
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
File: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft (raw, json)
Hash identifier: pfeMCYbESxTzbcXqe1C/ybeAfOzehq3YmwRjATCbqAg=
Subject key identifier: 71:B4:72:28:CF:DB:7D:EE:E6:E0:2D:69:D8:66:83:B9:74:A4:4C:96
Authority key identifier: 64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
Certificate issuer: /CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Certificate serial: 0197D21840F87C72B0B1A8954C34BEEA7E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
Manifest number: 016A
Signing time: Thu 03 Jul 2025 21:01:34 +0000
Manifest this update: Thu 03 Jul 2025 21:01:34 +0000
Manifest next update: Fri 04 Jul 2025 21:01:34 +0000
Files and hashes: 1: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl (hash: Bm6GjjVOCgUDOTsGlBe0UIs9ur/FNrr8x1uJniwuqJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:18:40:f8:7c:72:b0:b1:a8:95:4c:34:be:ea:7e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Validity
Not Before: Jul 3 21:01:34 2025 GMT
Not After : Jul 4 21:01:34 2025 GMT
Subject: CN=71b47228cfdb7deee6e02d69d86683b974a44c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:85:de:42:6f:59:9b:4c:28:0f:bf:af:2c:
bf:66:42:03:3d:f3:ca:d7:bf:da:7b:3d:88:46:ac:
e3:f3:1c:2b:0e:b3:4b:9d:2a:3c:51:c7:8e:22:83:
67:22:bf:ce:1b:6a:51:7b:bc:91:2b:33:3c:79:bd:
bd:a2:1c:32:3d:29:05:b5:b0:bd:f2:d7:e7:9a:23:
08:c0:57:34:82:9c:86:46:ea:97:98:e6:fd:7d:31:
7c:72:7c:8d:7d:a6:03:6f:f6:89:d4:cc:2a:e0:ab:
aa:1d:42:b1:47:32:42:a6:27:c6:ac:4f:9e:27:c4:
0d:1d:54:dc:0f:8a:57:25:a0:4d:f8:b2:82:d5:76:
b7:69:64:ec:4a:f4:31:77:a6:d3:b1:5d:2f:5c:c5:
c5:83:1c:29:ab:b5:1b:4c:c8:d9:2e:4d:86:cb:53:
77:e8:a0:e3:98:d8:7d:94:37:db:3e:06:e6:f0:e3:
43:24:ba:98:dc:73:ff:2a:0c:35:8d:09:b1:c6:40:
00:86:3d:e4:db:aa:42:82:08:d6:55:49:0a:db:dd:
84:b6:6b:c6:d9:26:80:68:b9:38:ce:63:2a:10:a6:
33:67:65:7b:c3:59:de:b2:58:38:be:2c:94:bb:b4:
5f:54:ba:10:b3:af:0d:ca:03:7c:f4:6f:a3:59:09:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:72:28:CF:DB:7D:EE:E6:E0:2D:69:D8:66:83:B9:74:A4:4C:96
X509v3 Authority Key Identifier:
keyid:64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:61:83:fe:f1:af:8a:38:7d:23:fe:05:2b:73:df:bd:a8:d9:
06:61:e6:43:8f:63:0d:23:8d:f6:2c:3f:7b:06:ce:d1:15:ad:
34:f8:f7:74:70:c3:de:08:32:f8:33:06:4a:47:b1:08:83:ea:
46:40:8e:64:82:f7:95:68:c6:45:9c:32:d2:fe:22:f6:0a:2c:
e7:cc:5a:8c:4e:4b:af:11:51:dd:1e:b4:3c:8d:30:91:fc:61:
ab:99:81:b0:2c:72:94:f1:0a:be:97:95:ab:a5:14:37:45:86:
ba:3d:5d:cb:a5:58:f2:c5:68:aa:0b:c5:15:00:fb:fd:87:c7:
43:95:50:eb:e7:72:2e:d2:8f:99:20:c0:be:cc:e4:8d:10:b9:
6b:31:b7:89:78:d5:90:1a:ab:d8:60:eb:1f:0a:c7:1c:3d:b6:
72:78:5f:00:3c:8d:96:4f:b3:74:74:32:dc:19:a2:18:1b:8d:
78:c0:6c:4e:5b:3f:cc:c7:81:38:6e:0b:69:3b:fb:5f:17:f0:
1a:0a:43:8d:8b:4c:7e:1a:35:7d:b1:8f:49:7b:63:e3:29:31:
e7:f8:e4:22:d1:df:64:fd:db:95:78:49:ca:93:9e:df:2f:14:
8f:b1:ed:5b:be:ff:69:f6:2f:13:1f:b5:ff:05:18:94:90:20:
30:d4:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:05:11 2025 by rpki-client