Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: FYwn0lgoVmuLZGg6GAoxgcT2aOPSqhrOJi0+Ue2zYEY=
Subject key identifier: 14:1F:49:A0:F9:3D:93:5B:86:78:77:78:E0:5F:EE:23:1A:57:4A:AD
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 01974A7B600CD142161714D40C1399F9276E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:01:28 +0000
Manifest this update: Sat 07 Jun 2025 13:01:28 +0000
Manifest next update: Sun 08 Jun 2025 13:01:28 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: 9fQE3dt5RdbMm/8XWu8moVXmQaQAbUhcg6EhA3E7UDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:60:0c:d1:42:16:17:14:d4:0c:13:99:f9:27:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Jun 7 13:01:28 2025 GMT
Not After : Jun 8 13:01:28 2025 GMT
Subject: CN=141f49a0f93d935b86787778e05fee231a574aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:80:ed:69:88:95:6f:de:c2:f3:7a:71:c8:
19:3b:9b:cd:ab:26:68:cc:77:d6:8c:98:9d:b3:9c:
d6:da:03:06:5e:36:3c:3c:a5:64:bf:e6:e8:3e:de:
a3:75:41:18:4f:53:dd:0b:87:88:25:42:50:1b:9b:
8e:98:de:ee:f2:5d:45:82:27:e5:dd:cd:67:81:67:
2e:46:a7:f5:70:50:64:9c:26:dd:c0:db:b2:17:bc:
8d:22:91:93:c1:eb:84:f3:02:04:d4:41:d8:35:27:
8e:23:16:2f:9e:0c:ec:2c:66:9e:03:95:ee:2d:0c:
ec:38:a1:4c:da:5c:ae:40:0f:3a:f5:78:9d:c1:1e:
c2:8e:06:d1:02:dd:1e:3c:f5:e8:53:a9:91:84:1d:
53:99:c9:04:3b:2f:32:67:26:4c:73:e0:2e:86:f0:
b5:09:41:e1:65:60:b1:35:17:e8:b6:cd:dd:a2:30:
b5:dc:fb:8a:73:7c:87:60:ce:01:df:ed:74:07:da:
64:78:02:02:bb:a7:3a:5d:85:b8:42:ad:fa:7d:2a:
7a:b8:c6:45:5f:b0:49:fd:f9:29:b6:10:af:d4:ee:
6f:26:7c:be:b2:a6:01:1b:c7:e5:39:83:c3:a7:9f:
32:b8:3f:fe:d6:66:a8:06:db:2b:04:66:20:6e:90:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:49:A0:F9:3D:93:5B:86:78:77:78:E0:5F:EE:23:1A:57:4A:AD
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:65:20:28:6d:71:91:8c:0c:d4:7c:ad:7b:56:46:d4:47:f0:
a4:cb:02:c4:91:69:76:75:7c:02:c9:33:fa:1b:b8:0e:3b:70:
2e:5a:4c:e9:a9:3d:66:2b:89:a5:69:51:86:96:89:40:46:18:
4b:b2:96:53:d0:ee:d9:62:7c:f5:49:37:ba:50:39:95:97:7b:
f4:ed:ee:f7:64:54:65:8c:ba:c8:e8:61:57:8f:0f:f5:05:a0:
ad:01:9a:10:86:75:43:a3:36:1a:ba:4c:32:7e:23:13:4e:d9:
18:a8:d9:b3:f6:3e:27:8d:39:e4:7e:ae:0c:42:6f:7c:e1:0d:
70:e7:0e:ba:c0:b6:97:b8:01:d0:39:16:91:b4:59:ad:5e:e8:
4e:41:94:3d:84:48:44:62:49:66:fb:02:69:83:6e:b6:b0:9e:
c2:2f:1d:e2:7c:7d:64:5c:e2:a8:f6:31:51:1c:31:39:2c:0a:
c1:fb:bd:06:93:e8:ce:be:3b:40:40:b1:0e:fe:aa:ef:cb:66:
52:83:3e:59:89:0c:d1:fd:2d:7a:ac:bd:08:35:7b:6a:b5:4b:
e6:f6:76:b8:a3:ef:be:f9:48:6c:15:25:42:70:86:6d:fb:b3:
1d:f2:92:88:0b:48:c4:9d:01:eb:88:03:2c:7c:4a:4e:5b:72:
4d:82:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:04 2025 by rpki-client