Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: ZM/XpAG4ZPe1NlaXJ4YqzJk2WYXWoxKosChQEBmT1Zo=
Subject key identifier: 37:83:93:F4:CA:43:79:38:C9:31:1F:CF:0D:13:14:42:88:26:62:63
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 01974666E03F53F629D4B9735FAB48211E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 029C
Signing time: Fri 06 Jun 2025 18:00:36 +0000
Manifest this update: Fri 06 Jun 2025 18:00:36 +0000
Manifest next update: Sat 07 Jun 2025 18:00:36 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: YAXB25Ua5b8ngp9v/zNekSj1QLKEO0OLa3EkkULeS7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:e0:3f:53:f6:29:d4:b9:73:5f:ab:48:21:1e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Jun 6 18:00:36 2025 GMT
Not After : Jun 7 18:00:36 2025 GMT
Subject: CN=378393f4ca437938c9311fcf0d13144288266263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:c1:a9:83:be:cf:0c:e8:a3:37:1b:13:d2:
23:bc:9a:de:78:57:91:fe:e1:24:d7:17:1b:16:93:
b3:af:a6:58:c3:a0:b4:e7:cb:93:59:37:a0:a4:bb:
1f:5c:49:89:e4:09:da:28:83:6c:d0:52:b3:34:fd:
51:f3:34:e9:25:93:b2:60:38:c8:48:b5:c5:b3:b0:
c1:79:c0:b6:f7:88:a9:a7:29:e7:75:48:c7:b4:94:
df:13:de:93:a7:4c:36:d0:cd:dc:6f:4f:fd:6b:6f:
fb:f8:51:c3:b2:e4:a2:6c:61:82:e3:89:31:58:ca:
c7:ba:1f:71:bd:f1:d2:d1:b2:27:7a:e1:f6:c5:ee:
64:25:42:27:e6:99:45:99:bd:31:48:35:93:53:a9:
1a:18:ed:d7:26:63:cb:06:b8:ab:8f:0e:11:7f:b3:
12:45:10:7f:09:65:e7:10:a7:7c:5f:f8:62:9c:bc:
b5:54:ac:55:4a:9e:a6:07:0e:27:de:56:e7:e2:0e:
ad:85:e1:a0:05:66:85:5c:e3:3c:4f:0d:f0:aa:a5:
6c:70:f6:dd:9c:1a:9e:54:86:ba:b7:41:27:c8:91:
49:61:42:04:77:e4:b5:83:c7:9f:27:57:a4:ff:e3:
64:69:7c:f9:df:e9:5f:44:c2:88:12:67:dd:82:bf:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:93:F4:CA:43:79:38:C9:31:1F:CF:0D:13:14:42:88:26:62:63
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b9:f4:60:48:ed:86:6f:5b:b1:eb:fd:3d:0e:03:9f:29:f8:
d0:8f:58:2f:0e:d5:35:d3:b1:79:3c:76:a6:f0:79:08:fe:18:
fc:1f:ad:73:14:56:74:da:b7:29:b5:ca:a8:bb:ae:dc:50:56:
50:8d:d2:81:86:95:bc:9c:9d:2c:63:47:da:83:ad:e8:0c:3f:
e8:1c:86:21:1e:a9:21:93:de:ce:d0:a5:aa:1c:df:6c:5e:c8:
cc:e3:41:c5:4d:98:04:2a:33:d8:86:a6:ef:b1:78:ee:2f:49:
e3:dc:87:19:be:53:c7:31:69:af:46:dd:7a:37:0d:9d:46:2c:
f9:2b:1d:fe:9b:09:f0:b2:da:ac:52:6a:88:13:c7:3a:a9:1e:
0d:59:05:e5:a2:40:3c:3a:4d:bb:75:b9:3e:06:55:3b:c0:3b:
19:31:96:da:c2:48:bd:b7:2a:0b:f5:64:d3:d1:16:01:54:c9:
72:7c:fc:c8:3e:11:95:93:d6:24:95:bf:66:66:61:cb:32:d8:
62:2e:17:53:b4:79:67:82:f7:62:e2:80:9e:ec:f6:11:c8:03:
bc:80:8b:59:c4:77:ae:62:0f:42:64:dd:a2:ba:24:90:12:f9:
b0:0b:ec:73:91:31:76:ee:37:f9:0e:b9:99:be:58:3f:c4:bc:
49:6b:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:28 2025 by rpki-client