Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier: 8uRb344n6qi23ZNLCvPLV47M11cZva7kWJ3ITioKxaE=
Subject key identifier: 1A:D5:C6:6B:CE:D3:40:AD:8F:15:EE:83:38:FC:BE:2B:D4:54:41:CB
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer: /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial: 0197B70F393C31D146457B77E7B599546C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number: 0C36
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: 4qSZXdGkWdYwFd+Af4anjmLbm8w8zbOj46zzr04bQPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:39:3c:31:d1:46:45:7b:77:e7:b5:99:54:6c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=1ad5c66bced340ad8f15ee8338fcbe2bd45441cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:f7:d1:16:78:e5:e2:2b:52:c3:a4:e7:3a:
f5:e2:a7:6c:7f:87:b4:68:70:d4:7b:1c:b4:25:b8:
fd:80:6d:54:df:66:15:95:ad:f5:71:8c:98:cb:c2:
b0:77:4d:87:fd:89:53:11:0d:a2:1c:9e:24:14:8f:
52:0c:d9:85:ab:6d:4c:05:b6:6e:20:bc:54:d4:58:
79:c4:cb:95:2a:64:e8:1a:35:76:49:9d:b2:cd:e1:
60:a8:ac:9f:3c:d1:24:39:c0:c4:13:e5:df:5f:46:
91:d8:4d:a6:b4:26:22:de:f6:21:8c:24:43:ec:43:
0e:a4:41:6d:4b:2c:35:0a:72:76:a5:c1:f3:de:e0:
e9:2b:15:9d:75:b0:27:e6:21:4f:9d:9f:fe:53:88:
8b:07:c1:a5:ec:58:02:f4:88:d2:aa:6c:2b:0e:85:
b4:eb:cf:07:39:c8:c1:bb:a7:ac:7e:9f:fc:b4:e2:
12:78:a8:98:a6:b9:da:b0:c7:b0:2f:eb:ee:80:f9:
b4:7a:40:31:7c:80:69:1a:0c:93:4e:fd:74:c0:5d:
b1:03:16:4e:8e:ec:88:e9:c8:90:0c:82:d2:30:19:
68:78:7a:0f:8c:8e:c8:16:7e:5b:b2:5f:d2:30:73:
1f:0b:6d:d0:5b:cd:07:79:49:0c:aa:b3:c3:bd:b3:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D5:C6:6B:CE:D3:40:AD:8F:15:EE:83:38:FC:BE:2B:D4:54:41:CB
X509v3 Authority Key Identifier:
keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b3:c4:21:1c:ff:03:07:a8:4e:36:d6:6e:73:10:ec:ce:bc:
a5:22:78:e9:ba:03:c6:ba:0f:f7:3f:b0:2d:04:5c:9c:54:ad:
21:be:be:95:79:62:eb:e9:8f:3e:9b:e8:29:44:b9:c9:b1:c5:
de:cd:a7:d5:80:5e:79:6b:85:21:ec:dd:f1:ba:1b:71:ec:e1:
26:03:e5:a0:94:b9:6e:97:91:76:d5:02:01:7a:ed:5a:11:23:
85:4b:d9:7a:19:d3:09:97:07:64:63:8a:8e:a4:92:61:d6:ee:
af:86:b1:b9:fe:a1:ba:89:d5:9a:b9:fa:5c:05:f0:0a:5c:37:
74:ff:f6:7e:3a:59:9b:9e:f9:33:ba:c2:40:4e:6f:41:ff:ce:
fc:ff:51:14:be:39:3f:f6:09:30:74:de:ef:4e:dd:34:e1:be:
cd:76:0c:b4:27:61:94:ae:3c:0e:f0:af:ab:d0:de:07:cb:ce:
65:5e:7f:61:c9:db:dd:74:4a:d5:82:06:0f:1e:49:43:d1:44:
2f:08:c7:5a:52:e7:02:44:8c:7d:e8:21:26:36:36:c2:41:d9:
b4:48:97:92:88:82:de:7b:25:ec:73:f3:31:a2:4c:a0:a8:0c:
63:94:2d:e1:a8:0b:a3:fb:89:23:f5:39:eb:0f:ea:12:4a:81:
36:2c:d2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:40 2025 by rpki-client