Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
File: ZmW8l5kwxe64oYSlqQOei5nuMK8.mft (raw, json)
Hash identifier: qOKaL3jK8Jp3KykBeVoQwwIzvaMKf3hQdSbI2Cm5hKs=
Subject key identifier: A9:8F:26:43:E2:68:87:A6:BC:1C:A6:94:5D:0E:CA:B4:99:EB:0C:DE
Authority key identifier: 66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
Certificate issuer: /CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Certificate serial: 0197B6A1F446E189858F80C4A638C377AD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
Manifest number: 69
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: ZmW8l5kwxe64oYSlqQOei5nuMK8.crl (hash: u2vvD7vFS00s/LbokVRyevOkGoMS9tbd9dHZ51FvX88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f4:46:e1:89:85:8f:80:c4:a6:38:c3:77:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=a98f2643e26887a6bc1ca6945d0ecab499eb0cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:20:e7:1c:2f:76:9f:71:53:85:c1:9f:c4:
38:02:6a:69:e7:2a:a5:09:7d:0a:74:37:9b:69:6f:
b1:2a:00:a9:40:3a:03:bd:66:a1:23:63:68:58:79:
0a:17:fa:34:31:5e:82:07:85:4d:c7:b1:43:68:3c:
44:66:f7:f8:f9:9f:ee:4e:fb:89:87:f8:2b:56:3d:
a5:ef:b1:2a:1b:b6:b3:09:d9:e2:2f:6b:d7:25:9a:
d5:6d:8e:b0:90:1d:bd:ec:47:31:ea:ed:a5:79:f7:
72:ca:1f:82:a1:7c:92:6b:fd:98:b8:e8:cc:a4:c5:
0f:8c:f0:b9:fb:ff:33:2f:75:4e:6d:7c:43:56:2f:
1f:35:68:2f:a3:60:c1:c0:f1:7e:45:a5:a3:f2:de:
aa:bd:62:03:8d:61:f8:a9:b9:9f:e4:bf:0c:1a:7e:
5f:f4:08:ec:a6:6d:33:fe:46:12:c0:fe:63:21:6e:
90:5b:6e:ea:f5:15:72:32:88:df:99:13:96:d7:dc:
39:0c:c0:40:c8:78:a8:ab:a4:3f:18:70:61:f7:94:
98:7c:7a:d3:65:34:9b:ac:6e:0b:33:ee:86:5a:94:
14:99:e1:f7:d1:06:41:aa:f3:b0:c8:eb:82:64:f0:
4f:5d:1e:55:2e:75:09:39:7b:78:7c:d3:a7:51:ea:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8F:26:43:E2:68:87:A6:BC:1C:A6:94:5D:0E:CA:B4:99:EB:0C:DE
X509v3 Authority Key Identifier:
keyid:66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:59:42:38:db:0b:d6:24:21:79:29:eb:9f:c8:db:31:fe:
d6:dc:6f:50:cb:41:65:aa:d9:12:34:5e:91:39:6a:81:35:89:
f3:f7:3d:e6:31:dd:d3:d2:2f:16:59:9f:f5:f9:1d:0a:99:9a:
af:81:a2:6b:12:5b:ae:a8:2f:b0:2f:d1:2d:6f:49:5a:5c:ac:
15:a6:3b:9b:27:8e:4b:48:d2:7e:16:cb:91:fb:e1:2c:50:58:
0e:ef:7c:d6:34:41:ae:88:42:af:31:fe:16:e7:b5:d1:2a:58:
fd:41:e6:ff:72:aa:19:89:17:45:0c:11:e1:22:92:39:99:32:
5e:7c:d1:30:28:f4:72:03:20:4c:45:56:74:d9:56:f8:0a:6d:
7a:72:f2:6b:56:6b:5a:ab:24:41:80:ed:4b:f8:81:10:7c:5d:
e6:66:7c:a2:49:25:60:1f:5e:ab:06:b9:da:38:0c:ed:e8:6c:
0a:e4:6e:bb:80:2f:e3:13:8e:8e:87:fd:a8:d8:7f:0b:b1:ef:
8f:59:f6:53:95:f0:f2:c5:bf:90:76:32:4d:6b:0f:82:2a:6a:
e0:38:38:57:5f:c7:d1:6d:ff:53:83:18:73:e1:ed:92:f3:0f:
99:8e:c7:4e:8b:a6:ef:60:3f:d6:8c:2a:fd:64:e6:8a:2b:94:
96:0a:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:59 2025 by rpki-client