
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier: v2sgTuvC779xKfa2vgZdrqRcunDKWnDVtlTyZXKQNd4=
Subject key identifier: 59:FC:1A:84:49:24:A5:22:5B:F2:51:35:3E:5C:8D:CD:51:FE:F0:BD
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial: 0197477943265A4B9B30CFD20E602A6E0557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number: 0CB5
Signing time: Fri 06 Jun 2025 23:00:18 +0000
Manifest this update: Fri 06 Jun 2025 23:00:18 +0000
Manifest next update: Sat 07 Jun 2025 23:00:18 +0000
Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: 3sZ4zFv8foX1ey/HwhImgg4BoMOfZU7omgKShQew9fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:43:26:5a:4b:9b:30:cf:d2:0e:60:2a:6e:05:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Validity
Not Before: Jun 6 23:00:18 2025 GMT
Not After : Jun 7 23:00:18 2025 GMT
Subject: CN=59fc1a844924a5225bf251353e5c8dcd51fef0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:a4:a9:0e:a5:68:cc:de:f5:e8:9b:a0:06:
a0:61:83:0f:9d:b4:5b:aa:86:d7:97:27:ae:5c:71:
91:e3:21:9e:ae:96:49:a7:31:b5:62:0b:fd:c9:57:
a2:69:24:06:4c:a9:76:ee:bd:06:4c:f9:a7:01:fe:
b3:26:20:bc:57:83:35:8d:65:b6:31:46:1f:0d:d0:
ed:48:c4:3f:82:3b:5d:d4:35:0f:01:84:47:43:8e:
90:18:4e:41:09:42:b6:6d:0b:5e:ee:6d:a8:85:03:
36:c2:ca:53:0d:e4:74:31:7b:97:16:29:84:1d:12:
d1:7a:7d:e8:0a:95:79:3c:85:88:9c:ce:8e:40:c5:
19:28:97:0d:e2:fd:42:5c:21:dc:d9:87:cb:52:dd:
3f:bd:41:21:65:01:f4:6b:2e:ed:7c:1f:c0:20:4d:
6f:21:fc:84:80:56:98:38:f6:a2:fc:83:79:d5:aa:
36:1b:fa:09:b1:de:37:9c:a0:af:5f:fa:c2:f7:71:
e4:20:39:ce:42:26:33:26:88:b2:c0:8a:bc:f8:7c:
79:ac:39:7c:8f:37:f2:f8:67:c1:a5:bb:7e:b6:d6:
42:c8:bb:8c:07:aa:ef:c3:bf:a5:fe:79:8a:31:50:
44:c0:59:16:db:37:b0:f1:5c:d9:fd:2a:e7:55:a8:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:1A:84:49:24:A5:22:5B:F2:51:35:3E:5C:8D:CD:51:FE:F0:BD
X509v3 Authority Key Identifier:
keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:41:b8:4b:a2:e6:a9:50:58:a8:eb:d7:12:47:80:81:5d:ec:
61:ef:59:5f:d3:44:1b:c0:2d:1c:c9:cd:99:a2:49:ff:eb:72:
32:6b:75:46:ef:20:6e:82:ba:94:66:40:ed:85:f7:be:29:c6:
c8:1c:7a:db:0b:49:48:fd:08:82:d2:b6:0a:c0:92:3b:af:ca:
89:7a:f3:79:88:47:42:a7:7d:51:fc:69:bf:cc:50:d9:91:6f:
fa:de:20:05:ac:38:3a:54:c5:9f:ff:1f:50:ab:ad:2d:e6:3b:
c0:9b:b5:8b:e7:e5:88:ef:0d:ca:52:5c:ac:b5:fa:3e:6c:13:
3d:34:ad:69:8c:9e:ee:21:f0:ee:a0:28:50:ac:cf:45:cb:82:
80:f8:12:13:ef:01:04:49:6c:bf:dc:b7:7e:c7:8c:ca:08:dc:
eb:c9:9a:0b:7d:2c:fc:29:21:f5:7c:f4:fc:1f:ad:16:1f:33:
9e:98:ec:df:08:bf:a7:db:3f:14:69:02:df:e1:2f:43:02:4e:
4a:b8:ec:2d:c0:b1:da:ee:0d:20:94:fd:58:dd:b9:29:db:31:
0b:d0:8f:17:66:4d:e7:98:5e:5f:6f:4d:e0:5a:b2:52:3d:ad:
90:2e:0a:4e:19:83:98:cf:7f:06:96:39:c2:c2:c1:04:5d:64:
31:82:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:51 2025 by rpki-client