Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: eD9eR6+J9v+avovFnQ6XhH2b+gLYGpl7W9MCpnGuEz4=
Subject key identifier: F0:D5:E1:0F:F5:58:DE:29:E9:1E:35:5C:A8:DE:27:BB:60:BE:8C:EB
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 01974A0CD6A909506E8776AB81A975C2ABE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 04DE
Signing time: Sat 07 Jun 2025 11:00:44 +0000
Manifest this update: Sat 07 Jun 2025 11:00:44 +0000
Manifest next update: Sun 08 Jun 2025 11:00:44 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: k97HUqlLmkAwvwnTaUn2JTuRKUDG0BMuMM5TTP1tvAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d6:a9:09:50:6e:87:76:ab:81:a9:75:c2:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Jun 7 11:00:44 2025 GMT
Not After : Jun 8 11:00:44 2025 GMT
Subject: CN=f0d5e10ff558de29e91e355ca8de27bb60be8ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:be:e4:c3:96:dd:58:27:e8:43:1a:83:a7:
b8:4f:a0:1c:12:51:93:c2:43:a9:c0:80:33:0d:f0:
76:34:cb:87:c9:eb:f9:78:83:bb:5e:db:26:85:08:
1b:f7:c1:de:06:df:ae:62:84:59:ac:59:91:0a:01:
1a:28:c0:c4:a4:5b:b2:3a:44:c5:8f:86:45:ff:ab:
c7:62:67:a6:f0:04:d9:b6:c1:5d:ad:33:02:07:71:
b1:e9:d0:e3:46:8b:26:03:08:0b:a8:2f:44:a5:e1:
82:93:f6:8a:2a:37:2e:08:b5:5d:22:8f:2d:b6:98:
ea:5f:27:f0:c2:dd:c6:ff:2d:d9:3b:21:dd:1c:b0:
ea:b3:66:78:a8:f8:23:9e:29:dd:4a:25:0f:34:23:
69:02:86:1d:bd:fb:85:77:ed:06:95:9c:8d:c0:cc:
e2:ed:e8:11:d3:5c:b3:b9:a2:12:c2:17:8c:86:44:
8a:8d:7e:04:5b:9a:07:e0:02:47:a7:7c:4f:fc:33:
f4:8f:22:4f:16:1f:5e:ce:9f:ab:ed:d1:b8:5f:65:
26:12:fd:a4:45:67:c5:f9:49:1d:c3:e4:52:a7:84:
2c:9c:ec:28:85:80:46:24:db:a8:55:9a:76:41:9e:
c3:d3:08:41:ac:e5:53:62:aa:4a:4f:42:e9:06:45:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:E1:0F:F5:58:DE:29:E9:1E:35:5C:A8:DE:27:BB:60:BE:8C:EB
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:37:4f:53:88:1e:06:8c:82:42:53:9a:c7:e1:04:3d:1b:5c:
c1:ad:1e:7a:12:62:41:92:bd:e2:20:65:91:3f:28:31:ad:42:
0e:03:41:5e:7b:77:b0:ac:af:c9:50:53:20:48:1e:2e:84:a1:
c1:2b:1f:60:48:1a:48:7a:7a:7a:51:c8:b2:97:35:a3:fb:a5:
c7:37:f1:e0:fb:9f:9a:a2:62:4d:6e:19:fc:52:4f:59:c9:2f:
11:c8:da:38:a6:67:fa:a5:f7:a0:c7:b9:79:d8:8f:1a:42:10:
b3:57:96:36:8c:3a:9d:c6:91:34:ad:aa:3c:28:6f:78:4f:eb:
ef:67:fc:2a:28:a7:1f:67:79:c7:1e:82:4d:e5:ee:b6:af:60:
d6:97:65:4d:f9:53:ca:11:6d:df:c2:b9:d1:57:75:d1:96:22:
3a:6a:40:df:d7:26:43:3b:f2:9f:71:43:b1:d2:4f:a1:56:a2:
c2:bc:cf:45:ec:d3:47:66:77:c3:95:fc:6a:18:38:f1:b3:5f:
20:70:6a:0a:82:56:95:ed:bc:e8:ae:84:b7:0d:94:b7:dd:49:
99:49:9a:04:79:5c:a2:a8:8b:19:f3:83:59:16:19:9a:95:99:
32:3d:ab:d7:2e:91:df:e5:03:52:19:b0:68:d6:fc:da:35:1f:
03:7e:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:10 2025 by rpki-client