Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
File: zfQLRgtIuPNm_sXKObMcOAxkWjI.mft (raw, json)
Hash identifier: xeCJALUl9WiLbONzjb6X4AKRbvuO7MG6HnnR0tR0/uc=
Subject key identifier: E8:3F:40:94:E1:44:84:6B:D5:2B:EB:48:3D:73:80:D8:03:3D:5C:08
Authority key identifier: CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
Certificate issuer: /CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Certificate serial: 01975158FD7A86AB817B688D56A3553C4D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
Manifest number: 47
Signing time: Sun 08 Jun 2025 21:01:15 +0000
Manifest this update: Sun 08 Jun 2025 21:01:15 +0000
Manifest next update: Mon 09 Jun 2025 21:01:15 +0000
Files and hashes: 1: zfQLRgtIuPNm_sXKObMcOAxkWjI.crl (hash: H1PXDdvZ1e5UD9Ol3fHhgbor6WB/Nrz+PdavkAxHlPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:fd:7a:86:ab:81:7b:68:8d:56:a3:55:3c:4d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Validity
Not Before: Jun 8 21:01:15 2025 GMT
Not After : Jun 9 21:01:15 2025 GMT
Subject: CN=e83f4094e144846bd52beb483d7380d8033d5c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:60:8b:07:b0:38:d4:99:41:9f:40:25:66:
db:f8:47:81:ba:98:15:fd:91:12:98:e7:91:55:7f:
25:2e:10:0c:67:69:05:d7:0e:ed:f6:38:00:92:fe:
24:0c:79:19:04:a8:c1:d7:74:54:34:40:d6:ea:2c:
9f:87:6c:59:34:66:b4:35:98:bb:b5:56:80:69:f0:
63:5a:cf:a4:41:7b:80:8a:c6:12:1e:5f:37:8c:a7:
13:02:8f:b0:eb:bc:b1:a7:5c:ca:54:6d:86:74:e1:
0e:1b:f9:de:93:c4:c9:a7:a9:f7:3a:ac:b8:20:e3:
3e:56:a7:74:69:a8:f6:e4:10:b9:c0:23:aa:81:eb:
86:a3:db:f8:91:57:dc:1f:26:45:4a:2a:7d:e3:60:
aa:fc:ff:c7:64:ee:78:1a:fe:55:59:ce:91:d2:d4:
94:50:02:a7:23:0d:8d:29:59:14:be:90:b2:d6:d4:
33:d6:04:68:a3:8f:22:17:65:c1:0d:3b:51:3d:3f:
dd:c8:f8:bf:a7:14:9a:66:73:40:35:21:51:9a:1f:
3d:e8:9b:83:c1:bd:b0:c9:10:d3:99:c0:c9:3e:e6:
f5:8e:0f:37:da:df:30:fd:be:54:9f:14:80:2c:ed:
f8:45:df:e2:19:88:3d:90:fe:0f:28:78:88:fc:7b:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:40:94:E1:44:84:6B:D5:2B:EB:48:3D:73:80:D8:03:3D:5C:08
X509v3 Authority Key Identifier:
keyid:CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f9:92:61:93:c3:5f:bd:fd:be:60:04:13:c1:f7:9e:a7:2e:
b6:b8:83:93:6d:ce:ac:98:b4:96:56:26:50:82:38:eb:9d:5a:
e3:97:ac:b7:72:46:57:b1:d2:a9:f0:49:4e:25:f6:3c:64:69:
78:de:a4:10:66:8f:c3:31:fd:09:ee:26:52:a9:e4:07:73:c4:
d7:81:6c:47:1c:f3:4c:7a:6b:9f:52:28:61:5c:4e:58:33:44:
8e:75:aa:4f:53:6c:b0:64:13:a7:07:9c:18:e6:19:69:e8:4a:
2e:35:90:93:03:5e:ff:d7:ab:34:71:60:d1:d0:dd:f8:bd:f8:
7f:b1:83:6a:8d:16:25:63:80:6a:aa:ef:11:2d:54:52:17:3c:
f3:45:b3:57:c0:91:69:2d:16:42:76:39:e5:17:e7:e9:27:22:
92:fe:f1:f7:77:6b:0a:3a:cb:e1:12:58:60:b8:c8:17:ca:8d:
da:1b:a2:bf:00:4c:47:84:fa:ee:4a:9a:3d:c1:ac:28:e6:c0:
00:4e:3c:bb:be:92:7f:87:19:0b:81:a0:7c:39:17:f8:81:86:
d5:d1:96:df:f5:1c:80:3e:90:69:72:07:3b:fc:5a:d0:70:b2:
07:97:79:f1:d8:0b:99:6b:0c:8c:92:89:19:b7:8d:38:89:a8:
e9:91:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:36 2025 by rpki-client