Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: Y16DDohJOwoV5z3UMTp8jogufz7vgZAW9OyIH3Q5Oi8=
Subject key identifier: 2C:D6:76:DE:AC:CD:59:2E:38:29:0A:28:3C:E2:9B:33:16:BC:B3:40
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 01974742FAEAD83BA1E52948AC7B17469FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0E39
Signing time: Fri 06 Jun 2025 22:01:01 +0000
Manifest this update: Fri 06 Jun 2025 22:01:01 +0000
Manifest next update: Sat 07 Jun 2025 22:01:01 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: uglvwkJjKM5i79tkKhSUERVTQa9kOLjVDMF107D5J8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:fa:ea:d8:3b:a1:e5:29:48:ac:7b:17:46:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Jun 6 22:01:01 2025 GMT
Not After : Jun 7 22:01:01 2025 GMT
Subject: CN=2cd676deaccd592e38290a283ce29b3316bcb340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:1f:bf:ee:18:1d:86:83:16:ae:17:35:89:
5b:73:d4:77:81:6b:45:42:4c:14:9f:a3:a1:9e:56:
6c:1a:57:18:89:64:f5:c1:60:1f:e8:91:e4:8a:10:
ca:be:3d:02:d4:07:50:83:01:68:2e:f6:a0:fe:ce:
0e:72:12:9e:7b:23:0f:7f:48:e5:9b:1c:d5:ca:67:
63:17:ae:c0:18:52:1b:0f:6a:b9:b0:db:5e:bd:b5:
f7:f1:26:99:db:5b:b4:45:8d:b5:8a:57:62:06:3a:
d0:c7:15:32:f6:29:51:03:75:d4:fe:5a:8b:57:66:
b2:90:6f:18:3a:4c:33:64:5d:39:24:db:10:ce:47:
f2:9b:10:67:3e:97:5f:1c:5d:34:71:9a:b7:e1:91:
c8:fa:f0:35:11:f8:0f:63:a7:01:40:7b:83:2e:20:
0c:a6:46:ad:3f:22:5e:1b:b9:a6:07:0b:aa:11:06:
b4:d5:40:53:b2:88:46:e3:e9:25:9e:e4:8b:bd:50:
3b:5d:27:9c:73:ad:ba:58:0c:a1:a5:3e:b9:45:3b:
08:e1:5f:7b:50:76:e2:7d:b0:95:90:a3:25:d5:c3:
99:2f:45:d2:94:8d:2d:93:73:47:1b:48:b8:f9:65:
11:ad:0c:60:08:67:c9:66:fa:b6:c7:73:cb:42:f7:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D6:76:DE:AC:CD:59:2E:38:29:0A:28:3C:E2:9B:33:16:BC:B3:40
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e1:56:51:d3:7e:4a:6b:65:b6:f0:bf:8a:2b:d8:6a:22:94:
fa:12:92:00:49:95:59:2e:64:f2:a6:ca:d6:9a:b7:e5:28:ac:
bd:02:a5:25:14:62:e3:24:50:63:d8:c6:76:1a:ad:5d:e8:eb:
c3:1a:f0:bf:e0:47:10:43:1f:d0:ff:bd:d1:29:d7:4d:cf:27:
30:82:6c:03:ac:11:23:45:f4:1f:89:93:f7:dd:6d:2f:14:7f:
cd:90:3f:83:c7:10:d7:4e:91:f4:f5:29:26:3d:4a:9c:ea:52:
3d:a3:88:5b:a0:1d:ac:36:84:5a:37:c5:13:3c:d4:3a:1b:31:
a6:33:e8:13:02:96:a9:dc:1a:5c:b8:5f:7e:ce:59:9c:b9:f4:
0a:37:68:5f:e1:ba:57:2d:70:1f:bf:19:ca:e1:9b:0a:43:74:
22:3f:64:fa:b4:b7:b3:c1:ba:fe:d2:92:02:15:20:fb:b1:ad:
9e:ea:c1:c5:2f:a9:f0:e7:cb:9b:ca:40:fd:e6:09:20:ee:0d:
16:8b:65:06:f0:30:c1:0e:48:b3:8e:f1:84:0c:bc:f7:3c:76:
37:71:c0:3c:f0:ef:c0:89:31:eb:bd:ec:fc:2e:ce:32:e2:5b:
c5:7f:67:b8:3a:4f:46:12:fb:ba:1e:57:f4:e9:06:36:13:0e:
8a:0d:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:26 2025 by rpki-client