Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File: Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier: AvPhbr7iEjhk1wK3OYH01n3ZcQTFZm2s8cEoR4Fr+U0=
Subject key identifier: 6E:2B:E2:A3:F1:EB:7A:37:57:49:BF:3E:C6:12:1A:7D:F6:C5:52:B8
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer: /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial: 0197C64AB4D01BB082C478095A815D8E7C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number: 0D7F
Signing time: Tue 01 Jul 2025 14:01:13 +0000
Manifest this update: Tue 01 Jul 2025 14:01:13 +0000
Manifest next update: Wed 02 Jul 2025 14:01:13 +0000
Files and hashes: 1: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: Wnz8PRomEVh1RvVMNLzpw3/DSXVcyGtfp+bqWKZ/aZY=)
2: lAxCqPMpI5f-sYorlBydxXXqa9k.roa (hash: VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:b4:d0:1b:b0:82:c4:78:09:5a:81:5d:8e:7c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Validity
Not Before: Jul 1 14:01:13 2025 GMT
Not After : Jul 2 14:01:13 2025 GMT
Subject: CN=6e2be2a3f1eb7a375749bf3ec6121a7df6c552b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:5d:42:88:5f:9b:c1:3b:30:8c:b1:f5:e5:
c2:9d:f9:9b:02:a8:9d:c4:8c:8e:8f:7a:40:c7:6c:
31:02:b9:b3:b6:12:97:f6:15:f9:08:f8:e8:fd:d2:
ff:a5:bc:0d:aa:2d:da:5b:e8:34:bb:e7:74:be:0d:
3f:3d:c6:57:db:75:d4:1b:56:1b:5a:f6:12:7a:fe:
02:4a:3f:d2:f5:dd:f5:9a:9f:5c:dd:44:da:44:93:
30:b8:11:d0:9b:1c:52:46:78:51:b6:fc:f5:a4:45:
7b:02:79:1a:87:56:df:b5:e4:7a:c7:bd:ba:3a:8f:
a7:69:9c:8f:e2:d1:72:6d:92:1a:67:ed:f7:4f:f6:
28:eb:e7:f8:d4:6d:6f:d0:65:e8:5e:9c:c6:84:34:
41:b1:15:bf:3e:49:bc:92:03:e8:7e:d3:bb:85:91:
c2:df:e6:a3:ee:4e:d4:92:31:0a:0e:09:65:e8:f1:
a4:6a:62:e3:29:03:ad:dc:9a:fe:ce:12:fe:3e:ed:
2b:6f:ba:6a:25:c7:bf:91:35:85:89:8f:d7:ab:12:
cb:01:09:f7:62:d6:43:7f:e8:89:c0:6d:5f:7f:ce:
2b:f8:a2:46:73:8a:26:15:b5:f5:0a:ce:6e:28:22:
5a:7a:d6:40:74:70:45:df:88:21:b1:92:90:49:48:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2B:E2:A3:F1:EB:7A:37:57:49:BF:3E:C6:12:1A:7D:F6:C5:52:B8
X509v3 Authority Key Identifier:
keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4e:84:80:24:f4:68:ef:e0:51:14:1e:80:e2:2f:50:42:0d:
26:d4:b3:ee:00:22:df:db:ca:44:4a:41:50:80:90:ba:cd:9d:
8b:51:12:94:ea:25:64:c1:88:d3:73:ae:8a:f9:e0:b6:e1:e6:
f3:09:50:1c:f1:ec:38:ec:30:02:da:76:60:e2:28:92:cf:da:
c7:b8:e4:15:95:20:66:fa:99:3c:e1:38:b1:c8:b1:97:c1:8f:
16:62:ed:c0:9c:68:af:06:10:21:e0:92:81:fc:e1:b3:c1:93:
14:19:85:07:30:dc:d7:d3:8b:ac:d5:d7:73:c8:bf:c8:32:a3:
77:01:ba:3f:f0:29:0a:d0:db:1d:57:a3:6e:e7:3b:15:0f:f8:
fb:ec:f4:8c:32:7a:6f:d8:3b:2d:ea:b3:69:f8:a1:0d:ea:8e:
40:4f:99:98:f9:93:2d:75:41:df:b3:81:fe:20:aa:37:06:37:
15:5f:ab:9f:97:03:dc:df:0a:a3:c0:4f:47:ba:0b:cd:fc:68:
ab:83:86:1c:68:4c:4d:31:de:e8:02:d3:74:d3:21:32:e4:0a:
3a:af:8f:da:10:ff:e1:2e:1d:77:fd:f3:8d:16:43:96:35:ac:
91:4b:4c:8e:9a:b9:7b:f8:05:85:f5:d5:e7:1f:98:d9:b0:05:
1c:73:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:06:06 2025 by rpki-client