Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
File: z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json)
Hash identifier: tfMIdFRkp68pnMLAPO4cpYsme7mU2xyCqZ/Enx10tMY=
Subject key identifier: D4:15:0F:38:49:B4:F2:E0:15:5E:4E:34:06:19:94:0C:4A:99:71:E9
Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
Certificate issuer: /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Certificate serial: 01974D44C6DAF57A59C5D59CCEA7F5C10337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
Manifest number: 041D
Signing time: Sun 08 Jun 2025 02:00:42 +0000
Manifest this update: Sun 08 Jun 2025 02:00:42 +0000
Manifest next update: Mon 09 Jun 2025 02:00:42 +0000
Files and hashes: 1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: bMTCLMfXUqyskBoGlTwEfshM4KGKkcHPtRLRR5l4Sf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:c6:da:f5:7a:59:c5:d5:9c:ce:a7:f5:c1:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Validity
Not Before: Jun 8 02:00:42 2025 GMT
Not After : Jun 9 02:00:42 2025 GMT
Subject: CN=d4150f3849b4f2e0155e4e340619940c4a9971e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:1c:9c:06:d6:35:c3:1f:eb:46:64:9a:dc:
2d:59:d1:be:4c:84:61:ef:fe:a3:88:3f:7e:87:6f:
9d:40:88:78:44:24:03:5f:22:62:8c:d6:b3:b5:e3:
0b:cf:ff:5b:36:0a:aa:8e:c2:58:87:d6:1a:c9:56:
3b:40:f2:69:c1:7c:01:24:8e:2e:10:bd:0f:a1:c1:
2a:e1:56:0f:23:27:64:c0:39:08:10:33:56:cf:0a:
55:f5:9f:39:c5:9e:9d:18:38:09:4e:96:e8:c2:ec:
5b:bd:35:b8:a9:ca:59:65:32:19:86:1b:4b:24:e1:
11:a2:4a:98:f1:75:0a:c6:dd:df:d4:88:62:f7:a8:
4e:ba:81:91:68:a2:d5:db:b0:a9:1f:38:d3:0e:d2:
8c:d3:8e:d6:14:65:2e:7e:20:30:67:9a:38:0c:e2:
4e:ca:1b:18:fa:87:c8:cc:9a:31:fe:8f:1d:e6:f7:
cf:83:8a:fe:1f:2d:87:3f:45:f2:1a:16:8d:81:09:
dc:6e:a0:82:05:0a:7c:36:2f:11:b9:3a:38:6f:f7:
22:c3:45:9c:cc:73:c9:27:7a:d4:44:67:71:35:78:
81:6d:c2:29:1d:73:5a:59:65:e9:0e:06:f3:d7:bc:
b3:c6:66:7d:0c:dc:36:bf:88:b8:e8:92:67:f0:ee:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:15:0F:38:49:B4:F2:E0:15:5E:4E:34:06:19:94:0C:4A:99:71:E9
X509v3 Authority Key Identifier:
keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4b:d0:1c:29:b4:8b:a0:62:65:fa:70:9a:b6:f1:3c:d9:a7:
a5:4b:24:31:dd:d1:78:5c:94:d4:aa:89:4e:f1:0e:8e:be:b9:
0d:85:32:e1:b0:e0:ec:f5:cb:36:ea:01:56:4d:85:22:f6:18:
9e:19:fc:fb:62:23:e7:ca:9d:5c:84:6b:1b:c2:e0:8c:0e:90:
57:5e:0a:8c:42:fb:73:77:76:d8:f6:7b:d3:64:81:76:ab:f7:
30:8b:90:01:64:d1:9f:fb:3a:e1:5b:0d:00:ef:c6:cd:23:43:
fd:6d:e8:61:e4:76:84:b2:25:3b:63:71:7c:23:89:0c:09:8e:
42:ac:87:f0:d0:b2:2a:0f:02:21:ff:b7:d4:63:32:11:df:11:
52:b9:ce:1d:8e:d6:74:94:1a:8c:3a:cf:51:be:56:74:de:00:
c7:bd:48:84:1d:7f:ae:b0:9c:86:f8:8a:50:8c:86:48:28:b7:
5d:25:96:20:ed:96:95:59:d7:1f:8d:76:0a:4f:30:10:88:b2:
90:a7:f7:9b:b3:eb:db:2b:2c:48:2b:a0:9e:df:97:2b:75:a0:
43:3b:c7:d7:ea:7a:2c:7e:fc:74:40:f6:70:cd:e3:ff:39:9d:
6c:90:40:d3:68:27:ec:24:82:74:57:a6:db:ea:02:2a:14:4a:
83:17:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:13 2025 by rpki-client