Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: nbi4wyFtNPB1JVCNu0JBF7fGzc+xcv0OzD4tsy0bYIo=
Subject key identifier: EC:E3:0A:BF:B2:9E:C1:58:32:04:55:23:96:2B:48:0C:29:D8:D3:5E
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 0197469DE7BBDD37803D9D91D35411BD9921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1577
Signing time: Fri 06 Jun 2025 19:00:43 +0000
Manifest this update: Fri 06 Jun 2025 19:00:43 +0000
Manifest next update: Sat 07 Jun 2025 19:00:43 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: tZdJNCzx5FqPf6rfD0n2biI/SovibAGHT9FJH0bgKic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:e7:bb:dd:37:80:3d:9d:91:d3:54:11:bd:99:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Jun 6 19:00:43 2025 GMT
Not After : Jun 7 19:00:43 2025 GMT
Subject: CN=ece30abfb29ec15832045523962b480c29d8d35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:be:98:54:4a:9a:c7:86:3c:57:73:35:c9:
a8:07:75:06:3c:4a:8a:93:d1:8b:12:6c:30:ea:0d:
e8:83:e1:71:25:4d:32:f6:7b:d2:ff:b7:39:62:b9:
ed:38:08:9e:9b:a5:a8:92:a6:41:29:90:c5:e0:b7:
83:06:db:6d:2f:67:f2:a3:02:7a:cd:1c:37:30:b8:
1f:e1:7b:27:c4:13:a7:d1:d7:26:3c:d2:c1:8c:8c:
e0:d4:05:f1:6a:2c:05:41:0b:19:a6:82:c7:27:3d:
b7:26:95:29:7c:14:63:f2:42:40:41:38:6f:2f:ce:
db:fa:1c:ab:64:b1:27:9c:f2:70:8f:fb:45:25:03:
09:7a:55:23:24:89:7a:95:0d:da:04:5c:77:f0:67:
85:67:38:4c:dc:93:d0:91:b8:95:39:14:df:9b:64:
f6:cf:f1:91:6c:1b:14:de:f5:dd:3a:a6:5c:22:59:
96:92:70:ed:4a:2e:c6:cb:26:a6:14:d6:8d:cf:4c:
af:1f:27:52:f3:eb:d3:b3:72:f1:b3:9f:b6:0a:6e:
16:3c:30:6f:05:bd:ba:fc:b9:6f:5c:c9:ea:7c:e2:
94:b4:8f:a7:11:9c:ae:1b:ea:14:fb:59:20:bd:a7:
f8:27:2c:4d:85:ab:e1:18:bf:47:c1:e3:4d:7f:d9:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E3:0A:BF:B2:9E:C1:58:32:04:55:23:96:2B:48:0C:29:D8:D3:5E
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:19:a6:aa:f5:9d:65:e7:d1:26:f5:39:b9:2b:14:b3:d7:1f:
e9:34:bf:53:85:e6:94:5d:f9:af:25:e9:73:4f:d4:f4:2e:b4:
41:1d:e7:bd:d3:7e:5d:3b:d3:f8:ed:83:bb:87:d8:2c:de:ec:
62:eb:b0:bf:c0:46:ec:7b:44:7e:f1:40:ee:e3:e6:47:e7:3d:
bc:2f:30:c0:17:9f:77:15:b5:d7:6b:da:84:fb:80:25:c8:4c:
e2:bc:64:83:72:bf:32:01:f1:a6:f7:33:1d:e1:b6:d3:69:f5:
8b:43:60:05:fc:25:f9:a0:87:00:8a:f9:1a:b6:7f:ef:52:52:
93:c2:85:47:2d:9f:b7:31:92:c3:dc:be:d5:bf:73:5e:d6:fa:
ac:cd:81:8a:db:8e:b9:2f:47:e8:6a:37:52:23:75:d6:68:d0:
07:10:88:e9:eb:c4:be:8f:b3:8b:82:0f:f4:b1:7e:42:ee:d4:
b8:0c:ab:b4:fa:c4:1a:37:cd:c3:9d:bb:5a:cc:d7:3c:8e:d0:
47:c1:50:5a:66:3f:a2:6a:49:e1:57:35:e6:75:c2:2a:97:b2:
ca:d6:a3:ce:1d:d4:94:60:dd:04:13:0c:6e:ad:f7:da:57:7c:
39:f6:91:7d:19:06:c8:5b:92:a2:0f:f9:39:88:a8:27:7f:12:
5e:d9:74:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:41 2025 by rpki-client