Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: g47yVSQ6ufMoIs1bR+lA+ebqzZQLJsnFnO2CIRPnkrw=
Subject key identifier: E3:32:52:46:17:C3:00:B4:27:1C:C9:BF:16:3F:C7:13:7A:4A:2E:00
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 019745F9203E39DE222767AFDBA3ADF101AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 0FA7
Signing time: Fri 06 Jun 2025 16:00:43 +0000
Manifest this update: Fri 06 Jun 2025 16:00:43 +0000
Manifest next update: Sat 07 Jun 2025 16:00:43 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: udGJ4v++QErZHCrxmYOc87E0fRovJUn63m1TRs+QCvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:20:3e:39:de:22:27:67:af:db:a3:ad:f1:01:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Jun 6 16:00:43 2025 GMT
Not After : Jun 7 16:00:43 2025 GMT
Subject: CN=e332524617c300b4271cc9bf163fc7137a4a2e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:19:a6:9c:cf:2a:38:75:d9:c6:07:53:ec:
19:ab:57:eb:9f:27:c9:a9:d6:87:c3:33:e4:e4:e6:
c1:08:0e:bc:fc:1f:7b:5e:6e:b8:34:78:1c:d7:25:
f5:68:c3:e9:df:21:3b:3a:43:33:d7:76:c6:db:e5:
88:a9:98:00:4b:8e:36:5a:06:53:3d:34:0e:c9:0c:
e3:9b:83:32:dc:31:42:50:a8:f1:53:32:78:ba:1c:
2d:d1:2e:22:47:ae:1a:2d:01:33:28:e0:d0:b5:3e:
bc:13:99:89:3f:17:c0:05:3e:dd:20:09:3c:2f:41:
65:44:2e:c5:b9:de:ce:81:67:90:91:14:75:7e:18:
db:70:0d:94:34:9e:96:fc:1b:15:3f:3c:3f:3c:e7:
7f:62:60:af:65:9a:31:8e:f8:29:12:e9:48:4c:7d:
8c:2c:13:7e:6a:c2:dc:ed:c5:1b:84:bd:d7:97:4c:
35:96:9d:98:78:e8:da:5f:39:70:97:47:72:1b:d2:
3d:a5:cc:87:f6:f5:e2:88:f4:72:e7:0a:14:c4:6f:
a0:5b:ca:85:90:5a:f8:44:3b:cd:2d:11:9a:61:57:
3d:30:15:98:6d:e9:ce:d2:97:4e:0f:a7:d3:ec:9b:
c5:d6:04:86:59:9e:d4:04:27:f2:c2:50:a6:89:54:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:32:52:46:17:C3:00:B4:27:1C:C9:BF:16:3F:C7:13:7A:4A:2E:00
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:97:b4:a0:d6:78:87:f9:93:b5:f8:9d:c7:fe:d9:cc:21:69:
64:69:af:c7:dc:e2:47:34:e4:6b:59:21:ad:08:25:1f:49:09:
cd:42:46:c6:80:d1:9c:ad:7c:58:61:cf:39:9b:5a:b8:07:17:
2d:68:92:45:82:b1:bb:0c:f2:3f:ec:c0:2f:2d:a7:54:32:ef:
e1:16:b1:0e:63:17:b3:25:8b:03:72:45:27:b8:29:29:b6:20:
91:68:2a:75:e1:33:46:60:23:6c:d7:95:53:8e:5b:c8:d1:92:
4f:a7:24:98:af:a0:87:d1:49:b9:c9:a2:d5:1d:c0:ec:52:f2:
56:29:ba:6f:58:b3:66:ad:ae:b2:7e:65:27:89:66:36:7c:c5:
7d:af:24:a2:ae:0c:b9:2a:be:e1:f9:60:14:81:db:9c:91:84:
bc:51:fb:47:81:16:f8:ae:2b:b8:25:bb:b5:dc:5c:3b:04:57:
9b:13:dc:da:9d:16:88:83:f2:d5:9f:a4:25:5a:35:ad:37:2a:
fb:e3:ad:11:48:c4:5b:38:72:33:54:90:93:c4:c1:09:e0:eb:
a5:30:d7:23:ce:09:5f:93:29:98:61:80:3e:cd:6a:5c:08:7b:
6c:67:9a:dd:b3:9a:b0:38:75:22:af:1d:fc:d0:8c:34:63:ab:
4d:00:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:54 2025 by rpki-client