Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: ZltUnXGimZDVQ0Jo5IGk1YE95i2hfKIvkBCIOqPAlak=
Subject key identifier: C6:5D:BE:3A:B1:F2:95:DB:48:F2:C5:E4:62:4C:2F:E4:41:7F:A3:5A
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 0197B6A1ACC245245BEACDE092183940353C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:18 +0000
Manifest this update: Sat 28 Jun 2025 13:02:18 +0000
Manifest next update: Sun 29 Jun 2025 13:02:18 +0000
Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: 6euV+FXV9UipyRVmZXGm14HQITJTIFCWaeRXSR5cSgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ac:c2:45:24:5b:ea:cd:e0:92:18:39:40:35:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Jun 28 13:02:18 2025 GMT
Not After : Jun 29 13:02:18 2025 GMT
Subject: CN=c65dbe3ab1f295db48f2c5e4624c2fe4417fa35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:08:7f:ef:86:f9:ae:fc:ca:b7:c6:7b:d6:
d7:11:1b:d5:5f:b4:40:c6:13:fd:2d:64:8d:67:5e:
f2:d7:37:4d:19:5e:20:5f:3b:b9:33:7b:39:bc:56:
b8:6e:79:f0:15:7d:15:cf:cd:f0:71:12:66:0d:eb:
02:c9:d6:cd:52:aa:37:6d:57:ab:4f:af:3a:88:03:
d7:a6:f5:c6:23:86:4b:b9:27:21:f4:79:9e:b7:70:
0b:98:29:59:2f:cd:d7:07:06:ca:be:2f:68:b1:cd:
94:95:f9:ce:3a:28:4d:02:08:8f:70:f2:a5:b8:e4:
80:66:75:a5:54:fd:a3:63:10:f7:a7:c7:98:cd:78:
40:0e:60:06:20:51:b8:c8:36:c8:78:fe:16:7d:d0:
5b:b0:0d:0c:c8:e1:b4:3f:01:b3:32:5b:8c:58:c6:
03:55:6f:d2:1c:5b:29:96:11:56:f9:42:1e:76:32:
16:cb:cc:a5:03:9a:d4:e3:37:e7:af:b4:8a:95:8e:
f3:9b:99:b0:a5:57:37:92:bb:0d:95:0e:f8:12:b6:
8f:3d:a1:c3:46:ab:da:d0:1e:3b:04:0b:b6:3c:93:
b1:e1:27:ac:49:50:a7:9c:a1:fd:f3:a6:5c:d9:fb:
b4:75:68:a4:a0:87:c4:35:a2:b0:d5:aa:19:69:51:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:BE:3A:B1:F2:95:DB:48:F2:C5:E4:62:4C:2F:E4:41:7F:A3:5A
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a4:21:c3:78:34:7f:8c:07:b9:23:dc:9f:82:e6:5a:d6:a8:
32:f6:fe:dc:87:72:9c:fd:97:62:32:cc:64:95:81:7e:c4:32:
67:08:d8:eb:b4:fd:a9:ec:1c:74:2f:09:9b:24:d3:ba:a2:d6:
c2:2d:9d:50:d9:14:97:43:7b:81:b8:b8:0e:a2:2f:6d:16:a8:
9d:43:b4:37:db:cc:e8:43:39:ae:60:ac:a3:48:15:96:03:7a:
25:c9:b6:fd:5a:89:82:90:aa:fc:ad:dd:7f:c6:85:ba:6b:4f:
58:eb:54:48:1b:74:42:44:7f:12:eb:c5:be:2e:81:f2:50:ae:
c4:81:b2:0c:e7:a8:2b:24:1d:4f:88:a9:d9:23:1c:7b:86:5d:
8a:c4:2f:07:71:be:3e:0e:f0:c3:b0:30:14:b7:45:4a:0d:c9:
f9:b6:e1:10:66:e6:f8:cd:f0:07:fd:3b:c2:d7:0c:b2:5f:f8:
3d:d2:35:db:3e:f3:4a:c3:49:88:6e:09:c2:6e:34:98:57:6d:
8b:58:ae:65:56:c5:59:81:50:84:8c:42:dd:ff:2e:27:c7:ac:
a8:30:24:6d:3f:b6:c8:81:50:12:51:8a:e7:36:6c:ba:05:9d:
92:05:93:f2:02:07:d4:30:a7:43:da:7f:1f:13:e3:d8:cd:e8:
8e:6e:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:38 2025 by rpki-client