Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
File: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft (raw, json)
Hash identifier: r5s8z910ulb54oIgweYLgI/f+2txY7ReZoSRq9BMOow=
Subject key identifier: D8:55:58:9D:B4:96:58:DD:52:73:0A:92:9D:06:26:33:59:D9:64:52
Authority key identifier: 67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
Certificate issuer: /CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Certificate serial: 019747E7A6BD75805B267467B20D2DF1F4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
Manifest number: 0168
Signing time: Sat 07 Jun 2025 01:00:53 +0000
Manifest this update: Sat 07 Jun 2025 01:00:53 +0000
Manifest next update: Sun 08 Jun 2025 01:00:53 +0000
Files and hashes: 1: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl (hash: jsfyualwMqooQC8DRDmpXjfVamIVfKv2T5r2gWWiWno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:a6:bd:75:80:5b:26:74:67:b2:0d:2d:f1:f4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Validity
Not Before: Jun 7 01:00:53 2025 GMT
Not After : Jun 8 01:00:53 2025 GMT
Subject: CN=d855589db49658dd52730a929d06263359d96452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:cc:83:c9:4f:48:9f:c4:a2:cd:7e:66:eb:
c4:35:aa:c8:57:5b:1e:bc:2a:bc:56:ce:4f:d5:db:
e4:68:af:d2:40:06:21:80:61:f1:ba:d1:ed:60:9b:
49:3e:a2:b8:9b:34:2f:9f:ac:c3:56:3a:38:5f:72:
79:29:af:e0:84:19:de:f3:36:28:f6:6d:10:9a:4e:
7d:d0:8e:a6:61:da:98:39:e4:6b:ea:94:8b:99:e9:
73:43:84:97:e8:1f:e3:e6:b7:ec:9b:6e:44:a8:27:
b9:c9:f6:fd:fc:6f:5c:15:4d:f3:92:2d:f6:75:5a:
21:ec:3f:eb:fb:5f:d0:01:8f:e6:7d:ba:d1:a7:63:
8d:a0:5b:56:5d:9e:74:70:e9:df:09:70:83:7b:90:
3a:6e:15:4d:70:e8:4d:02:83:9e:44:db:dd:7b:26:
d1:1f:0c:6a:51:98:5f:bf:09:7c:64:fa:14:4d:05:
8e:c8:94:30:22:a5:a8:34:27:4a:93:90:2d:0f:88:
ab:6b:39:41:6b:97:4a:67:6f:31:b9:30:c6:00:72:
ea:15:77:81:e8:2f:7e:4c:31:09:cc:e9:91:68:3c:
43:6b:25:19:9d:2a:0d:8c:9e:5d:0c:b4:de:95:49:
72:0a:44:a6:ab:05:6f:07:9a:8b:87:5c:4e:65:2f:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:55:58:9D:B4:96:58:DD:52:73:0A:92:9D:06:26:33:59:D9:64:52
X509v3 Authority Key Identifier:
keyid:67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a3:70:63:d8:b9:0d:ff:8f:5a:e0:13:29:ec:0b:c3:ef:f8:
b2:5c:d1:c8:57:c9:62:c5:aa:2c:8f:5e:be:0c:f3:27:5a:5d:
05:d1:23:e8:27:49:d1:eb:f7:d8:d3:49:21:80:db:74:1f:53:
98:a2:46:fd:72:e1:5e:f2:56:9b:78:0d:e7:01:fe:a0:72:ed:
a8:29:e2:36:94:20:70:9d:74:b9:87:ec:29:62:4c:1b:82:b1:
13:54:a9:1e:05:91:f1:87:f6:27:d0:ea:75:a2:a9:57:dc:f3:
9d:8f:b3:01:46:1d:29:ad:aa:47:25:4c:4f:d9:68:30:36:87:
f3:10:3f:19:ae:28:bb:4d:be:6b:08:4f:e8:46:41:f3:62:7d:
5d:d4:c2:49:89:21:2d:b2:aa:39:04:f8:4f:e0:54:f0:a0:f9:
cb:7e:22:d5:9a:a4:1f:a3:49:1a:03:64:dd:bf:13:d6:34:22:
7a:97:34:97:fe:9f:e8:38:43:1d:b7:88:ee:fd:d4:37:53:23:
4f:19:b8:6e:d9:6c:a5:66:d5:36:d1:3f:b4:6f:94:f3:b0:a5:
f6:99:73:9a:03:4f:f6:81:8b:e9:7e:03:2e:90:51:9e:7e:62:
1d:35:b8:19:4b:4b:89:9e:4c:81:f6:5e:b3:fd:20:33:cb:e4:
fe:44:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:04 2025 by rpki-client