Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: Ts5D6PYQuWnGQzcglrIQtP8j6XYRTa+uuzgCa0LdAJs=
Subject key identifier: F8:3E:5D:59:50:12:7E:DE:54:C9:03:70:5C:A2:11:AE:FE:1B:02:5B
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 01974A7BA39A8DFFF6DCAAF7CDD4C068E87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0ED4
Signing time: Sat 07 Jun 2025 13:01:46 +0000
Manifest this update: Sat 07 Jun 2025 13:01:46 +0000
Manifest next update: Sun 08 Jun 2025 13:01:46 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: eWYuvYBV77ZoIlkCm1NEF2mJBcqvw+uLIWZQPFXKoGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:a3:9a:8d:ff:f6:dc:aa:f7:cd:d4:c0:68:e8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Jun 7 13:01:46 2025 GMT
Not After : Jun 8 13:01:46 2025 GMT
Subject: CN=f83e5d5950127ede54c903705ca211aefe1b025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:ba:d3:0a:d2:c4:48:cd:9b:20:7d:be:60:
b3:26:92:a0:57:16:1c:3d:7d:67:5a:d5:9a:f9:bf:
a8:e1:2d:50:94:19:0c:88:ec:2e:90:ad:2a:16:cc:
31:ce:e6:e2:6f:67:2a:4b:ae:a1:6f:24:5a:9e:27:
9b:81:c3:fc:ff:fd:4c:0f:9c:b9:4a:a3:8b:b3:eb:
a5:ed:4b:4c:39:42:92:84:61:61:4f:c1:9e:c0:84:
00:b8:b0:4e:9e:3f:c3:28:68:09:6d:65:fb:bf:17:
8b:ce:16:19:91:e9:59:e0:56:86:c1:82:86:78:df:
a6:ea:40:45:f2:08:15:a3:ad:b6:b3:cd:32:8b:53:
33:03:d2:9e:45:d7:ce:09:ab:90:ac:28:47:28:7c:
e5:61:14:a5:67:36:f5:70:7e:85:6e:e0:68:f9:56:
e7:e4:49:76:78:23:69:9e:d9:09:aa:b4:a0:c6:f8:
f0:85:f6:ed:50:e9:b8:2c:50:38:8c:fb:f7:3e:0e:
d0:4c:47:3a:4d:18:18:64:0b:35:7a:66:d5:dc:ef:
30:ff:02:07:be:9b:80:a5:6f:ea:7c:fa:6a:2c:b6:
f1:55:40:bc:6a:5e:03:ae:08:8e:5f:bf:25:9b:2f:
ad:81:b6:30:ef:d7:07:51:b5:d9:d2:05:be:90:b5:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:5D:59:50:12:7E:DE:54:C9:03:70:5C:A2:11:AE:FE:1B:02:5B
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d7:41:b5:66:f6:88:b8:ce:ac:4a:21:70:57:e2:3e:e0:d7:
27:ce:25:8b:97:3a:fe:a3:dd:2a:c0:1d:03:3f:1d:1a:49:d6:
65:ca:f0:9f:e9:a3:4f:f6:8c:48:69:cd:03:46:8c:b4:05:95:
9a:04:b6:ae:41:0a:2b:1f:b0:dd:f7:6a:91:6b:48:b3:3c:ed:
fd:2b:2b:da:5e:0e:28:79:9a:4b:fe:ce:9f:9f:95:43:0b:a1:
86:0e:9b:3a:d3:74:03:5d:4b:ef:16:b5:b9:c6:cf:a5:5a:8a:
77:58:07:fe:56:1c:89:1b:5c:24:04:25:60:2d:21:5c:ed:2b:
e6:29:8d:be:89:02:b6:bb:da:4a:53:b4:b5:80:12:df:72:96:
2f:86:71:99:c9:ba:46:4f:28:44:00:ea:0d:1c:b0:ad:26:3b:
f9:8c:15:f2:c0:f1:6b:c2:fe:98:19:f2:0d:1b:99:42:c4:47:
d1:62:3d:6b:c6:ff:5c:a9:ed:18:43:86:e2:c4:93:2f:b3:b5:
a8:da:3a:05:fa:ab:5b:e8:0a:f2:e8:26:73:73:18:ea:41:ee:
8b:e7:e9:5a:8b:96:4b:24:c8:76:e4:09:64:e4:05:24:40:55:
7f:37:2c:70:b7:aa:45:b7:89:e9:4b:ac:1a:64:51:00:4d:5c:
40:de:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:50 2025 by rpki-client