Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
File: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft (raw, json)
Hash identifier: 1cam/mTdjfSFmoIa3pcgBmfpfJtvsSEkT6jxf9+ooLs=
Subject key identifier: AC:77:69:6D:02:9F:1D:F6:D0:A6:C0:CB:AC:4F:BA:87:A1:68:E4:76
Authority key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
Certificate issuer: /CN=6790960ac4ba271502f1738a59490856f1975b1f
Certificate serial: 0197488BFFDF79381FE3FA6DB21648620717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
Manifest number: 08AE
Signing time: Sat 07 Jun 2025 04:00:23 +0000
Manifest this update: Sat 07 Jun 2025 04:00:23 +0000
Manifest next update: Sun 08 Jun 2025 04:00:23 +0000
Files and hashes: 1: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl (hash: PPqI7aM3GtxMZYCAqvjeHBjkwuAIAItKY/veHKRnjkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:ff:df:79:38:1f:e3:fa:6d:b2:16:48:62:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6790960ac4ba271502f1738a59490856f1975b1f
Validity
Not Before: Jun 7 04:00:23 2025 GMT
Not After : Jun 8 04:00:23 2025 GMT
Subject: CN=ac77696d029f1df6d0a6c0cbac4fba87a168e476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:70:ae:95:9f:90:8e:6c:6f:0f:59:5c:0d:
34:bb:bf:64:df:e9:78:31:80:01:b7:aa:0e:14:80:
16:af:e1:6c:9c:e0:21:b7:06:c6:ae:04:cc:05:fd:
56:b4:d0:4f:d6:29:2c:1d:bb:d4:d0:8b:60:62:10:
5d:2a:0f:3a:3c:24:af:05:35:f6:5c:38:8c:70:7e:
b7:10:be:4c:2a:b7:3e:ba:7e:a7:94:61:63:a7:28:
99:57:f7:ea:40:fc:be:5d:0b:04:f2:8a:c4:56:3a:
f6:10:14:cc:b9:ae:d0:c2:57:db:ba:ad:e4:bd:da:
b1:48:28:ff:6b:b3:af:94:7b:f1:fa:41:e5:71:10:
3e:eb:38:29:23:42:c0:bb:c8:f8:52:02:98:4d:5c:
23:55:50:ed:de:40:ad:bf:43:e3:77:2d:dd:61:e7:
49:a8:47:28:db:49:40:0d:72:4f:81:55:86:69:24:
23:73:15:e3:2b:48:ba:ba:ef:9f:cd:df:04:3a:f9:
2c:21:dd:a0:a2:12:1b:cf:65:5b:a6:df:e7:71:47:
90:c0:3d:76:94:66:5d:d3:84:51:fe:be:8c:6c:32:
ee:d8:72:4d:e5:bc:45:23:2d:50:0e:65:68:81:09:
d2:0b:94:dc:9b:7f:36:12:09:d3:3a:03:30:25:a4:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:77:69:6D:02:9F:1D:F6:D0:A6:C0:CB:AC:4F:BA:87:A1:68:E4:76
X509v3 Authority Key Identifier:
keyid:67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:91:7c:f2:32:ed:d0:71:4f:f7:9c:3d:ad:1c:a4:4b:f9:e9:
6f:ee:e2:1c:3a:5e:78:bd:71:ed:6b:2b:dc:e9:2c:83:89:06:
14:dd:80:71:ff:f8:ef:e6:e0:de:f9:97:36:9f:97:db:8b:1b:
de:6f:27:92:aa:96:59:72:03:46:d6:4c:dd:01:26:0d:08:42:
ce:81:ee:7b:66:93:dd:a2:c6:98:fc:3e:44:36:39:c6:8b:bc:
b9:d1:2e:7a:10:aa:59:49:55:00:45:ad:cd:3b:ac:4f:0e:0a:
26:72:83:4a:f7:9d:d2:ab:80:98:24:94:da:24:3a:49:21:55:
07:d8:6b:35:8f:de:0d:97:7a:d3:45:6c:f8:ce:dc:29:9e:61:
31:7a:0b:65:5c:4f:25:db:b6:34:c3:fc:9f:68:0b:38:e0:18:
19:a2:5d:1f:3b:7a:83:ce:91:3a:55:c7:49:66:75:94:15:ce:
39:1c:82:a1:20:8d:cd:44:f5:cb:08:97:0d:49:44:78:aa:dd:
4c:26:ed:03:0c:8b:9c:8f:88:5f:b6:0a:42:bb:21:0b:ea:bd:
68:b1:a3:28:43:a8:68:e8:55:ae:c5:62:12:c9:bb:e4:78:d4:
2e:f6:59:45:f4:4f:6c:d3:21:c0:fc:6b:e0:bd:b4:98:8c:88:
b7:77:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:26 2025 by rpki-client