Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: kSrBkQHP+8cWFfJ2JAYFyWZDTHFn1gI4rfYc6c40sPA=
Subject key identifier: C5:C9:6C:25:2B:B6:00:64:32:E0:93:E8:6B:A5:37:06:0C:95:32:B9
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 01974779582062FB7CB48F19F8D3B11A6D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 1583
Signing time: Fri 06 Jun 2025 23:00:24 +0000
Manifest this update: Fri 06 Jun 2025 23:00:24 +0000
Manifest next update: Sat 07 Jun 2025 23:00:24 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: PqHHZqTT2H4DIVZhSqqno9cn5dMSme369tG71GFYZF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:58:20:62:fb:7c:b4:8f:19:f8:d3:b1:1a:6d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Jun 6 23:00:24 2025 GMT
Not After : Jun 7 23:00:24 2025 GMT
Subject: CN=c5c96c252bb6006432e093e86ba537060c9532b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:b1:ed:af:b0:67:fc:14:d2:87:55:64:99:
19:86:11:4a:cb:2e:44:32:b8:3b:65:aa:63:0c:b2:
b5:5b:22:b3:5d:98:83:6d:21:d3:20:67:72:1b:8c:
31:0e:f3:0d:7a:66:66:a4:b2:12:f0:43:8d:f2:8e:
d2:51:a6:71:49:bb:71:52:6e:63:c5:c8:46:bf:64:
e2:c8:2c:f9:d4:4c:ff:81:21:91:20:cc:56:68:29:
a2:6e:e2:77:32:da:00:66:68:a6:98:e4:e4:e7:27:
b2:0e:9b:1a:5a:6d:36:90:12:50:de:f8:80:0d:8e:
66:1c:30:ab:23:93:3d:0a:f7:a6:45:97:95:2c:9c:
8f:68:76:32:a0:92:80:f9:0a:6e:ab:5e:24:07:4e:
75:a7:25:c2:55:41:c2:da:09:d4:8f:c5:a9:6d:97:
57:2e:b3:73:2a:7f:ff:7b:9c:fd:bd:7e:dc:3c:6c:
7f:91:43:bd:aa:4a:63:80:0f:2e:9a:e6:70:06:6c:
4c:33:72:3d:8a:5e:dd:32:6a:e8:b1:e9:bd:eb:52:
e3:ba:3a:d0:7d:61:a6:7d:0b:95:ec:d5:9e:4f:23:
d5:d0:b0:91:f0:59:85:73:8f:1f:a7:59:12:02:dd:
b7:a3:f4:08:ab:86:42:af:6b:31:db:1a:74:bf:4c:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:6C:25:2B:B6:00:64:32:E0:93:E8:6B:A5:37:06:0C:95:32:B9
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:2f:11:41:85:a8:a9:01:cc:6c:92:61:5c:57:57:f8:4e:34:
37:3d:3a:57:6e:6a:89:c1:a8:6b:14:8e:d2:08:97:ae:a2:7d:
b1:af:65:2c:99:ed:ad:bc:d5:5b:73:86:08:52:dd:f2:5f:fa:
66:e4:68:5f:b3:b2:89:ad:10:da:a6:d7:89:bc:a7:a5:66:4b:
d3:c4:01:8c:56:57:99:8b:59:ef:fa:c3:d8:f8:62:08:00:57:
84:14:1b:76:39:ec:73:df:e8:21:14:6e:07:10:fe:d4:38:2e:
d1:64:25:de:7e:b4:96:3b:e7:45:f5:d9:13:36:13:bd:e2:54:
e6:68:e9:99:73:7e:8c:e1:8d:ab:7f:56:69:8b:79:ba:f7:a6:
ce:2c:d8:37:0f:ed:bb:be:ce:5c:92:6c:5d:67:e8:72:c7:be:
03:3f:7b:4b:92:64:5d:cb:ea:71:14:fa:26:76:3c:fd:b6:67:
90:2a:17:37:cf:c1:1c:9e:0f:9a:48:bc:82:c0:fd:84:4a:34:
6b:45:80:24:0f:89:54:55:46:48:35:06:9e:02:75:d7:54:0a:
ab:97:c7:11:80:c1:54:70:c3:19:fd:78:52:8c:b2:b5:a4:a5:
63:be:81:e0:9d:1f:b3:1a:b9:94:6c:a7:9b:0f:a3:d5:c6:ba:
83:da:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:41 2025 by rpki-client