Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: owe4SAGYxKnphJY0/DqrpC63G1VxpSUcNaVgqQ3dQOo=
Subject key identifier: F6:85:8E:BB:7D:AA:A0:6C:E1:4C:E8:EC:37:81:0C:33:A0:7B:91:B4
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 0197470BAA34360DD6AB2C8E6AB76C141E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 21:00:36 +0000
Manifest this update: Fri 06 Jun 2025 21:00:36 +0000
Manifest next update: Sat 07 Jun 2025 21:00:36 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: btdP6O5il1KbAFUYfT5bhPy3qmb5zK4kMoQY9noMGQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:aa:34:36:0d:d6:ab:2c:8e:6a:b7:6c:14:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Jun 6 21:00:36 2025 GMT
Not After : Jun 7 21:00:36 2025 GMT
Subject: CN=f6858ebb7daaa06ce14ce8ec37810c33a07b91b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c1:b1:a8:ab:5d:9a:76:9a:51:c2:b0:9d:6f:
60:4e:07:90:71:54:40:fb:c4:9e:57:99:14:70:35:
1d:b9:09:d7:5d:19:ac:53:18:85:12:56:52:ba:2a:
36:5a:c1:14:72:ca:47:3f:18:8e:1b:fd:e8:c3:dc:
25:26:97:f6:41:79:19:6d:e3:48:12:e6:8c:70:c3:
a9:d8:ca:11:ce:b1:36:38:89:59:2d:5a:8c:b1:11:
6c:1f:e3:00:c5:9a:74:0b:bf:c7:52:41:78:9e:c6:
7a:5c:61:32:7f:1f:7a:7f:f2:fd:a5:77:bd:b3:a2:
30:18:91:36:78:f3:61:31:57:d4:9c:66:f6:98:ac:
f3:b7:81:6a:64:8b:4c:11:60:95:e1:dd:70:71:c0:
92:b1:8c:71:3f:d3:37:f3:9d:9e:5f:bb:d3:84:6e:
73:6d:b0:6c:70:04:d9:c7:59:7f:de:85:30:07:47:
85:01:97:dd:4f:22:ca:22:f3:69:ef:89:51:49:f3:
79:fa:33:c1:8d:25:f3:f4:8c:41:02:67:41:0f:82:
9c:86:8a:a2:4c:a4:ce:78:7a:1b:1e:01:ce:88:72:
8c:e1:19:98:c6:f3:e9:f4:91:09:3b:c7:5c:e2:2c:
9e:d6:f3:c2:2e:3c:d7:81:b9:ba:83:cd:fb:97:6d:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:85:8E:BB:7D:AA:A0:6C:E1:4C:E8:EC:37:81:0C:33:A0:7B:91:B4
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:17:f0:b0:4d:69:11:2f:a1:4f:6a:2a:c1:48:cc:97:ea:97:
4e:1a:43:df:40:f8:f3:b6:9e:26:e2:1a:55:fe:77:14:60:94:
f4:0d:66:c9:3c:cd:c7:09:df:0b:b9:8d:75:35:be:ee:ae:3e:
12:6a:b1:f7:0e:91:1b:82:e4:5c:24:2b:1f:2a:1c:5c:26:35:
50:7c:0d:7f:c1:2f:1d:c8:31:cb:e3:25:93:89:30:c7:b2:ac:
4b:29:38:d4:d7:7e:a9:29:1c:b2:2d:20:1b:5d:89:9c:51:6b:
93:eb:65:1e:63:58:be:48:e0:5e:ab:68:1a:e6:33:9b:79:b7:
d0:6e:d1:7d:08:d3:45:43:67:56:4d:11:92:61:83:e4:8a:d1:
7e:e4:a4:b2:78:8c:f8:6a:3d:bf:69:39:27:3d:4d:49:7b:23:
e6:6f:8a:8f:2b:a4:39:95:2f:20:34:6b:32:3b:67:89:cd:dc:
87:29:93:8e:17:e0:e3:9a:57:0d:84:18:33:83:42:60:3c:20:
33:b4:1e:fc:93:40:80:d2:4f:c6:96:74:e6:19:a5:5b:50:14:
17:c0:a7:00:94:08:20:34:07:ab:ec:ac:79:82:67:f5:7b:a3:
b3:c4:0d:ca:c1:aa:66:95:17:8d:57:ac:a2:62:f9:bd:b0:31:
c7:27:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:44 2025 by rpki-client