Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: F4dT8jTuUcfJ+SUZxGjyKwQtK16S/XY1vuu1bkvZGWU=
Subject key identifier: DA:CC:2E:F9:CD:1E:53:51:13:C6:9B:7F:C8:9D:C1:A7:EC:B1:86:6C
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 01976DAB5206C536C31056A79536B6F887B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 0539
Signing time: Sat 14 Jun 2025 09:00:33 +0000
Manifest this update: Sat 14 Jun 2025 09:00:33 +0000
Manifest next update: Sun 15 Jun 2025 09:00:33 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: QbKiTt1qSHavOcAS3r4Y03PC3I82Y/K8uSTwfx92gAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:52:06:c5:36:c3:10:56:a7:95:36:b6:f8:87:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Jun 14 09:00:33 2025 GMT
Not After : Jun 15 09:00:33 2025 GMT
Subject: CN=dacc2ef9cd1e535113c69b7fc89dc1a7ecb1866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1d:fa:b1:6a:bc:46:19:6f:59:96:9d:81:14:
02:cd:43:53:f0:9e:ab:ca:e1:c0:d8:94:08:17:00:
6d:e7:65:e1:61:1f:04:79:72:f5:ac:39:d2:11:a6:
e9:a9:38:4b:45:04:17:94:9f:1d:61:e1:93:9e:08:
89:50:fd:6c:86:82:78:6a:77:a8:8c:d7:70:e8:2e:
ce:e7:3b:aa:de:1b:7b:eb:80:30:c3:dd:6c:7b:48:
f6:53:95:20:f2:dd:6c:c9:b0:30:26:e7:80:83:51:
a9:87:28:1d:00:06:8e:d8:0b:15:38:80:3c:9b:96:
b8:b5:b9:a6:92:64:7c:96:63:3b:7e:c7:80:85:8b:
a8:85:c0:b7:be:b9:ee:2a:c2:a4:9b:22:64:42:aa:
53:54:5b:b9:37:a3:ef:e0:04:12:5c:e6:01:c0:86:
1b:98:17:21:1c:af:1b:31:4a:27:1a:32:17:ea:03:
b2:70:18:b5:8c:c4:cd:fa:46:01:6b:5f:fd:20:5e:
53:de:04:4e:88:45:cc:d2:7b:fc:e0:95:7e:51:16:
89:81:1c:79:d9:15:73:2e:99:43:02:8b:06:b0:02:
ab:b0:cb:42:76:af:a6:0b:a6:31:84:8e:43:fa:c9:
0b:bd:57:e1:7c:4e:bf:e1:b7:8c:11:dd:67:cc:6b:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:2E:F9:CD:1E:53:51:13:C6:9B:7F:C8:9D:C1:A7:EC:B1:86:6C
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ed:35:ff:28:ab:ad:be:4d:37:97:7e:2b:0e:a9:99:bc:4f:
37:02:57:03:09:53:19:4a:f8:2f:06:56:78:0c:da:c0:b3:46:
7e:96:84:3f:75:27:45:40:74:31:f5:df:28:d9:99:d0:54:8f:
0d:1e:d6:f8:7a:58:8f:21:19:67:87:52:92:1f:ff:12:fc:73:
44:35:bf:0b:0d:77:97:e5:af:d4:12:01:e0:0f:97:af:ad:50:
39:06:77:d8:41:9e:6b:d5:71:5c:90:dd:59:a1:12:07:92:09:
04:2e:da:1a:2b:64:7b:5d:85:67:92:29:a9:06:ec:ed:c6:d9:
9b:c5:28:60:6f:8a:d3:3b:79:5b:63:87:5c:c7:ff:25:9e:5d:
4c:50:36:29:3c:99:d8:dd:65:7c:79:3a:23:b6:d8:7f:3f:22:
09:52:13:51:fe:34:81:a1:db:b6:07:25:1c:b8:a7:22:08:03:
89:a6:6f:30:a1:79:4b:06:28:b2:d0:09:a2:d7:97:ef:a4:05:
91:01:e3:5b:88:4c:fa:5f:fa:7b:6b:a6:18:96:f2:e7:23:cb:
6e:67:1f:e0:b8:9c:11:f4:1d:37:db:39:43:75:8b:11:e5:32:
bc:12:0a:1e:58:77:48:53:79:34:f9:38:0b:75:29:a1:b9:ac:
e0:9d:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 14:28:54 2025 by rpki-client