
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: E0S/s0+ke5PzHSRV8a+ML0acKjVl99MUgsiHia0oFeg=
Subject key identifier: D6:EA:3E:30:A4:46:9C:09:E3:90:FD:F4:35:16:FE:67:A0:44:5F:90
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 0197512193BDAB7D36A13726CA197B4CF177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 08FF
Signing time: Sun 08 Jun 2025 20:00:44 +0000
Manifest this update: Sun 08 Jun 2025 20:00:44 +0000
Manifest next update: Mon 09 Jun 2025 20:00:44 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: 6HM4O+qu5+fuCGnZ8HWRlrH2lITRq+lffXnG3w+L7TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:93:bd:ab:7d:36:a1:37:26:ca:19:7b:4c:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Jun 8 20:00:44 2025 GMT
Not After : Jun 9 20:00:44 2025 GMT
Subject: CN=d6ea3e30a4469c09e390fdf43516fe67a0445f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:7c:01:6f:6b:01:be:8a:7d:61:a1:15:24:
20:d6:5a:94:ce:85:19:8f:3d:58:16:2f:b1:38:2e:
e6:18:25:76:3b:93:79:70:89:77:5a:64:65:0e:c5:
a4:ea:8d:48:a8:8d:24:46:11:8b:e2:07:43:07:7f:
ff:35:e5:64:5e:86:d5:86:ae:6f:e5:af:7f:87:19:
bc:23:da:fa:ef:7a:14:40:3e:f3:94:23:be:da:dc:
9f:62:b9:aa:cc:b4:9f:c5:f1:0e:b5:95:d5:da:1d:
85:3a:f2:48:67:ab:40:78:39:5b:63:6f:ad:b7:de:
f7:bf:2b:d3:ad:86:5c:32:bb:4a:03:0c:80:f9:53:
bd:49:d9:db:b9:2b:43:bb:15:ef:b4:77:26:bd:85:
76:36:a3:a5:8d:1c:4c:95:60:11:9a:c6:fc:a6:85:
d0:89:3e:41:c8:64:93:97:28:6b:c5:0a:16:87:c2:
f4:f9:53:76:fd:ae:29:5b:1a:47:78:b7:17:37:69:
74:3a:ad:ed:4b:0a:1b:00:a1:2e:9b:88:43:9e:b4:
9c:37:c0:8c:03:54:17:73:08:bf:34:51:bd:de:9e:
62:e3:70:f4:fc:e3:9f:c8:ce:41:9c:04:5d:f6:c2:
24:8d:f3:4a:da:4d:70:11:2d:1c:1b:4a:5c:af:15:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EA:3E:30:A4:46:9C:09:E3:90:FD:F4:35:16:FE:67:A0:44:5F:90
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:eb:21:43:a4:b5:c5:11:32:7a:36:85:cb:b3:5d:97:cb:ed:
fd:32:f5:58:6d:39:fc:63:32:68:67:1f:a6:d9:41:fc:6a:fa:
23:6a:52:34:ca:c9:9f:41:60:c9:dc:95:13:7b:21:5e:9f:f8:
f6:e9:22:af:d9:ff:8a:13:b8:45:92:8c:43:80:6e:b0:74:dd:
8f:df:61:93:28:7a:57:3c:9e:c5:4b:93:54:58:73:06:de:f8:
0c:27:71:cd:c5:6b:1f:a4:86:dd:55:ff:24:31:69:80:2c:b9:
72:43:c6:26:39:e7:59:49:be:3b:ae:d2:39:6d:aa:39:b0:24:
c4:a2:1e:77:14:7a:cb:6c:3e:7e:e9:dd:45:fb:ed:28:55:92:
b9:8d:4a:0f:78:7f:40:29:c6:90:72:01:b5:b5:07:c1:cc:62:
94:da:ad:d3:41:de:6c:53:06:08:7a:83:4e:b8:3a:f4:14:3c:
ac:ca:c9:13:17:5a:3f:7e:41:8d:c6:f4:e9:7f:ce:d3:fe:a2:
51:44:13:9f:f8:2c:0f:45:8a:9d:c2:c0:df:0f:57:d5:61:a9:
e1:7b:49:61:a2:e5:20:e0:6d:24:ab:91:c9:35:5d:3c:90:3e:
4a:d5:62:47:84:79:b8:34:80:ca:38:36:b6:06:ef:4b:5b:4c:
dd:d1:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:18 2025 by rpki-client