Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier: muHib+9Mlo7++j8maqnKdg/x2cD+ocSxz2va0SPPn10=
Subject key identifier: 2F:1C:F4:6F:BE:31:D1:38:59:7E:30:77:33:24:76:8D:2C:A6:03:46
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial: 01974C69D57CE1891F37618ABB865D35D730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 22:01:33 +0000
Manifest this update: Sat 07 Jun 2025 22:01:33 +0000
Manifest next update: Sun 08 Jun 2025 22:01:33 +0000
Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: RuvFW94534TYE5QQG2FTlhjSP0Tnrrc8eoou51Tb38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:d5:7c:e1:89:1f:37:61:8a:bb:86:5d:35:d7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Validity
Not Before: Jun 7 22:01:33 2025 GMT
Not After : Jun 8 22:01:33 2025 GMT
Subject: CN=2f1cf46fbe31d138597e30773324768d2ca60346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:b5:f3:36:4a:79:d7:dc:ec:d6:88:9e:96:
30:9c:ff:4e:3d:12:20:c7:fd:f7:f8:8b:54:53:a2:
27:9b:95:78:fe:c8:72:cd:a9:de:bb:d0:8a:5c:ae:
ca:21:d7:5d:f0:1c:6a:ce:42:05:12:77:9a:b8:2a:
50:40:29:5a:27:5e:f7:fb:d8:45:09:ce:7d:16:5f:
b9:a0:c1:53:99:fe:44:40:53:db:85:8d:00:27:cb:
da:17:88:b5:13:bc:2b:65:f6:46:97:f5:95:27:18:
90:31:89:93:97:b5:e5:5c:30:44:2f:79:02:b6:34:
a4:22:2d:e7:3a:d3:60:a2:82:a4:b1:37:59:6d:15:
cc:a8:ad:95:7a:f5:4a:56:eb:a4:af:c8:90:60:cf:
59:53:8d:ff:40:fb:bb:d3:48:85:21:6f:53:9b:1f:
a2:fc:3b:63:51:61:58:b4:01:4d:a9:02:10:8e:f2:
2e:7c:9f:0f:72:63:98:bd:2c:38:19:77:5a:0f:ad:
f9:bb:8f:22:cc:bf:0b:3f:a5:01:26:91:71:84:8c:
6d:e4:17:f7:35:f0:76:94:f6:9a:45:f4:47:cf:03:
d2:af:dd:5c:60:49:0e:ff:85:1c:f9:c1:08:ac:0f:
65:06:1f:10:ab:00:4a:ef:62:7c:03:51:74:18:11:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:F4:6F:BE:31:D1:38:59:7E:30:77:33:24:76:8D:2C:A6:03:46
X509v3 Authority Key Identifier:
keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:09:e3:7f:3e:40:9b:8e:89:fb:b6:18:9c:70:80:72:89:c6:
a9:24:61:b5:c6:f1:c6:90:da:69:7e:38:4e:b7:b1:41:03:1b:
a6:25:33:1a:3a:db:c8:31:70:81:ec:28:f9:46:b3:73:20:6f:
5c:db:d4:a5:fd:9f:48:5f:59:3f:ff:07:f5:21:53:e7:db:c0:
af:bc:4b:b9:7c:3c:02:c5:50:60:7d:6b:7f:2f:6c:5f:fd:d7:
75:0d:56:8d:26:ef:95:d1:16:0b:b7:18:e9:6d:5d:85:d2:7d:
a9:42:12:3e:f7:5f:9b:a3:c4:c2:90:c4:34:cd:f3:05:ee:60:
e1:32:5e:10:05:27:4a:3a:db:7e:80:78:36:a2:d2:0b:2d:df:
d6:d9:59:30:f1:bd:45:57:59:02:b8:5e:0f:81:28:74:e3:88:
9e:b1:3f:95:84:98:0e:59:9d:59:cf:a9:68:e4:8a:32:57:e6:
30:4b:cb:e5:43:b2:f1:a4:35:7f:c2:27:05:15:6c:27:9b:6f:
f5:26:ec:4e:89:1b:33:27:5c:6a:51:e2:22:6e:26:3a:26:15:
84:7d:18:d7:cf:12:1d:1e:9b:84:ed:ee:89:2f:39:6a:33:e7:
e5:4d:51:47:b8:0d:68:04:f0:69:53:31:d1:84:2c:d3:de:d3:
23:6c:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:12:40 2025 by rpki-client