Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: WOl1MEA3LGMMoyPbYhszV0xU7l/xC/dAI0OLhJFEFUg=
Subject key identifier: A2:DE:25:DA:0A:15:13:67:02:73:68:3E:1D:D8:99:C9:01:29:73:42
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 01974DB245D8687AB30BEFA4FBE66A66BB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 04:00:18 +0000
Manifest this update: Sun 08 Jun 2025 04:00:18 +0000
Manifest next update: Mon 09 Jun 2025 04:00:18 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: V9EInfWFFGFe8hg3Tx+6DIs/73Za8K+UVruRiQRbM28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:45:d8:68:7a:b3:0b:ef:a4:fb:e6:6a:66:bb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Jun 8 04:00:18 2025 GMT
Not After : Jun 9 04:00:18 2025 GMT
Subject: CN=a2de25da0a1513670273683e1dd899c901297342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:26:cd:4b:f4:b8:3a:39:e8:26:6b:2c:52:
dd:8b:3f:d4:2a:98:e7:80:d0:29:74:70:b4:2c:7e:
ec:af:7c:ae:ba:9c:51:d4:11:83:a8:48:40:0a:ce:
2f:fb:7f:20:36:7a:6e:5a:74:cd:8e:76:f2:86:48:
b3:50:de:cc:06:89:36:6b:f1:ae:31:b9:35:4f:1d:
62:94:9f:79:4b:e4:a4:36:b8:a1:ea:23:d7:7b:7b:
22:c1:6f:72:25:e2:09:00:eb:5e:7b:50:bb:9b:9a:
b4:97:bf:45:c5:64:89:b4:f1:67:1f:20:6f:6f:90:
4d:eb:06:e1:30:81:a5:7d:4f:ed:3f:78:c4:4b:00:
6a:b8:8f:99:e7:24:90:52:06:70:f7:f4:4c:f8:fd:
50:5c:46:66:e7:49:a9:b4:3a:b2:ab:0c:24:b6:23:
e0:19:bc:b6:8f:4b:c8:8c:78:70:4d:0c:c7:d6:3d:
1b:de:a4:1c:ba:a1:d2:f5:d8:91:37:e8:b5:6d:ad:
79:4f:6d:a0:e6:3f:ef:1d:f4:ff:57:5a:ce:db:15:
46:fb:df:49:c9:24:3d:1d:44:be:c2:3b:ad:e8:4c:
53:de:1e:0b:47:55:56:16:6a:9e:e1:08:e3:cb:27:
8b:f8:37:c5:29:0e:59:ac:fb:42:cb:13:67:ce:2c:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:25:DA:0A:15:13:67:02:73:68:3E:1D:D8:99:C9:01:29:73:42
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:93:81:15:a8:92:68:b5:df:38:c5:da:5b:15:9b:59:10:f0:
dd:0a:f5:04:c2:5d:7b:1a:2c:68:b5:4c:f5:f6:57:6d:f6:34:
1d:78:c2:91:21:ca:4c:e6:42:79:49:9e:8a:f1:ca:e1:6c:8d:
04:4e:3b:85:95:15:3f:63:75:ea:c3:d4:61:9f:2a:ee:49:46:
fc:0e:ff:a0:7b:23:67:04:82:de:94:c2:40:37:c0:94:29:1e:
67:85:11:7f:53:4b:c4:6f:4c:6d:3a:71:67:82:4a:83:37:11:
6c:b8:15:f5:19:49:a8:b5:5e:c0:f3:ad:d8:7f:97:13:77:ff:
e2:f1:2f:65:5d:84:82:f6:44:73:16:64:fd:2f:1a:95:34:fd:
88:21:f5:dd:7d:8a:55:f9:be:b5:18:48:42:53:ab:ab:b0:aa:
64:3b:e3:1c:98:e8:7e:8d:ad:ef:37:b7:bb:bc:d6:31:a7:54:
6b:c3:63:87:99:ce:f6:ba:9a:29:4a:91:1d:79:5b:0b:ff:cc:
e9:4c:58:61:47:38:8c:9e:75:30:56:60:77:95:ee:58:6a:25:
6c:16:19:a7:5e:4e:de:17:ac:bf:30:48:50:35:56:35:74:73:
53:39:1d:95:f8:7c:7c:e6:ca:ab:b2:12:ed:6b:a3:27:3b:a3:
8b:ca:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:15:27 2025 by rpki-client