Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
File: Z3NwPrTqs2ernekaKsQe4yAUAw8.mft (raw, json)
Hash identifier: xYdCUEVDDh/D1PvxKtWaObzfC+8LU5NKhS4FJQiLQQ8=
Subject key identifier: 52:96:1A:A2:C6:3F:7A:41:A2:60:12:D7:13:B4:7D:2D:0B:A4:22:44
Authority key identifier: 67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F
Certificate issuer: /CN=6773703eb4eab367ab9de91a2ac41ee32014030f
Certificate serial: 0197B6A1FF424D50514A83F6066C15F39E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
Manifest number: 087D
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: Z3NwPrTqs2ernekaKsQe4yAUAw8.crl (hash: 6tveLtU/ZkYBw4SvlghjlMmlk3FnUxVOZtJPFnBsJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ff:42:4d:50:51:4a:83:f6:06:6c:15:f3:9e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6773703eb4eab367ab9de91a2ac41ee32014030f
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=52961aa2c63f7a41a26012d713b47d2d0ba42244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cd:d2:2d:11:4c:ac:15:67:08:a3:41:44:77:
25:ea:e7:a7:77:7b:d1:29:26:9a:b6:a1:dd:7d:4a:
d1:d8:aa:88:7c:de:ad:9d:44:9b:a7:e2:00:41:66:
a8:d7:b6:e2:9c:b6:63:34:61:3a:92:75:01:25:eb:
f4:70:d3:9a:58:4a:5c:1b:2c:e3:57:dc:dd:7e:97:
4e:ae:55:9f:c3:59:56:02:9e:0b:ed:78:ef:39:ed:
9f:83:8b:ca:7c:4f:3d:61:ab:11:52:ff:16:2a:68:
88:3c:fc:fd:18:88:9f:58:9c:22:9f:bb:28:92:05:
fb:9e:32:ff:91:11:42:f7:01:1a:37:28:af:b7:89:
35:06:ef:06:a7:9d:6b:53:ad:ee:0c:08:d5:96:d8:
9c:f6:8c:05:b1:d3:bd:8b:fb:94:61:6a:cb:d2:66:
f1:68:b9:c5:a3:2b:9e:4a:dc:bb:01:8c:69:7b:48:
26:dc:60:83:1b:57:c6:ba:68:12:64:19:ab:e1:ab:
73:12:7a:4c:9d:e2:09:72:3e:81:3f:8d:99:c4:ac:
91:64:78:96:0e:98:d0:09:5e:90:e4:4a:74:7e:70:
e7:2c:d5:08:94:e7:8d:20:09:be:d7:4e:52:39:22:
d0:b5:a4:41:3a:02:9f:53:89:d0:a5:27:46:97:41:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:96:1A:A2:C6:3F:7A:41:A2:60:12:D7:13:B4:7D:2D:0B:A4:22:44
X509v3 Authority Key Identifier:
keyid:67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0e:f6:11:02:d3:3e:c8:f6:b3:4c:13:0a:68:67:af:1f:c4:
ce:69:0b:20:76:59:c3:91:04:d0:79:ce:43:52:d3:d5:d3:45:
da:01:4d:d3:2c:cf:c8:6a:97:ae:63:7a:88:7a:f4:08:56:0b:
0d:92:9c:14:cd:e9:86:91:f6:54:24:94:08:92:cc:6e:43:58:
ef:4d:a3:e7:c3:2f:47:0f:5b:ca:a2:d5:d2:64:05:8a:15:90:
90:e9:27:a4:94:73:71:9a:c4:86:d6:f8:ee:2e:dc:a0:b9:88:
d6:75:5a:82:53:e1:bf:6e:55:e3:69:e3:29:cd:bf:dd:8c:01:
13:45:22:1b:a8:d9:7f:22:b8:2c:c8:93:87:9a:1b:b0:52:82:
08:e9:7a:7b:f2:3f:a8:10:b9:a9:06:74:51:a8:4e:26:ea:82:
7d:ac:a9:29:20:42:83:f1:8e:fe:31:b6:80:82:83:bf:09:84:
c7:0f:28:16:91:87:80:f9:a1:66:6a:6e:c8:28:02:da:95:5e:
3f:ca:ce:c0:db:d2:dd:4f:29:9d:5e:ed:c0:59:8a:4a:07:13:
70:c2:4c:f2:c2:30:bf:94:aa:b1:a0:ad:78:ea:2e:b2:db:2f:
23:de:ed:c3:30:99:78:50:76:c1:1f:3e:53:0b:25:a7:85:f2:
a7:f7:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:59 2025 by rpki-client