Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: S5RRighrrIvbkmMwi2xV8xY4b+0ODI2CEM0Ul5kPRKs=
Subject key identifier: 99:0E:B0:24:09:8C:AA:D4:9E:CD:DA:FC:95:53:D7:30:C6:31:25:78
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 01974A7B237B58A1CF87000DA11E6B54FA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0B78
Signing time: Sat 07 Jun 2025 13:01:13 +0000
Manifest this update: Sat 07 Jun 2025 13:01:13 +0000
Manifest next update: Sun 08 Jun 2025 13:01:13 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: TptVMxeO2hOireZeT4aEBWM9by10YnxhRB7LkkdHmcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:23:7b:58:a1:cf:87:00:0d:a1:1e:6b:54:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Jun 7 13:01:13 2025 GMT
Not After : Jun 8 13:01:13 2025 GMT
Subject: CN=990eb024098caad49ecddafc9553d730c6312578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:14:c0:f2:0c:52:61:45:84:20:83:a3:bc:
01:de:07:52:38:fb:57:0d:1d:9b:50:93:3c:12:37:
d1:bf:7f:2c:1d:6d:9c:92:d5:93:04:e6:f7:bd:e2:
82:21:da:0c:e0:c9:a5:76:64:6a:e9:23:fc:db:14:
a4:d8:c1:d5:7e:99:94:69:7c:9a:ac:9c:6f:af:7c:
a0:bd:4f:59:d1:f7:86:0f:28:e5:8a:49:23:49:4f:
b6:de:59:41:45:1c:04:ea:4d:3e:e0:2e:f7:e9:08:
6a:6a:5e:74:3a:fa:47:0d:3c:b4:7a:5a:1c:ce:6b:
86:7f:7b:80:f3:3a:99:f5:c0:b2:1b:52:b7:19:46:
99:0c:b4:96:bd:89:44:da:ad:03:00:87:d7:54:ee:
14:07:19:64:42:48:c6:92:43:5a:13:e4:fb:16:0f:
d6:f3:eb:55:e4:f0:47:1d:93:8d:9c:14:4a:fe:b0:
6b:cd:6f:3d:06:fa:20:2e:27:2c:dc:bc:b9:f1:c9:
15:05:3d:03:15:ae:b0:67:d3:93:cf:33:d6:74:0e:
0b:97:17:bf:0c:32:22:3d:76:a8:ec:bf:98:f4:33:
be:47:6e:2d:72:44:8d:9f:11:fc:32:9d:c5:b8:b0:
43:47:a9:7f:0d:4a:00:4f:1e:f1:d7:27:b3:28:69:
13:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:B0:24:09:8C:AA:D4:9E:CD:DA:FC:95:53:D7:30:C6:31:25:78
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b8:f3:58:a1:0d:12:9d:8a:57:53:9f:f0:3f:3c:be:16:14:
44:bb:e3:bf:84:14:e3:bb:0b:39:f7:54:30:77:99:55:6e:dc:
f5:89:15:00:63:2c:3e:22:a1:61:2a:2b:6b:01:26:60:04:d6:
c9:e9:c8:27:5a:87:3d:05:18:a0:73:5e:9b:a2:d0:df:b6:fe:
ca:c2:7e:90:79:ba:e2:a8:88:af:00:d0:26:28:11:4d:82:1d:
c9:bb:54:3d:ff:39:37:24:e7:5d:8e:30:fd:37:b3:2f:70:1b:
d6:8f:db:6d:14:29:0e:47:a2:1d:f2:ee:cb:c9:be:42:6a:f7:
2b:7f:ed:93:90:05:11:0b:64:0a:fb:d1:14:c1:3d:29:a9:e1:
53:1f:64:55:62:e6:8d:db:d4:aa:11:2e:8d:8e:64:0f:96:0b:
d0:94:6c:94:41:11:6f:99:ae:c3:53:2c:f6:90:7f:57:2b:64:
bb:75:61:eb:57:f5:7c:56:5e:2f:86:46:71:7c:95:99:85:ab:
54:63:ff:20:c6:90:08:95:b3:37:3a:88:8f:fe:98:b2:74:bb:
b0:0e:1b:76:5a:20:14:ea:24:ac:f8:8b:3c:34:64:47:c8:4c:
64:a6:33:53:2c:27:7f:63:10:71:63:fe:04:43:d9:d6:18:9c:
e8:c8:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:44 2025 by rpki-client