Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
File: zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft (raw, json)
Hash identifier: pGqn7TUmgn6307FZTxKAoiouMuVmLUDLcy1PD/Rm8yk=
Subject key identifier: 5C:6E:BE:BE:C3:44:D7:CB:2B:B9:A5:5E:69:A3:E1:60:23:42:63:3E
Authority key identifier: CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
Certificate issuer: /CN=cda054474fafd90b0ea47c55765bbe6f37637531
Certificate serial: 01976327825E916A496EA2FD1C68F4C39B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
Manifest number: 3E
Signing time: Thu 12 Jun 2025 08:00:23 +0000
Manifest this update: Thu 12 Jun 2025 08:00:23 +0000
Manifest next update: Fri 13 Jun 2025 08:00:23 +0000
Files and hashes: 1: zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl (hash: XwBLnGLE75jlfrw2wrMHA6UqHxUG8beYuMwe5N1cLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:27:82:5e:91:6a:49:6e:a2:fd:1c:68:f4:c3:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda054474fafd90b0ea47c55765bbe6f37637531
Validity
Not Before: Jun 12 08:00:23 2025 GMT
Not After : Jun 13 08:00:23 2025 GMT
Subject: CN=5c6ebebec344d7cb2bb9a55e69a3e1602342633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:0b:f1:30:9f:d5:e7:dc:d2:e4:a0:94:f8:
26:a2:c0:c1:0d:cd:99:8e:02:56:46:2f:a8:7c:a9:
01:69:43:e4:93:a6:41:08:17:8d:05:fb:f6:ca:49:
16:72:5e:80:59:f0:8b:f2:11:1d:f3:96:a9:fe:f8:
1c:3e:c9:5a:ae:6f:55:d8:6e:a9:1f:e0:32:70:4b:
0e:0d:b5:d8:89:54:0f:dc:7f:7d:3e:8f:38:d3:f0:
53:30:a5:55:ba:9b:2b:0e:c8:c9:96:57:07:c1:55:
85:d9:c7:d0:05:63:5d:3d:90:df:2a:01:c0:ee:e2:
65:6b:d5:3c:df:35:30:d7:21:2d:a6:8a:6a:e1:11:
f8:f8:34:4d:5f:b3:7d:95:67:af:88:b1:2f:5a:dd:
04:2a:81:2a:33:4a:d5:54:e5:07:22:0b:aa:e4:b0:
12:bf:08:8a:1a:08:c0:7e:d6:29:f1:18:89:79:d2:
40:76:d0:ba:9b:66:97:af:54:af:d0:be:20:6c:2b:
94:25:b8:d7:20:16:db:da:85:99:6b:97:c6:05:c1:
77:8b:85:e1:60:b2:7a:3b:c1:fe:a7:74:52:0b:8a:
62:32:ef:35:55:ae:74:53:41:db:2a:86:31:44:14:
2e:70:bd:01:c8:87:1d:7c:99:4d:36:a7:c1:27:75:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6E:BE:BE:C3:44:D7:CB:2B:B9:A5:5E:69:A3:E1:60:23:42:63:3E
X509v3 Authority Key Identifier:
keyid:CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:65:72:76:aa:8f:eb:c6:75:c9:4f:41:67:36:d1:36:09:61:
39:34:3f:34:aa:30:43:be:7b:c8:f4:df:3c:f8:e8:60:19:e3:
be:ec:c0:56:4a:d2:bc:e0:e7:7e:c4:d5:bc:51:5d:6f:33:52:
c5:90:1b:70:74:a0:d0:f6:72:7f:68:79:47:0b:c0:77:3b:6e:
a5:c9:27:38:9c:2a:86:88:0d:03:77:5b:91:7f:fa:8a:1b:df:
46:83:13:8f:60:58:a3:5d:4c:bb:36:cf:3a:ab:c9:6c:e0:8e:
b3:43:2b:e8:40:b2:06:8b:05:96:6a:5c:30:b6:bf:46:d1:a5:
57:04:8c:1a:5a:7f:40:1f:51:91:27:36:3c:0f:ee:ef:c3:47:
bc:c6:a7:05:47:7e:97:02:1c:dc:b3:2b:86:b7:26:ca:bf:6d:
30:b1:79:68:fa:00:32:c3:46:b9:df:c0:15:5a:3d:02:00:e2:
6e:b0:36:d1:13:84:aa:dc:d2:72:51:89:5c:8d:9f:1c:a5:99:
06:38:9b:33:54:b3:6d:72:f5:14:69:55:f6:e7:a6:15:f4:45:
4a:74:eb:b3:6b:ea:b8:21:ec:78:ce:23:80:03:71:6d:7b:53:
ae:1d:44:9a:23:c6:c6:ff:b6:ed:4c:62:f2:b8:6b:63:ad:5e:
3c:7a:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:04:18 2025 by rpki-client