Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: 0IDcGd/WZn8owyI5q+yhfIEXjJlWnYWAEbP6PblA0x0=
Subject key identifier: EB:08:7D:7F:B0:64:AA:56:CF:39:37:02:61:1E:8F:1C:CE:49:1D:C2
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 0197B89020A4A7F49073405974DB498406AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 1247
Signing time: Sat 28 Jun 2025 22:02:22 +0000
Manifest this update: Sat 28 Jun 2025 22:02:22 +0000
Manifest next update: Sun 29 Jun 2025 22:02:22 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: JDIvNWPpOAQA6w7xJ5n7TXAwjjRR4wojSzh2pUT3C1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:20:a4:a7:f4:90:73:40:59:74:db:49:84:06:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Jun 28 22:02:22 2025 GMT
Not After : Jun 29 22:02:22 2025 GMT
Subject: CN=eb087d7fb064aa56cf393702611e8f1cce491dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:25:3e:9a:26:45:65:47:a6:eb:5a:33:25:
06:d3:b9:16:fb:bd:18:8a:30:d3:76:f8:05:d3:e3:
f7:99:99:8c:12:16:19:ea:94:ce:b1:81:f7:5a:de:
d2:72:d9:43:24:0d:f2:f4:75:c9:bf:3d:e0:07:e9:
5b:82:85:63:14:00:6a:06:76:56:37:ed:0f:d6:6f:
b4:f8:42:92:e7:39:41:b7:44:17:d7:e8:7d:d2:04:
dc:99:37:c5:d9:33:51:d1:d3:ff:a6:34:8d:08:ae:
4c:10:e3:b0:16:64:85:3e:a5:63:2e:76:d0:45:f3:
9d:cc:94:ce:a7:3d:cd:81:cb:f1:af:40:d5:25:6c:
e3:04:8f:71:81:40:bf:3b:85:35:ed:b3:ad:58:c1:
bc:ae:c4:3c:c3:d0:a3:8d:e0:11:45:9c:9b:d6:f2:
b1:57:09:0b:a3:8f:8f:82:c6:04:ab:1d:7c:01:6e:
14:13:5b:21:5b:dd:15:4e:3e:46:47:a3:4f:32:2c:
49:52:c6:2e:a5:1e:2d:fc:a5:0c:db:01:38:94:ba:
e6:94:ba:e4:c3:13:ad:4b:a8:31:62:1b:50:b8:a5:
9d:d8:39:19:a0:b3:ce:3b:13:04:d2:66:b7:de:e0:
dc:6c:a8:43:cb:cb:4f:21:25:f4:2e:82:f0:a8:a2:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:08:7D:7F:B0:64:AA:56:CF:39:37:02:61:1E:8F:1C:CE:49:1D:C2
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cc:83:6c:c3:40:b0:47:6e:a5:e5:63:36:e4:7c:a8:94:b3:
7c:fd:c9:9b:bb:bb:1f:e8:d6:50:20:8a:05:65:75:d5:f0:e7:
cd:45:48:aa:70:57:da:99:98:b0:60:97:80:aa:26:8f:c1:c5:
65:d9:af:e5:aa:cb:cd:08:91:2c:c1:86:ff:79:12:52:99:88:
da:15:f1:72:5d:32:00:ab:0a:91:02:33:69:2f:4a:b3:0b:0f:
c2:d5:53:c1:1e:8a:f5:8c:04:5e:dc:15:6e:61:2a:67:bd:20:
bd:d0:d9:c6:e7:4b:34:25:10:1c:f6:ce:fc:b6:96:64:84:ac:
57:3f:06:ee:70:eb:8b:9d:57:84:2f:e7:fc:b5:d6:6e:30:6f:
2e:0e:a5:58:0e:b8:43:8f:ba:88:9c:09:73:fa:fb:eb:dc:1c:
42:6f:ad:be:e8:48:71:26:3b:94:ae:17:4f:a1:04:d9:05:64:
e2:b4:1d:4c:47:33:18:88:15:95:e4:93:ec:a8:1d:e1:46:5f:
e8:7c:55:aa:98:79:45:72:9b:3f:e6:32:31:2c:9b:0a:cd:ff:
5c:44:34:ed:b8:11:24:8b:28:dd:04:b0:c7:08:e2:6a:a6:a4:
24:4b:fb:c6:a4:83:51:8a:72:2b:b4:bb:8d:bd:7b:fb:55:90:
fc:0d:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:17 2025 by rpki-client