Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
File: ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft (raw, json)
Hash identifier: eMWE21lufI4r6kTGS8l6Mj6XZSCB1vQI12tIcYqKqko=
Subject key identifier: 6C:F4:0F:00:E0:6C:EE:77:46:C0:B1:B1:14:32:5E:AB:D1:69:2C:6E
Authority key identifier: 64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
Certificate issuer: /CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Certificate serial: 019752349514F93D14E41483FCF1CA564E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
Manifest number: 150F
Signing time: Mon 09 Jun 2025 01:01:07 +0000
Manifest this update: Mon 09 Jun 2025 01:01:07 +0000
Manifest next update: Tue 10 Jun 2025 01:01:07 +0000
Files and hashes: 1: ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl (hash: SJyZOllO0Jl7iub8jomxgpDTiIy8FQau5mo20QyrgAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:95:14:f9:3d:14:e4:14:83:fc:f1:ca:56:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Validity
Not Before: Jun 9 01:01:07 2025 GMT
Not After : Jun 10 01:01:07 2025 GMT
Subject: CN=6cf40f00e06cee7746c0b1b114325eabd1692c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:72:57:c0:7f:af:a2:22:1e:33:1b:d6:e5:
5f:0d:86:21:37:13:5d:1f:10:46:00:cd:04:28:f0:
6f:b9:c4:63:09:1b:cb:84:99:f5:1d:f6:47:3e:21:
73:0d:35:d8:a3:61:d7:96:bd:b7:26:dc:65:e4:3a:
60:39:29:3b:b6:a8:0b:65:28:87:86:42:a5:6b:f7:
4d:54:6e:94:f9:4a:c6:9e:3a:67:6e:27:d6:36:6d:
a3:d8:21:3e:6f:7c:a9:1d:a2:ff:2c:78:b1:1a:64:
1b:7a:ba:7b:ba:ce:34:87:89:62:fa:9c:75:55:76:
90:47:a9:e5:90:72:c6:ba:54:42:ea:cc:c1:82:51:
f9:c7:37:23:a6:4a:08:3e:c3:37:2b:6c:5d:5d:0f:
be:c8:05:b6:05:32:0b:eb:c1:71:d3:06:4f:9f:dc:
79:d3:d9:ca:6d:6a:46:4e:4c:74:9b:c0:fd:97:f2:
66:c6:5a:95:fc:6c:8f:96:e2:4a:92:49:b8:f4:f5:
ee:5d:03:cd:87:60:c3:d1:7d:c3:21:d0:0d:d9:c0:
54:47:8b:5c:bc:fa:98:73:bb:5e:42:87:a7:ff:56:
a1:ce:e8:cb:9e:14:f7:b3:d0:34:6d:11:9d:a5:6b:
fb:42:95:73:d4:a8:8a:6d:66:91:cf:c1:3e:e5:ec:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F4:0F:00:E0:6C:EE:77:46:C0:B1:B1:14:32:5E:AB:D1:69:2C:6E
X509v3 Authority Key Identifier:
keyid:64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1a:49:52:7f:b2:31:a9:ef:93:61:a7:73:30:0f:de:86:7d:
6a:79:3e:69:d4:e0:69:ba:b3:c6:f8:f9:f3:60:93:20:c8:e1:
33:29:5d:2f:f6:ae:cc:42:26:81:95:14:ee:da:e3:d1:5e:58:
37:24:25:da:6f:8d:cb:95:7b:03:26:f5:5b:18:82:6a:98:c8:
14:32:b1:45:3d:e4:1b:34:db:6d:e1:5a:46:0a:eb:a1:f0:37:
3f:e3:1f:0e:73:0c:f0:ca:fe:e3:cb:57:f1:7d:69:6f:d8:27:
2f:3c:e3:b7:c3:2e:d9:4f:91:13:df:2c:7d:84:62:d4:b2:ed:
52:19:4e:a5:92:b8:91:11:37:7e:24:19:06:12:63:cc:d8:49:
d8:94:3b:9e:c3:35:9f:c4:b2:11:d6:56:68:9d:4f:35:ee:7d:
51:c1:2b:c5:bc:f8:b8:8d:f0:56:8a:e6:79:23:38:15:35:b6:
bf:32:05:42:78:0e:44:c3:14:7c:d6:10:cb:04:bd:6a:09:84:
b3:65:4b:83:33:7e:77:69:50:d9:25:b6:08:c0:8d:df:cb:cd:
f4:4a:c0:54:31:d9:91:12:e7:4e:87:6e:81:02:81:c3:76:04:
21:3d:30:6f:3d:79:20:9f:98:41:cb:6e:f2:d2:5d:76:b4:31:
9c:8f:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:04:14 2025 by rpki-client