Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier: f+qr3ciFnNL2ibXVN7D1IKTeAeLObntCL1ULNmEo6/I=
Subject key identifier: 23:21:BF:49:67:7B:8C:AE:AB:7B:51:AC:3A:52:83:F7:73:2C:0B:C3
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial: 0197B70E8398CC8DA1BA549F34CD633F907A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number: 06A9
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: H2I0ptzZclI3dPWv+jlEptSpLLP0mYC89bx0RYK6cdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:83:98:cc:8d:a1:ba:54:9f:34:cd:63:3f:90:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=2321bf49677b8caeab7b51ac3a5283f7732c0bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:42:10:2d:ab:47:c8:78:6b:41:28:9c:e3:
69:22:e3:10:1e:7c:0b:88:52:81:93:4f:9c:71:b7:
fb:83:30:dd:bb:6c:fb:4b:11:75:49:ce:d9:b0:5a:
d5:80:a7:5e:f8:45:67:f9:29:ab:86:14:9c:41:cb:
58:70:7f:cf:24:d4:4a:96:15:20:08:c5:7f:f9:e5:
7b:f5:c7:1b:62:9f:9c:f8:3e:43:12:7d:74:c0:15:
f7:ad:53:1d:ac:f7:05:4d:b1:16:4d:94:25:6b:2e:
37:63:41:b9:77:9e:73:af:bb:27:c1:fb:8e:13:ab:
82:2c:f8:a8:69:34:22:0f:c5:f2:22:5a:9e:ca:0c:
24:cd:e1:cb:a2:e6:f0:df:32:86:fb:08:4f:e8:6e:
91:e9:f8:f5:05:3a:6f:44:e6:58:88:3e:b7:4e:01:
d9:f0:f8:ce:a9:f1:be:d1:38:1f:29:d0:5e:6e:e1:
02:4d:86:6c:23:6a:9c:6d:c8:80:31:57:e3:9f:75:
13:a7:fb:cb:d9:f5:c6:84:86:32:66:a1:48:35:16:
bd:cf:92:2f:1b:b1:fc:11:71:b7:df:e7:d8:d4:9d:
70:0f:46:fb:f0:27:21:df:37:cb:ea:ca:52:bf:3f:
56:b1:36:84:66:2e:9c:d7:9d:5d:68:1e:af:25:75:
e8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:BF:49:67:7B:8C:AE:AB:7B:51:AC:3A:52:83:F7:73:2C:0B:C3
X509v3 Authority Key Identifier:
keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a4:eb:2e:e1:99:2b:1a:5d:18:5f:dc:22:cd:1e:16:9c:e4:
8a:7b:8d:a4:61:90:e5:2a:f3:97:26:98:cc:6c:58:81:ce:7a:
39:cc:4f:01:0a:bb:d7:f5:1f:27:9c:bd:a7:97:bc:17:f2:59:
76:26:3d:9b:87:24:ee:e8:fb:cc:6f:cf:76:0f:2b:9e:2a:32:
60:1b:21:95:2a:4e:f0:80:36:5e:a9:07:8b:64:d5:7c:48:25:
64:b6:26:d8:25:51:70:23:e7:cf:79:d0:38:7d:24:d3:56:e7:
29:5e:50:19:c7:f8:bb:b5:8c:67:93:a1:19:3a:82:09:73:fe:
ae:89:cf:a6:ce:a8:13:4e:9f:ea:e6:77:92:c1:90:21:48:68:
5d:90:54:b7:05:15:0b:2f:24:a9:a3:35:87:5f:a5:84:c2:bf:
89:16:01:4c:95:26:7a:49:2d:36:64:f3:56:6a:91:fb:e2:f7:
f1:78:b8:c4:77:17:41:77:0a:b4:2f:48:77:7a:45:7d:44:11:
b1:c5:71:28:6a:7b:83:bd:d6:6b:bc:f9:25:f6:69:58:8b:d7:
a4:06:42:1f:56:64:c7:fb:3e:1e:ac:ac:78:a9:41:15:0f:ff:
8b:e3:c6:2c:36:59:61:d9:e9:7e:d4:aa:8e:63:96:ad:07:eb:
64:cb:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:32 2025 by rpki-client