:9e:
8c:59:49:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:44 2025 by rpki-client