Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: 3WBOBr5XxAp1WrLsd1NfQg5dP4GgKh1QLUGClbsunTs=
Subject key identifier: CA:6D:5C:C2:B6:EF:7B:FB:38:AB:0D:50:83:E6:20:63:AD:ED:C8:FD
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 0197493166D558461625910848FB96EA343A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 1051
Signing time: Sat 07 Jun 2025 07:01:03 +0000
Manifest this update: Sat 07 Jun 2025 07:01:03 +0000
Manifest next update: Sun 08 Jun 2025 07:01:03 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: LPlTVP3bSR0SraA6Fi9Y61KhgdriyykhI6gUFa1bhQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:66:d5:58:46:16:25:91:08:48:fb:96:ea:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Jun 7 07:01:03 2025 GMT
Not After : Jun 8 07:01:03 2025 GMT
Subject: CN=ca6d5cc2b6ef7bfb38ab0d5083e62063adedc8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:93:15:8d:37:90:68:17:b9:57:36:7e:a2:
fd:f1:ff:d8:ac:88:06:f7:dd:c3:18:f2:33:9a:b6:
27:40:aa:f9:b9:95:44:d8:b9:0d:52:1f:76:da:2e:
e3:9c:fd:71:7a:6c:d0:97:45:ca:6f:29:1c:8e:c8:
89:2a:6a:a8:30:14:9a:69:b8:93:05:03:dd:a1:9d:
69:5d:5d:b9:35:bd:58:a9:d6:fc:29:a1:2f:69:d9:
49:c9:fe:bb:a4:8e:ae:3d:12:31:41:44:77:c9:d9:
bb:4e:68:56:82:e1:40:af:bd:e0:6b:7e:ec:0d:a8:
84:61:5e:db:e2:70:19:d8:fb:2d:60:99:71:6c:95:
77:a0:2a:21:65:fa:1d:af:9d:9b:b9:11:f6:cd:6f:
23:89:f3:c1:e1:2e:1a:62:58:56:15:be:d3:ca:5a:
a1:ed:50:83:5f:1e:d2:78:3e:1f:b5:62:aa:38:36:
c0:9e:44:9d:f6:82:1a:fe:04:22:f4:3a:39:af:dc:
8b:5a:ad:34:99:bb:c9:49:9c:29:f7:77:b2:23:01:
9e:9e:60:51:5a:f0:20:a1:dc:f8:9b:76:c1:63:db:
49:33:7f:66:ed:10:b7:26:07:c7:e1:bd:d3:b5:f1:
e7:67:67:20:85:ba:2b:2f:25:96:aa:f7:3f:b7:69:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:5C:C2:B6:EF:7B:FB:38:AB:0D:50:83:E6:20:63:AD:ED:C8:FD
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:53:4c:8a:b9:8a:29:66:80:cb:f9:3a:3f:a6:6a:ef:d2:6d:
f3:36:80:46:b7:41:6b:77:1d:c4:34:03:37:c0:e2:de:19:c8:
4c:4a:da:54:73:34:d1:ac:61:0b:20:59:9f:d5:13:23:af:03:
91:12:62:13:1c:20:c2:64:66:32:36:43:17:be:12:6f:02:76:
8e:5c:dc:b4:5c:14:c8:71:ae:5f:60:7b:0e:ff:7d:92:63:d1:
7d:aa:a8:53:95:19:57:e0:65:da:c7:a7:5f:ca:f7:d7:1d:25:
9f:d9:a9:8d:e9:7c:0a:a5:4b:b8:b9:15:60:dc:b1:6d:e0:08:
2f:07:66:f8:68:d3:ba:21:be:30:66:58:6e:2d:98:6f:cc:a1:
dd:7b:fc:0f:29:ec:4f:40:41:fe:4a:6d:1b:80:70:6e:a7:9d:
ac:80:79:a0:44:c9:be:53:be:77:99:a9:70:65:23:62:cd:d9:
72:34:a6:18:71:67:98:68:28:57:ef:b1:d2:f9:7b:ff:ec:b0:
17:15:6a:c0:23:50:92:26:16:2d:5c:34:db:b6:74:c2:70:bb:
42:41:ba:f0:1d:12:93:54:58:da:36:94:a5:b3:85:ad:ad:20:
4a:2d:87:bf:70:8c:1c:42:e3:30:29:da:97:60:0b:73:2f:e9:
f9:ea:c5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:43:04 2025 by rpki-client