Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: mdV7+aT8txassCY7zzOCJ0s7UIG0Yxk6Z9sIlX0xZbA=
Subject key identifier: BB:38:04:2A:6D:26:48:82:92:D5:C7:19:9C:7E:E8:C9:CB:C9:04:CA
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 01974B1F6602EB48EF9B8304790DAFEBE4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0BCA
Signing time: Sat 07 Jun 2025 16:00:38 +0000
Manifest this update: Sat 07 Jun 2025 16:00:38 +0000
Manifest next update: Sun 08 Jun 2025 16:00:38 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: 93jH5uczt5tbzQX5zNsWQm5nuoFYkpM3y3swIV3IoIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:66:02:eb:48:ef:9b:83:04:79:0d:af:eb:e4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Jun 7 16:00:38 2025 GMT
Not After : Jun 8 16:00:38 2025 GMT
Subject: CN=bb38042a6d26488292d5c7199c7ee8c9cbc904ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:c3:f0:c9:48:a5:ac:76:4b:23:62:da:71:
73:a8:bb:3a:ab:5a:03:06:64:9c:70:56:45:dc:c4:
1d:ee:47:a2:90:50:b7:2e:8b:f8:9d:36:8e:71:74:
86:ca:55:78:f4:73:46:9a:8b:ec:bf:55:cd:e1:03:
47:4c:31:29:ef:d0:b3:4c:76:dc:95:be:7e:20:55:
ec:da:11:f8:e6:b4:e5:06:18:26:9c:ae:e4:e1:1a:
05:d8:1d:ed:5e:23:61:b1:42:d7:25:20:51:1c:0e:
c4:2f:cb:29:dd:13:d2:62:35:de:72:2c:a8:26:e1:
f4:62:58:1e:0d:2a:6b:51:84:da:6a:cd:8d:c2:ed:
a8:1d:ce:83:da:69:67:53:39:d2:13:af:33:20:26:
2d:8d:b7:64:63:07:6a:ff:d4:b1:5f:d8:d2:c2:c8:
aa:24:64:f6:e9:01:24:1c:2d:e6:45:a4:de:fa:7c:
9f:a1:85:11:6e:5b:f7:86:88:21:ac:aa:67:77:98:
a0:6b:ef:ae:b0:15:88:63:2f:66:25:33:f8:21:d1:
74:5e:0b:f9:dc:9e:79:2e:01:69:19:9f:c2:fa:47:
d6:02:8c:bb:d0:fe:d7:dd:1a:8d:ab:91:f3:25:6f:
95:64:eb:b7:b3:f0:93:08:11:60:bc:e5:da:51:3e:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:38:04:2A:6D:26:48:82:92:D5:C7:19:9C:7E:E8:C9:CB:C9:04:CA
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:11:89:4e:fe:e5:20:ad:36:6b:c0:58:dc:b3:97:30:a5:0e:
0d:42:3e:f8:20:30:bd:0f:82:8b:e1:8c:c0:9f:e8:04:c7:05:
0d:05:99:25:99:0b:c4:54:b9:b0:7d:1a:fb:b8:f4:64:4b:24:
77:78:6a:9f:98:96:d7:4c:43:f8:90:ff:ff:fb:b3:d8:5d:7f:
84:9a:b9:c8:27:ab:b3:a3:d4:ed:c2:bc:77:6a:b0:cc:48:ff:
3d:e3:51:82:e9:b0:73:e6:1e:ad:4d:9d:cb:0f:78:92:77:12:
13:08:2a:21:bc:44:c1:91:79:b2:84:10:98:35:0d:65:cc:f4:
db:13:b4:97:28:72:46:52:8a:45:99:60:f5:f6:96:64:9a:89:
bb:4c:e0:e6:d9:3c:8c:80:88:a2:40:2e:ca:0c:54:f7:17:58:
f4:c4:3b:c2:a5:45:fa:6c:6c:e1:42:a7:c7:8b:e8:47:aa:d9:
fa:07:20:76:40:e5:48:53:14:de:f9:b9:93:b8:26:68:f9:8e:
4e:9c:9a:87:80:31:ff:84:b5:94:6f:bf:8f:84:8a:24:32:5e:
bb:d9:f9:fc:2f:ae:44:f0:26:3c:31:c3:f1:dd:08:38:38:d3:
17:38:46:bb:c6:fb:ff:c7:9f:7c:bf:28:b4:0d:c2:78:42:7f:
f4:d2:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:53 2025 by rpki-client