Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json)
Hash identifier: 9aspDT2H1TQ0dzD6EtW4mtnBOgyOQt7YlZFFqGxsTfw=
Subject key identifier: 26:C8:22:64:A3:67:24:7F:B8:F0:69:BC:D0:50:E2:00:D4:31:BE:18
Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Certificate serial: 01974E57C8571DF9A8CCF2868F1B2D4612FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
Manifest number: 0129
Signing time: Sun 08 Jun 2025 07:01:05 +0000
Manifest this update: Sun 08 Jun 2025 07:01:05 +0000
Manifest next update: Mon 09 Jun 2025 07:01:05 +0000
Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: INCe0umNA2EJJVELPzA+aFKhn7Qey3+gPcglLO+BjrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:c8:57:1d:f9:a8:cc:f2:86:8f:1b:2d:46:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Validity
Not Before: Jun 8 07:01:05 2025 GMT
Not After : Jun 9 07:01:05 2025 GMT
Subject: CN=26c82264a367247fb8f069bcd050e200d431be18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e2:4a:8d:c7:6a:b3:3a:5a:4d:9e:07:f7:1c:
41:b8:fe:de:f1:02:83:61:d7:06:62:93:24:b6:a0:
1d:68:71:bf:4f:ea:84:e5:d6:37:49:cf:83:70:07:
85:76:f5:60:4e:5d:6a:03:e3:40:3e:34:2e:82:51:
e3:cb:23:1e:66:17:68:5e:d8:c4:40:14:27:97:78:
71:de:2d:30:8d:1e:d5:b5:5d:71:b5:f5:b6:ba:40:
38:05:12:25:ce:a2:19:2d:38:0f:fb:6a:2f:4d:ad:
3a:31:84:ec:48:21:50:17:20:eb:d0:1b:13:5e:62:
ee:c1:6a:a8:44:0d:29:41:f6:5c:33:ef:35:ae:1a:
7d:68:d4:64:fb:90:7f:34:1c:ed:ac:77:d2:59:fa:
13:c0:b0:b8:85:bd:b0:52:e5:31:db:31:c7:7a:60:
22:72:24:00:c0:cc:3f:d5:c6:93:08:a6:88:fa:be:
a7:57:b3:8b:f6:0c:22:15:ea:68:eb:9c:01:c3:11:
ec:0e:66:93:91:f4:6e:d2:80:90:53:17:d1:e0:66:
69:3e:d7:f4:fc:d8:fa:49:c2:3a:4d:45:71:41:a0:
af:df:9b:ff:ff:84:bc:ec:be:bb:64:e7:b1:4f:89:
f1:93:17:0e:22:8f:27:de:a9:f7:0a:1b:c7:12:80:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C8:22:64:A3:67:24:7F:B8:F0:69:BC:D0:50:E2:00:D4:31:BE:18
X509v3 Authority Key Identifier:
keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0a:d7:dc:56:f3:69:a8:95:06:ad:62:9e:1a:e2:eb:37:dd:
d8:4b:80:04:13:97:3d:a2:8b:96:ad:40:32:a4:9e:a8:4f:69:
f5:6a:2c:c4:7d:19:62:ed:dc:a9:cd:c6:b5:48:bf:c4:c2:28:
c0:bc:b0:eb:51:b3:54:27:12:77:a8:98:fe:01:de:45:01:96:
8a:dc:b5:88:5b:54:21:c4:45:cf:ea:14:52:b7:f1:2d:c5:6a:
1f:09:34:37:c1:aa:8f:24:0c:a2:80:16:2d:fe:73:f5:8b:c1:
d6:4f:25:65:64:20:cd:65:8e:b4:d8:73:35:77:d3:24:bd:18:
b9:82:25:5e:07:eb:cb:19:87:c0:3d:42:a5:31:88:0d:a9:32:
a8:86:cd:28:e7:dd:5d:2d:36:e6:a0:fb:bb:3b:83:8a:37:f4:
30:b5:05:29:73:03:52:01:e9:ad:b8:38:33:22:2c:8f:32:b5:
53:2e:3b:01:68:11:2f:8d:59:b8:07:4d:f8:fe:51:78:53:9e:
8e:66:b2:b2:4d:84:90:5f:4b:9c:f6:4a:e9:d7:0c:59:42:d4:
55:56:a5:51:8b:f2:42:a9:54:ce:4b:9b:2f:54:2c:77:1e:96:
d3:de:1e:cf:8b:23:ab:ec:60:ca:05:0e:7f:6b:12:d4:f1:cc:
d4:71:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:48:41 2025 by rpki-client