Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: EDk9rOV8We8GY/NvS8LVbw6BJy9tqM+dTE2p300Z8WU=
Subject key identifier: F7:93:2F:02:CF:2B:B8:31:4A:20:E3:49:80:79:CE:08:9F:0C:15:7E
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 01974E57F775DE0FB7CAE393F1D556C97F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 07:01:17 +0000
Manifest this update: Sun 08 Jun 2025 07:01:17 +0000
Manifest next update: Mon 09 Jun 2025 07:01:17 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: KyazARDwKIZlv4S7eSy0iCx6AXGnadjZkDpa2qjUtRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:f7:75:de:0f:b7:ca:e3:93:f1:d5:56:c9:7f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Jun 8 07:01:17 2025 GMT
Not After : Jun 9 07:01:17 2025 GMT
Subject: CN=f7932f02cf2bb8314a20e3498079ce089f0c157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:e3:73:8d:65:77:78:a1:c7:89:86:4a:b8:
d5:0a:0e:e0:fd:5a:ba:16:9f:61:8b:2a:2d:86:f3:
89:eb:84:68:d6:87:da:51:32:d1:1b:09:68:fa:cb:
2f:c6:a0:37:c9:e6:b1:c9:d6:e0:49:77:e9:7c:7b:
50:d8:f1:30:32:1a:c5:0b:80:c1:fb:2d:91:5c:45:
5f:51:fe:e1:3c:c7:05:55:98:4d:96:de:15:32:2d:
86:fd:63:c5:3e:50:66:59:4b:cb:a1:1e:58:b8:a1:
97:ed:e4:3a:de:84:cd:6d:5f:1f:8d:1c:7e:ef:e5:
82:c2:4c:bf:2b:d1:54:f0:6d:d6:34:b2:22:08:b6:
2d:b8:53:4b:14:4a:cf:f8:39:40:41:7f:3f:ba:ee:
19:28:58:c8:02:b8:9c:80:66:0a:82:57:b4:b2:5c:
2f:77:ee:e0:fd:f3:c0:82:6e:f0:48:93:b4:18:88:
60:16:a8:06:a8:2c:2d:c2:8e:e5:4d:05:15:f0:e7:
8b:10:54:ea:18:f4:b7:77:89:75:9a:b9:9a:7e:6d:
61:07:15:37:c6:82:27:d6:03:c0:4f:b7:e4:98:4a:
67:fd:5e:64:76:21:e6:4d:eb:89:5a:c2:7d:8e:c7:
ae:07:e7:92:19:3d:3f:cf:c4:31:be:88:2e:7e:cd:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:2F:02:CF:2B:B8:31:4A:20:E3:49:80:79:CE:08:9F:0C:15:7E
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7e:0c:d4:56:bd:31:24:00:6c:5f:80:b0:09:fb:f3:68:a0:
1d:1d:4e:0c:e7:e5:35:a8:53:6b:73:f0:6f:f2:91:b0:0f:de:
eb:2f:22:07:7d:15:1a:a1:95:09:3c:9e:d2:cf:a1:e0:78:25:
e2:7e:c9:2e:13:2c:28:e9:16:66:9e:95:8f:14:d6:0f:f4:d4:
c7:20:9a:11:72:25:90:70:50:2b:1c:6d:ea:90:4e:29:72:10:
58:88:58:76:16:a5:01:e1:16:85:2b:f9:fe:9b:86:9e:fd:0e:
9d:e4:4c:a0:69:fb:80:af:fb:d7:20:a6:1d:95:b9:5a:07:75:
e4:02:14:85:6e:3a:94:a2:df:5b:fa:16:16:ce:64:b6:39:e7:
63:23:d0:d4:2a:30:a0:99:55:fb:4b:ff:73:ef:5c:c4:35:c1:
ae:d6:b7:f5:65:39:ce:b4:13:13:cd:0c:fa:43:a3:5c:3b:83:
d7:6b:a0:c5:d0:94:f0:17:f5:6d:c1:fd:29:ef:83:0d:bc:89:
88:85:41:e3:9a:06:ba:8e:43:c3:ba:89:8c:89:36:e9:e3:cc:
3c:49:25:88:a8:90:f8:b2:29:38:d1:da:ac:7d:75:a8:d8:1b:
80:1c:20:28:e8:31:12:76:be:ec:b9:8f:78:a5:f2:59:12:fa:
9b:74:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:05:41 2025 by rpki-client