
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: 1qyFLA2UPgRhWOqtey+2SCvk3Xs+QjRAAGxaI+WHmOY=
Subject key identifier: EC:64:2D:63:4D:47:23:F0:E7:B0:27:DF:58:8E:B9:8A:9D:64:55:55
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 01974EC57E4A93EF3D57455E52ED7F467427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 09:00:55 +0000
Manifest this update: Sun 08 Jun 2025 09:00:55 +0000
Manifest next update: Mon 09 Jun 2025 09:00:55 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: D54vQL0T+LuDiN1mVO1cH8pJIhQ37zI7gkhBc8EjlJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:7e:4a:93:ef:3d:57:45:5e:52:ed:7f:46:74:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: Jun 8 09:00:55 2025 GMT
Not After : Jun 9 09:00:55 2025 GMT
Subject: CN=ec642d634d4723f0e7b027df588eb98a9d645555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:e6:75:b2:98:d6:f1:7f:9b:54:fa:aa:37:
a5:87:8c:4d:fc:49:0f:1b:b3:dc:8e:f5:f3:05:65:
5e:a9:a3:19:e8:86:60:1c:60:87:96:67:28:24:ea:
62:60:ad:bc:b3:df:9e:ec:b3:0f:c5:4a:69:6c:cc:
02:b9:80:34:b5:6c:b1:26:d5:f6:0f:13:ef:f2:77:
ce:a5:58:01:92:3a:3f:83:04:99:68:11:17:b0:cc:
2e:35:24:92:2e:0e:1b:98:42:09:85:a1:e4:2f:5a:
86:9d:b9:51:58:9a:3a:a4:1f:dd:cc:2b:e5:18:4e:
17:d2:9a:20:8c:8f:24:32:de:28:fa:ee:00:99:17:
f8:53:b4:6a:00:f7:01:dc:9e:43:c2:70:a9:98:e7:
bf:5d:6d:54:69:b7:28:a3:c2:42:75:05:87:a8:17:
38:89:60:0f:c5:c0:15:90:71:e3:cd:3b:33:1a:76:
74:c5:bf:18:35:d9:7f:9f:94:3e:72:f2:df:69:4f:
cc:81:0a:d3:c4:92:3f:77:5e:5f:08:4f:9f:56:ec:
61:63:a0:ab:f0:f5:de:e3:a9:74:b9:22:d6:fa:1f:
22:ad:ff:6f:a7:a7:d0:45:29:11:b7:0e:14:97:8a:
66:9d:44:ed:69:cc:18:c1:66:87:5a:79:00:ab:21:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:2D:63:4D:47:23:F0:E7:B0:27:DF:58:8E:B9:8A:9D:64:55:55
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f6:16:9f:e9:0e:f5:35:b6:6f:a1:fe:ae:91:6a:74:58:9b:
b3:81:a5:bf:bc:17:f3:72:e6:12:e4:ed:68:65:29:99:3c:db:
b4:c1:91:e5:a6:dc:6f:e2:fd:8f:34:ca:5c:60:e0:f7:44:aa:
97:8d:23:67:a8:f2:90:fc:4c:f2:6b:c3:ad:e4:05:80:b1:65:
48:3b:50:c7:20:a3:bc:66:8c:8d:cb:3b:24:95:1a:fc:0a:6e:
7e:84:99:19:aa:b9:fc:92:d0:50:6b:b0:c9:da:2e:bc:b3:19:
00:17:51:2d:53:57:09:b4:7b:0f:de:ed:2a:11:77:c8:cf:1e:
50:8a:bf:b7:67:ef:00:89:91:95:f9:23:7e:28:3e:be:f3:74:
65:f0:d4:9a:db:1a:06:0a:17:d2:0c:8c:76:16:6b:31:b5:2e:
a5:92:10:be:80:83:d1:4c:2f:fd:e7:d1:03:0b:06:8d:33:1a:
9e:63:62:0c:b8:c3:49:79:bc:97:bf:1f:98:62:88:2e:d6:4d:
30:6b:11:e1:fe:19:32:7c:8c:52:cd:0c:bb:59:1d:02:54:25:
c5:fa:50:26:79:ee:eb:be:6b:b9:e8:a0:7c:50:d5:f5:a2:52:
4c:c6:9a:d8:17:c8:53:26:e7:75:0a:9c:fe:6e:09:46:35:3f:
e4:c1:1e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:31:06 2025 by rpki-client