Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: IFmWrvQhTS7CRMjEhjeTA7iNrnVaXgmaLDVOn3/kUKI=
Subject key identifier: A0:BC:A1:78:E6:90:56:2E:24:6C:92:3B:72:31:9D:5D:90:D0:CF:51
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 01974A7B236DE41F4D692E97A924F368BB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 072A
Signing time: Sat 07 Jun 2025 13:01:13 +0000
Manifest this update: Sat 07 Jun 2025 13:01:13 +0000
Manifest next update: Sun 08 Jun 2025 13:01:13 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: yfyVu1gazUdd2xNmhhkgy8+sGu/OQV0KwiFxDA/gRyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:23:6d:e4:1f:4d:69:2e:97:a9:24:f3:68:bb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Jun 7 13:01:13 2025 GMT
Not After : Jun 8 13:01:13 2025 GMT
Subject: CN=a0bca178e690562e246c923b72319d5d90d0cf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ec:bb:a6:6a:81:72:37:43:ed:c4:86:55:09:
bd:b6:07:e6:31:9f:dc:b2:40:44:8e:7c:64:a3:e2:
8d:6c:08:7c:d0:20:56:6d:3e:e2:8e:ca:ef:e2:b0:
2c:25:53:0f:c1:de:37:6f:f3:5b:fe:46:c5:d1:0c:
19:95:63:4e:03:0a:b3:90:89:b8:9e:6a:71:83:5a:
0c:d6:7c:92:e1:3e:df:ff:85:cf:be:6e:ca:e5:57:
63:fd:d8:e6:b6:bf:0f:03:a3:e2:4b:a0:e2:b4:05:
47:e4:1f:08:45:41:93:0d:2d:5f:20:6d:7f:b7:25:
7c:da:f4:40:82:9e:e6:fa:9b:ad:9f:c7:9d:65:d2:
4c:1a:65:65:8b:5d:0d:5a:d9:9a:9d:12:78:ff:ee:
c3:0a:1b:0a:dd:ad:a7:fd:33:87:1d:d8:74:fa:8b:
89:fd:80:6b:25:06:dd:99:bd:fe:15:34:b2:e5:fb:
92:1e:b3:ae:5c:a0:4e:35:0d:bd:f8:00:5b:17:15:
ff:bb:e2:1a:fb:91:a3:38:7e:0b:00:81:ba:ef:e5:
4f:84:87:86:4c:73:ec:c9:6c:5d:b5:d4:09:8e:6d:
50:e2:4c:5b:9f:bf:1f:3c:98:77:33:9d:7e:06:bf:
19:1e:ca:39:08:aa:bb:04:15:9b:bd:4f:ff:86:44:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BC:A1:78:E6:90:56:2E:24:6C:92:3B:72:31:9D:5D:90:D0:CF:51
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:47:6b:f9:34:64:93:8b:d7:ee:13:91:35:3d:06:17:39:88:
af:86:0d:96:6d:95:1d:0c:f7:38:be:83:6d:59:a0:1a:c4:0d:
48:8b:39:c9:73:f3:95:77:24:0a:f9:0f:b0:2a:65:65:2f:9a:
18:3e:3d:e6:b5:8c:22:00:7c:7f:3d:25:81:53:de:3e:51:7a:
67:6b:f4:47:c3:09:be:d0:3a:77:b5:d6:8a:5d:b8:4d:ab:3f:
fa:27:aa:38:8e:4c:d4:f4:8b:45:6b:9e:c8:2f:e1:6d:02:04:
78:97:f5:ea:01:a6:d1:51:e3:07:be:9d:a2:a6:f0:3a:b6:87:
d9:5b:53:86:3e:7f:29:2f:90:dc:99:78:33:17:eb:79:cc:09:
95:07:eb:27:eb:0a:54:1b:1f:bf:1e:21:e9:68:a0:46:3f:f9:
44:cd:71:59:e8:03:5d:6d:25:cd:06:04:4e:aa:c0:10:0a:98:
dc:86:4b:f4:46:c2:b9:5b:b6:d3:dd:e2:f4:67:e3:d1:6e:58:
7f:cb:f2:e9:e2:76:c2:f3:cd:25:da:f5:4c:98:5a:4a:ed:ea:
3f:64:08:da:39:50:59:d3:ba:6e:b0:b2:5d:1e:97:2f:5b:07:
04:6c:a0:1c:0a:2c:47:34:73:8b:22:55:b3:5c:6b:1b:a2:a3:
97:8d:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:30:22 2025 by rpki-client