Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier: pJjFFM8AXotsdBuFMFMRUfEZ1vOQ/8p3Ei4vh8AL+mY=
Subject key identifier: 3C:82:E3:5E:6D:A4:9A:EA:B3:E5:FC:E2:35:D6:23:BC:C2:37:89:A5
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial: 019768BBC9CD7B6FB51B2E92BD4AFFAE6EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number: 1588
Signing time: Fri 13 Jun 2025 10:00:26 +0000
Manifest this update: Fri 13 Jun 2025 10:00:26 +0000
Manifest next update: Sat 14 Jun 2025 10:00:26 +0000
Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: teKz5rm/+R0WuOi4+R0+zPwQF/HNVFjAQB+n/YJLVTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:c9:cd:7b:6f:b5:1b:2e:92:bd:4a:ff:ae:6e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Validity
Not Before: Jun 13 10:00:26 2025 GMT
Not After : Jun 14 10:00:26 2025 GMT
Subject: CN=3c82e35e6da49aeab3e5fce235d623bcc23789a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:f1:4b:ea:24:72:c4:24:17:15:6d:36:34:
d3:47:36:38:81:e3:79:3f:28:5a:ba:bf:73:88:85:
94:a0:61:c6:ba:97:07:fc:25:e9:4a:4a:02:37:ca:
2a:8f:bf:ba:ef:bc:06:99:16:34:ce:43:53:98:b3:
77:1f:fe:86:34:02:a4:dc:48:a0:0f:35:87:87:67:
a3:4c:10:c8:94:35:42:0a:17:5b:ce:f6:4e:05:16:
3e:aa:c1:a4:3b:db:50:91:f8:61:4a:e2:a7:c6:e3:
6a:78:ae:10:aa:fc:e1:ed:d6:b9:5e:b1:2a:05:4c:
bc:81:12:94:87:b3:79:20:e4:3f:40:45:98:ef:1b:
5a:e3:6a:a2:57:5f:90:2a:80:53:17:a3:ea:f2:92:
0b:77:ae:09:48:34:df:d1:47:3b:c9:fa:9c:18:82:
8a:e4:19:2e:fc:22:f2:56:0f:b5:9d:99:1b:71:58:
00:63:0a:cd:49:2b:ec:c3:27:05:3e:b7:9e:cb:03:
48:9f:f2:53:c8:97:a1:b1:2a:e0:c4:9e:19:7a:92:
19:f4:df:61:63:92:b2:00:6a:37:e4:d3:29:f9:be:
3b:8a:bb:e3:67:5a:c0:8e:22:aa:b4:5c:cc:23:9b:
cf:7c:c4:06:bc:5e:81:2e:7c:74:08:3a:ea:18:6b:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:82:E3:5E:6D:A4:9A:EA:B3:E5:FC:E2:35:D6:23:BC:C2:37:89:A5
X509v3 Authority Key Identifier:
keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:41:fb:3b:60:1c:1b:bb:ad:9f:4a:22:da:0c:ae:74:03:e3:
ea:58:e1:e9:6e:7c:43:68:ef:87:9a:aa:ac:78:f1:83:f7:55:
11:33:c0:3b:d5:6f:42:99:ba:9c:68:98:ea:c9:57:e8:c2:5d:
ec:c4:22:18:62:18:be:cc:07:16:34:8a:cd:e0:78:20:32:4c:
00:e2:01:52:61:4f:30:bb:7a:84:0a:5c:cc:96:a8:66:5c:61:
0c:82:d3:56:1e:b3:85:23:e5:09:c2:5a:79:7e:c1:a0:39:0f:
75:b3:77:c0:2d:3a:cc:53:7c:0e:f0:3b:84:a5:85:cc:8e:95:
15:f9:b1:c6:eb:52:2f:31:47:55:fa:01:23:c7:79:36:92:22:
3f:03:bd:ae:f3:e6:65:41:dd:03:87:01:b8:79:ed:96:4b:fc:
6c:1d:0e:04:62:07:2e:a4:79:3a:bc:26:97:08:b4:6f:19:de:
91:ef:ea:d7:17:55:df:eb:7e:ed:af:b1:1d:30:9c:5b:8b:50:
cb:bb:e7:16:d3:b9:a0:c5:79:43:62:d1:29:f5:9f:77:24:d5:
45:1b:24:27:36:21:e5:84:e7:61:51:c4:7e:90:15:4b:ce:c5:
63:c6:08:67:7e:e3:5c:a1:86:21:15:71:3d:7e:b3:31:f9:c6:
b0:16:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:47:31 2025 by rpki-client