Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier: WLPrMd+vqYHLYMhKLvxpujPWOzJxSJk/7hn6Xcd7Wyw=
Subject key identifier: 09:80:CE:98:B6:3D:2E:7D:FF:A5:56:09:AE:B9:5C:00:34:32:1B:5D
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial: 019764DF0B8C49FB05212B5741B662BD3FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number: 1586
Signing time: Thu 12 Jun 2025 16:00:28 +0000
Manifest this update: Thu 12 Jun 2025 16:00:28 +0000
Manifest next update: Fri 13 Jun 2025 16:00:28 +0000
Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: 0sgFV0o+A8UnmOgw8m/R5q7mXuktdGLfVPPGwIimQAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:0b:8c:49:fb:05:21:2b:57:41:b6:62:bd:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Validity
Not Before: Jun 12 16:00:28 2025 GMT
Not After : Jun 13 16:00:28 2025 GMT
Subject: CN=0980ce98b63d2e7dffa55609aeb95c0034321b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:70:06:fc:86:c9:53:ba:5d:18:b0:8e:b9:
ce:85:f5:ed:7a:7f:94:f0:ab:5f:9d:2e:be:33:e1:
5e:63:37:85:62:e3:d2:74:ce:19:0c:42:ee:88:e7:
c0:61:ce:5a:fb:4b:e6:ce:8d:47:d7:d6:72:f6:42:
75:d6:ec:30:8e:e7:70:47:9e:38:4c:88:6a:99:a4:
48:27:38:29:a8:0f:f5:0e:25:07:38:3d:a0:f0:be:
e3:a7:39:1f:08:5e:1a:be:72:19:b3:58:b1:eb:a3:
bb:37:81:98:f0:21:e4:72:25:63:17:8d:09:58:3c:
d0:c3:ba:c8:7f:4a:9a:2a:ff:ab:13:c9:f9:d7:86:
07:21:28:57:d3:08:e1:00:0c:cd:9f:16:e4:ea:bf:
fa:24:d3:9d:61:f7:a9:69:92:db:c8:c6:11:ae:22:
fd:26:4d:b9:ea:ac:72:33:df:1b:45:cf:e6:0a:84:
0e:d5:4f:4d:10:32:2a:7a:96:33:88:f0:55:3b:1e:
d7:55:77:1f:cb:73:a7:ba:2d:6a:3c:fb:72:0b:c4:
3c:9b:16:7a:12:99:d5:4e:a6:71:ee:36:c1:6f:0d:
db:65:8d:50:0f:1e:84:e5:f1:55:b4:84:ec:c7:bd:
4d:24:98:23:f4:d7:0d:82:dc:fe:b9:41:8b:6d:3d:
a6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:CE:98:B6:3D:2E:7D:FF:A5:56:09:AE:B9:5C:00:34:32:1B:5D
X509v3 Authority Key Identifier:
keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:97:30:a9:05:4e:0a:62:28:15:7b:08:ca:1d:4a:f6:da:11:
5a:dd:49:77:a5:23:2b:2f:6b:ee:fb:89:af:d2:49:48:7a:b5:
e2:1e:c1:39:85:96:b5:49:ec:1e:20:48:c0:a9:8e:a4:63:c4:
ca:8b:57:3f:45:1f:a2:d0:c8:49:93:6f:41:d4:21:b0:0f:35:
e4:b3:4b:cc:b8:24:f8:14:e6:3e:39:9a:53:6d:52:c3:48:d7:
08:65:69:98:b4:c6:e2:08:dc:af:a4:86:5d:07:25:6a:33:75:
29:31:50:40:2c:5b:98:4f:82:70:16:91:88:74:23:86:36:2a:
fd:7b:42:29:81:40:dc:d0:f9:35:bb:f4:14:9a:89:4a:88:63:
06:93:44:9f:60:5a:aa:f1:da:8d:ad:e8:01:a7:29:cf:89:1c:
2f:3b:d4:0e:9b:3d:38:3e:ab:37:19:7c:8d:9d:a5:fe:c0:5c:
9e:fb:21:a2:98:85:fe:1f:af:1a:67:75:ab:9f:cf:36:3b:81:
a4:83:3f:9a:e8:05:c9:f1:5f:0b:df:67:1a:7b:fe:26:d8:2e:
e7:d4:28:7e:a8:84:49:c6:f7:74:fb:e4:84:5b:40:8b:0f:30:
11:18:91:6d:10:29:e2:6c:13:a6:06:05:c0:a4:76:a4:cc:f7:
54:7b:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:03:13 2025 by rpki-client