Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: 3MUNsVuzuK9B+2em7L//5I5W7CX4WidVQVCYDSUaDH8=
Subject key identifier: 27:AB:51:8F:93:16:40:CC:07:FA:E9:0A:C1:97:9C:E7:22:8B:F3:B5
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 01974A7A7AD2F1FB10FCE3315E29241E241E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 06BC
Signing time: Sat 07 Jun 2025 13:00:30 +0000
Manifest this update: Sat 07 Jun 2025 13:00:30 +0000
Manifest next update: Sun 08 Jun 2025 13:00:30 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: qNsNd32aRTu7BWKjgbyfFSql+BgZxM5qZhXfoJHyD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:7a:d2:f1:fb:10:fc:e3:31:5e:29:24:1e:24:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Jun 7 13:00:30 2025 GMT
Not After : Jun 8 13:00:30 2025 GMT
Subject: CN=27ab518f931640cc07fae90ac1979ce7228bf3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:2f:05:6a:77:43:ea:dd:28:5e:e9:0e:a5:
2f:a6:24:dd:ff:c7:e6:d5:55:96:d0:ca:a0:fd:d0:
14:92:d2:75:f4:b3:ab:bc:7a:23:a0:d5:63:55:15:
fb:6e:3d:a5:f2:44:c3:5f:e0:2e:e9:51:cf:14:9f:
fc:06:40:07:b5:78:95:02:e7:6e:e7:dc:56:12:02:
2e:1e:9b:67:49:b5:f9:fb:f0:77:9d:6d:c7:fc:61:
52:f5:02:0b:45:80:92:73:65:74:e7:cd:ec:3f:0e:
5b:67:6b:15:7f:5c:37:6f:6c:63:f3:99:f7:56:a7:
6f:d8:f8:fc:55:5b:12:b9:a2:9d:e0:71:2f:84:86:
7b:b6:6a:a2:02:b2:7d:90:e9:90:f0:eb:2f:44:a0:
9e:8a:4a:0e:b2:c3:93:cd:05:a3:58:a4:de:d4:53:
5f:bc:a1:aa:77:d0:4e:6e:06:96:1d:38:0a:d5:e5:
4d:b4:4b:9d:44:0b:23:56:80:22:e9:90:d7:13:27:
eb:15:fe:a3:85:70:65:87:d4:52:02:60:94:f7:b1:
04:be:22:d9:eb:63:f3:91:49:aa:a5:2a:86:86:6e:
1b:5b:b2:04:c2:5a:4b:b4:1e:db:3b:83:eb:47:17:
95:f9:96:49:b7:46:81:19:4a:2e:37:bf:62:e4:80:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AB:51:8F:93:16:40:CC:07:FA:E9:0A:C1:97:9C:E7:22:8B:F3:B5
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ff:63:3b:5b:12:cf:ab:7e:97:88:d4:f1:89:fa:ac:99:77:
78:30:db:b7:c7:12:14:49:fb:3b:f2:fd:52:f1:01:ef:0c:46:
83:0e:c3:e1:0a:e3:a4:99:73:16:6b:fa:e2:65:f9:c6:36:d8:
2a:06:84:dd:39:c4:7c:1d:4c:08:5d:e0:6a:16:fd:7d:7c:f9:
53:44:49:5e:37:58:81:fc:2d:e1:b8:bf:ec:06:24:ca:a8:ac:
5c:77:24:e9:22:70:0f:7c:dc:93:31:80:f3:94:34:a1:45:60:
3d:ff:df:50:57:b8:11:6d:7f:82:f5:a8:d1:66:79:2d:e6:51:
89:66:33:69:bd:7e:e5:d1:3c:19:b1:5f:ff:11:4e:31:b0:39:
5e:c1:89:d1:d9:17:b6:54:af:62:5a:68:51:c7:87:e7:90:b8:
60:29:2a:22:fe:69:58:26:d9:ea:97:1e:e5:e1:72:69:e1:d4:
94:51:c1:cb:3e:5a:1b:77:c8:88:1b:44:52:5c:20:5c:17:24:
74:6b:18:fb:66:69:ef:09:f7:ae:9b:29:ac:da:00:5f:1e:06:
b4:09:c0:30:49:f3:fa:58:cf:6a:d9:72:d0:91:20:1f:59:15:
60:c2:b9:d1:89:2b:c6:8f:1a:bf:c1:a4:06:2c:d9:88:03:84:
86:f3:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:33 2025 by rpki-client