Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: 4/bgesBD5h7uRkWzRanncLViKGK1FR4vkQlkcz9z2cE=
Subject key identifier: 74:98:BB:E8:B3:9B:6B:AD:85:DF:B4:C5:E1:F1:CF:6A:E8:9A:E6:54
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 0197488C440CCA3E84CE1A29D9032B5CED48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0D98
Signing time: Sat 07 Jun 2025 04:00:41 +0000
Manifest this update: Sat 07 Jun 2025 04:00:41 +0000
Manifest next update: Sun 08 Jun 2025 04:00:41 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: zL0rpli1PvDqONBd7FPGgmuMWpAUKKWEUQTYvF3Tcto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:44:0c:ca:3e:84:ce:1a:29:d9:03:2b:5c:ed:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Jun 7 04:00:41 2025 GMT
Not After : Jun 8 04:00:41 2025 GMT
Subject: CN=7498bbe8b39b6bad85dfb4c5e1f1cf6ae89ae654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:74:09:39:1c:2a:66:30:54:24:d0:eb:60:
4e:46:ae:41:fc:3a:6d:0c:92:f6:06:9a:f0:36:b3:
60:41:75:93:a6:38:89:92:5d:74:a2:8e:50:f5:05:
e5:cc:b8:de:c2:d5:2a:4c:5b:70:43:4e:e4:0f:17:
da:d5:7c:19:2e:67:da:d6:19:48:59:0c:21:d4:40:
f1:a6:bb:5d:3e:14:0b:1b:82:ed:c5:bc:da:0e:97:
c9:3f:8d:33:d0:6d:d9:79:48:28:5c:fe:af:65:bb:
f8:b0:6a:44:72:cc:c3:0e:b8:eb:b4:36:a0:fa:30:
ba:19:27:36:23:3c:7b:ce:29:8a:ae:0a:1a:7f:5f:
31:49:c2:bf:db:bd:ff:2a:23:ec:b9:1d:47:0a:ea:
8c:2a:94:8f:5a:cb:98:af:71:34:5f:b3:8b:7c:28:
9f:bc:41:ff:f9:97:a2:95:24:a0:00:1b:52:b9:04:
29:b5:e6:dc:8f:b3:2e:33:f2:3e:a8:ae:83:4c:4c:
cd:6b:c4:ba:c4:a9:52:3c:d8:ed:a4:55:3c:80:4b:
38:1e:28:e8:68:d5:0d:06:5c:da:ee:b2:ba:8b:82:
48:56:13:24:80:15:95:f6:8e:b6:c0:87:86:fd:50:
52:3d:67:01:d0:84:e9:bd:03:2f:2e:b6:7c:d6:d4:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:98:BB:E8:B3:9B:6B:AD:85:DF:B4:C5:E1:F1:CF:6A:E8:9A:E6:54
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3f:25:0f:6e:57:39:e6:ca:12:a4:9e:a5:52:61:4e:c3:f8:
56:c3:f9:1f:e4:34:11:66:1f:2e:db:17:62:e8:3f:46:d1:38:
bb:5c:91:1b:b5:79:38:3f:b8:aa:51:45:d7:38:80:cc:c6:a3:
21:07:1d:a4:12:cb:e6:c6:ea:76:b0:89:13:f5:19:2a:df:a5:
0d:3f:ae:7e:df:d2:c3:b5:c0:57:ce:c5:2b:6d:37:79:09:34:
cb:87:8e:75:d9:bf:77:3c:46:14:90:92:6a:73:00:a1:f0:11:
e6:10:23:37:0a:e1:5e:f9:2e:83:7f:3b:93:88:60:c0:e4:6d:
72:fb:a2:b1:b7:4a:a1:03:2d:40:e7:5b:08:10:d5:17:43:19:
d3:41:80:20:ac:56:09:67:d9:08:73:ae:f0:7e:3a:46:3a:a4:
a1:9e:d8:91:36:37:02:0c:15:78:fc:a9:09:ca:b7:35:7f:05:
7e:2b:10:e4:17:70:63:68:f0:14:eb:b4:94:fc:58:07:e1:50:
bc:fc:47:70:96:28:e7:e4:3b:ee:07:f9:bc:ce:f7:f6:39:fd:
c1:4e:e1:60:d4:87:db:71:13:0d:2c:32:e2:ce:7b:46:ac:00:
3d:36:1f:83:85:aa:a7:89:ea:00:6e:1b:ee:91:db:10:fd:14:
ad:8f:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:11 2025 by rpki-client