Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: 4OXa3JCQika4/4v0pd+TBr+2Cj748xV2FFxJ6BrB4/o=
Subject key identifier: D7:11:FF:A6:D9:2F:F7:22:75:AA:54:B3:49:66:C2:47:06:7B:A6:5B
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 019758A40E5A54D9A95E5D60CAD1ED7C8A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 112D
Signing time: Tue 10 Jun 2025 07:00:35 +0000
Manifest this update: Tue 10 Jun 2025 07:00:35 +0000
Manifest next update: Wed 11 Jun 2025 07:00:35 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: s/M6H2jRo+jrDKbqBYMOqvxOpDkud5zjph0IM5j2XF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:0e:5a:54:d9:a9:5e:5d:60:ca:d1:ed:7c:8a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Jun 10 07:00:35 2025 GMT
Not After : Jun 11 07:00:35 2025 GMT
Subject: CN=d711ffa6d92ff72275aa54b34966c247067ba65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d8:cb:d3:8c:4c:31:a1:d8:80:33:2a:90:c5:
e9:5f:26:9d:7c:a0:19:a6:ab:73:33:84:af:d8:56:
a4:2e:d4:3b:ba:ec:ea:d1:eb:e1:86:d6:bc:77:ec:
f4:d8:13:48:eb:fb:a6:87:43:d5:60:76:14:70:12:
43:8c:fd:8b:ef:ac:a8:c6:2c:bc:1e:94:79:3d:0b:
1a:7c:37:2b:b1:7d:df:17:6a:19:66:1d:53:43:c4:
98:11:2e:ee:f9:b5:c0:66:bf:46:bf:eb:2c:c6:08:
a5:0b:ed:25:0f:b3:b8:fb:fa:aa:6c:83:5e:5a:9b:
a1:f2:4f:82:bf:79:13:5e:12:15:60:05:03:de:1a:
78:23:91:59:83:52:e5:2a:e3:f8:b0:98:1c:84:94:
dd:24:a2:8f:b3:0c:b1:08:46:4c:a0:08:60:34:02:
c8:3d:82:eb:99:4b:4e:2c:3b:ad:9f:76:2e:83:ea:
88:77:e8:c3:69:00:63:9e:7a:3c:11:99:14:26:5f:
2e:b5:c2:d4:aa:29:d9:25:92:53:ae:0b:e7:6c:e3:
a7:1e:ca:0f:c8:e5:87:3f:3d:74:06:c8:eb:c9:42:
14:17:81:23:47:1e:15:33:45:09:e7:21:61:db:50:
c7:f9:6c:42:6d:1b:71:c3:58:51:2a:8c:8d:3b:86:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:FF:A6:D9:2F:F7:22:75:AA:54:B3:49:66:C2:47:06:7B:A6:5B
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:43:36:a9:a1:bc:41:f0:18:6d:fb:bc:c1:4f:bc:99:9d:e5:
b3:42:a6:7f:a8:54:62:4e:05:9f:5d:25:dc:e9:7c:32:62:47:
a9:dd:45:cc:e4:74:b7:64:35:7d:46:24:7f:9a:71:2b:05:06:
bc:14:e7:e8:7b:c5:73:9e:85:56:11:59:64:ed:29:35:bb:75:
73:fe:de:4e:1a:73:c0:92:1a:9e:32:aa:7d:3c:db:a1:b7:21:
7a:89:1d:e5:66:ea:60:65:f3:05:d6:75:87:ec:d2:51:3a:bd:
97:25:2b:aa:89:40:95:3d:ad:38:9b:b8:42:a2:57:97:56:e5:
5b:4c:be:0e:12:b7:25:03:9e:d1:fa:08:a4:50:6d:01:ff:7c:
b8:c5:fe:a0:f9:c8:15:14:4c:d4:ea:58:25:9d:ce:70:b9:27:
81:fe:75:84:14:21:f1:7e:90:dd:39:21:c7:b5:cc:34:81:63:
cc:3a:68:ab:cb:8d:5e:e2:48:36:4e:82:09:cc:5c:2b:21:6e:
fb:25:8b:cc:9a:87:f3:7b:3d:c5:fa:02:b9:47:f3:9d:fd:62:
ec:db:e8:b9:1f:ea:8f:1f:f7:64:a3:be:8b:ef:72:1f:08:75:
a6:d3:c6:16:11:d9:6e:96:ed:3b:bb:76:ef:25:cb:fc:be:01:
69:43:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:41:25 2025 by rpki-client