Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: YvtAcXQCUAvaEvLPfQZlshyxtiuC8wqhsgh4L5xP39M=
Subject key identifier: A4:3E:90:9C:0E:0A:A9:9F:96:94:D2:2F:42:81:CD:AC:23:25:F8:87
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 01974CD787302045E566B026F54211E6427C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0C9F
Signing time: Sun 08 Jun 2025 00:01:22 +0000
Manifest this update: Sun 08 Jun 2025 00:01:22 +0000
Manifest next update: Mon 09 Jun 2025 00:01:22 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: aAb7WWlDZ2zKVVFIrkN2i8/I3x844Vm75SRT9/NVOF8=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:87:30:20:45:e5:66:b0:26:f5:42:11:e6:42:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Jun 8 00:01:22 2025 GMT
Not After : Jun 9 00:01:22 2025 GMT
Subject: CN=a43e909c0e0aa99f9694d22f4281cdac2325f887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:75:22:38:45:e2:da:71:dd:7e:32:6b:aa:
02:51:f6:26:4b:73:5c:3f:4c:0a:8b:4a:ce:e3:29:
3d:64:47:56:ac:16:e9:91:40:05:e8:a2:2a:08:1a:
17:9a:9e:85:a7:0e:dc:c1:cb:01:f0:a2:5f:27:7c:
dd:91:61:61:aa:4a:e1:88:08:25:f1:a1:bd:65:61:
74:46:d9:60:ba:1b:fa:6b:f1:be:0b:35:fc:ae:37:
78:4b:7a:60:5c:c7:f8:27:ba:1b:2e:e9:ed:88:dd:
d9:88:e3:76:dd:6c:ce:50:81:1e:e6:ee:a5:10:8d:
6d:45:e9:0c:1c:be:9e:32:9e:cf:23:28:e6:5e:5e:
e7:dc:7d:5d:01:5e:d9:c4:a5:44:7c:cb:30:73:93:
9a:e1:fe:03:dc:27:25:a2:b0:17:9b:ff:4a:c5:bf:
4f:c2:23:87:80:e4:67:3b:69:dc:43:18:28:4a:85:
8f:2b:48:08:b0:fa:64:4d:a7:19:4e:aa:bc:1f:f0:
5b:06:83:20:26:16:3a:d2:a6:96:ee:15:3a:4d:cf:
be:fb:45:3f:e6:86:55:08:60:9e:4c:17:88:9d:9d:
ba:15:7a:0f:46:fa:69:e6:a5:03:44:e0:25:22:5f:
68:aa:b5:df:c7:61:92:74:c8:9e:d2:4c:6b:0f:77:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3E:90:9C:0E:0A:A9:9F:96:94:D2:2F:42:81:CD:AC:23:25:F8:87
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1b:66:6e:94:ff:f3:98:22:9e:73:56:9f:bc:54:b0:23:3d:
40:21:8c:3c:38:56:a8:1d:d9:fd:f3:74:0b:dd:b3:f7:8a:2c:
a2:a8:5d:4e:0c:cd:b9:53:fe:f3:a3:5c:ef:c0:83:47:13:8b:
69:91:45:1a:ef:d5:af:07:a7:e0:c7:b0:ee:5f:6a:61:97:5d:
5e:2d:81:75:bf:72:06:f2:ae:8e:25:54:5c:74:ec:75:96:0a:
b3:7f:05:48:2c:b5:29:37:18:22:bc:9e:1b:56:df:71:74:ae:
3f:d4:d9:5e:a2:4d:79:0a:cf:3a:0a:51:58:5e:60:9a:6b:51:
9e:56:6b:53:97:2b:71:c4:bb:01:88:82:03:67:0f:c0:16:97:
d7:09:d3:50:e3:e2:80:7e:4b:0d:2c:e9:a6:92:82:9a:59:0e:
06:ff:61:25:8f:8a:44:6b:16:bd:4d:ae:86:0f:6e:ae:d6:2e:
0b:c4:0e:85:1d:d3:c0:2d:0e:d5:b5:8d:ed:99:04:56:24:5c:
77:9b:c0:98:95:d8:a8:40:ac:ab:13:93:e1:31:64:5d:c7:09:
3b:bf:44:f6:a3:23:48:a3:2b:e3:06:49:ab:51:f1:16:aa:7d:
44:ce:10:3d:29:71:bb:46:cc:3c:96:89:4a:d4:68:af:b0:b5:
a5:7e:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:41 2025 by rpki-client