Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: 037VvER+eK7LYJ6bK0lGb4KB48cRXLFoobvIS81/ARY=
Subject key identifier: 2A:F7:DE:12:A2:C5:4F:51:08:CF:9C:30:EB:8E:BD:5E:95:BC:49:AD
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 01976B1806CE96897285B123CE972A0ACD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: 0110
Signing time: Fri 13 Jun 2025 21:00:26 +0000
Manifest this update: Fri 13 Jun 2025 21:00:26 +0000
Manifest next update: Sat 14 Jun 2025 21:00:26 +0000
Files and hashes: 1: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: KkDjwp8YBsAbRTQqtCuqkZkzBt9oFVreSICFvTpSg6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:18:06:ce:96:89:72:85:b1:23:ce:97:2a:0a:cd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Jun 13 21:00:26 2025 GMT
Not After : Jun 14 21:00:26 2025 GMT
Subject: CN=2af7de12a2c54f5108cf9c30eb8ebd5e95bc49ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:47:5e:78:b3:99:d7:15:23:36:0a:09:9d:
6c:35:34:50:26:bc:dd:a4:d9:69:d0:b8:3c:fa:dd:
69:3e:c8:65:e7:94:22:54:72:03:f7:74:74:35:6a:
98:0e:15:90:04:47:fd:a3:10:f2:f6:45:b7:59:f7:
01:20:5a:15:d3:50:2b:b3:7a:fd:bf:21:ba:84:11:
5d:2c:06:9c:2d:bf:c4:cb:d5:aa:10:dc:19:5c:0b:
cb:01:ce:42:d2:84:ae:7d:c0:65:82:21:53:29:09:
32:24:3f:c0:10:77:80:1f:2e:aa:03:ab:1e:56:ed:
4c:30:7e:61:6d:f8:3f:e0:2f:dc:21:1a:bc:b3:8e:
f0:11:17:6e:80:a6:4d:c9:4c:16:5c:bf:a3:3a:41:
7b:47:cc:f2:2a:d5:fc:0c:0f:2c:7a:4c:13:06:e6:
cb:be:23:52:c7:5e:e2:c4:73:f7:13:43:2f:e2:be:
71:79:c8:49:3e:4d:91:40:e0:0e:32:d5:f2:26:92:
ab:39:7c:24:aa:e5:ff:9c:d4:f2:14:5e:3c:6b:0f:
72:73:34:39:8e:d4:be:6d:c4:1f:2d:5e:40:d1:eb:
3b:43:d4:69:45:6b:e0:48:33:8d:09:5c:04:fb:6b:
58:af:44:45:d5:28:65:3c:d2:57:bb:25:78:13:94:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F7:DE:12:A2:C5:4F:51:08:CF:9C:30:EB:8E:BD:5E:95:BC:49:AD
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:54:86:1f:4c:55:6c:01:a2:1e:4c:17:18:e7:94:bd:16:73:
8c:4a:ee:ba:9e:40:04:65:14:8f:f2:f4:3c:86:63:57:bd:9c:
59:1b:6d:11:6d:31:ad:15:62:bd:d7:22:79:28:73:77:a8:80:
4e:f1:4e:c0:9e:24:e6:a6:54:9a:ae:f6:fd:64:83:87:3f:9a:
3c:58:4a:d9:f0:b2:8e:24:09:6d:20:54:f7:0e:9b:07:3c:a3:
3c:ca:23:dd:26:27:a1:af:b3:51:a7:b6:5c:4c:d8:30:44:7e:
10:fa:f4:82:1c:91:0e:62:92:eb:eb:6c:81:ab:d9:7b:32:94:
19:55:e1:37:d8:76:d0:5e:ab:9e:84:7e:29:d8:59:b6:95:fb:
40:b5:41:de:aa:59:73:d9:7d:4a:b6:91:61:98:5a:52:40:62:
f7:5b:e8:39:88:78:13:d0:2e:2b:e4:09:6a:5d:24:fc:63:dd:
2f:5d:48:34:43:54:c9:08:0e:be:2f:8b:6d:e9:e1:fa:9d:68:
dd:14:42:1a:28:6e:3f:78:3b:4e:33:24:15:85:2a:97:90:73:
68:44:cd:4d:7d:d5:f1:74:ba:d4:24:d6:99:b5:0a:c9:76:49:
12:77:45:1f:2c:c7:37:35:fb:7c:9a:b2:10:b4:c0:a1:e9:40:
6b:c1:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:01:56 2025 by rpki-client