Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: zJLV++LhKEQKx9eD1lExyMsko6VTwIbgg33rop92yh0=
Subject key identifier: 63:F1:6E:52:47:32:56:18:6F:DC:BB:24:1F:38:AE:84:49:63:96:49
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 019749313329E497374264D0C9B297065A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 131A
Signing time: Sat 07 Jun 2025 07:00:50 +0000
Manifest this update: Sat 07 Jun 2025 07:00:50 +0000
Manifest next update: Sun 08 Jun 2025 07:00:50 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: KP61mMbFfVFReesznHZN9dO+TirStNFjNxAynUgIrbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:33:29:e4:97:37:42:64:d0:c9:b2:97:06:5a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Jun 7 07:00:50 2025 GMT
Not After : Jun 8 07:00:50 2025 GMT
Subject: CN=63f16e52473256186fdcbb241f38ae8449639649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:47:10:b7:82:28:60:13:65:8b:55:ca:41:
4f:3d:e6:a2:79:01:34:c9:7e:ab:06:85:11:10:d2:
9c:98:cd:c2:c5:63:bc:1a:9a:c0:45:29:a0:b0:f8:
f1:3b:1c:97:a2:27:bc:87:3b:37:d4:a6:ef:0d:d6:
2c:95:ed:d8:2a:1b:74:46:2d:6b:c2:e3:22:63:63:
f9:e9:6a:e1:41:01:b4:55:b8:e1:79:94:50:df:c2:
f8:b2:ee:87:70:67:cb:b9:fb:ed:5e:89:f0:39:4a:
97:7b:06:e4:c1:0b:22:bb:44:f9:8c:c9:61:e5:c3:
d3:1d:01:6b:1e:3b:8a:db:54:11:7e:d7:e6:20:fc:
48:94:63:bc:b7:db:91:48:de:9f:3d:cc:17:fa:df:
26:eb:ca:bf:88:3d:92:36:c7:f5:ab:34:04:88:6c:
ec:e4:94:a4:df:16:ac:d5:5f:7b:df:ca:2b:70:3f:
88:06:ff:86:e1:ba:ed:00:13:6a:c3:97:66:23:01:
67:a0:f5:8a:bc:10:5c:48:35:9c:13:34:27:19:fb:
de:46:ca:93:aa:2e:47:d5:92:d2:60:89:08:b0:7f:
f4:ef:4a:dd:54:1f:19:0c:5d:92:dc:c3:cd:3e:40:
01:1a:6f:c7:66:fd:a7:e4:d3:48:c3:ef:73:b1:a0:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:6E:52:47:32:56:18:6F:DC:BB:24:1F:38:AE:84:49:63:96:49
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:28:78:4d:d1:c8:b8:77:98:be:6d:e8:bf:7a:7c:b3:11:1c:
50:9f:8a:f4:6f:58:10:c5:ce:d3:7f:80:1e:b7:cf:58:7d:7f:
44:6f:04:96:69:05:bc:16:27:d5:40:cf:dd:5e:2c:ee:e3:8c:
c7:95:93:ea:c6:31:45:22:e5:1d:36:10:3e:83:de:ce:5d:79:
ac:ea:d6:b2:e5:f4:d1:70:af:59:f0:3d:ce:ff:26:75:73:d4:
a9:f5:28:06:53:3e:91:b4:5c:6f:4d:37:20:f0:63:52:35:99:
30:b2:34:06:26:ec:1d:0e:9c:b0:6e:48:53:45:4e:e6:34:4e:
7a:48:86:6f:42:66:e6:2d:08:ae:0b:a4:05:95:49:14:ae:e0:
54:6f:30:67:21:20:7b:0a:17:46:b9:08:7e:47:38:96:a7:f7:
29:59:72:f4:73:15:36:6e:75:a3:68:49:6e:3f:9a:e0:ed:41:
95:0d:8e:d6:f8:b0:9d:3c:16:46:ab:38:57:31:8f:e2:7c:4a:
23:4b:72:00:ad:a9:0b:7b:ba:4f:08:4d:3b:88:bc:70:d4:a2:
d2:e2:61:6d:e9:c6:04:54:7c:75:f2:7e:53:68:6f:99:06:16:
ff:5c:41:b4:bb:bd:ee:c6:7d:e9:b3:69:99:90:a0:41:87:ca:
ea:e5:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:09 2025 by rpki-client