Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: XLH3ZVbFrkswXPJaGsl6xO48YXFvse1E4Qv5RwszIaE=
Subject key identifier: C7:6C:2E:2D:F2:48:31:7C:77:51:3F:45:61:43:54:EA:D7:D1:73:83
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 0197B7EA2331ECED916EA3C966B80CA8F2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 1063
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: SOOK6GN2dpoPuJhy09X9W3QGMkUtclvbf+gsf3q1uw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:23:31:ec:ed:91:6e:a3:c9:66:b8:0c:a8:f2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=c76c2e2df248317c77513f45614354ead7d17383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1e:91:43:95:b2:07:8e:2a:15:b1:6e:4f:9e:
57:59:de:26:bf:02:b1:47:4e:b6:31:ec:74:32:6b:
dd:02:95:da:5c:76:29:b4:13:34:f0:43:f5:5c:75:
1a:ce:3b:e4:36:01:80:9f:4e:e8:4c:b7:c5:e3:e8:
b4:c2:3c:9b:9d:83:62:90:96:01:59:24:d6:99:c0:
a2:69:7d:11:15:ad:4a:a9:db:c2:77:e2:17:7b:a2:
bc:9c:21:32:0e:c5:73:b1:39:c1:c9:e1:55:61:77:
e1:ab:23:6f:8c:6d:79:dc:d1:f9:be:01:e0:d9:40:
90:f3:7e:4e:a2:ad:f1:38:f5:56:ef:6a:17:a0:d6:
6a:33:f0:61:67:34:b2:8d:6a:1d:35:76:56:61:69:
4f:0a:c6:d0:29:ff:02:de:38:e7:17:c0:a0:7e:7a:
5f:e0:71:5a:0e:c2:05:3d:85:9b:1a:a2:0e:f5:2f:
c2:a2:80:5d:2c:01:0f:9d:fc:ce:a3:d3:f3:b7:97:
48:18:ca:bd:c8:02:9c:eb:d5:f3:7c:18:cd:fe:c6:
17:18:94:3b:8a:08:9b:69:8b:84:a7:6f:dd:29:c2:
db:fb:29:ab:da:37:53:bd:29:4d:7a:dd:f8:d3:f8:
d3:93:57:41:f5:7a:5c:f5:52:13:22:54:db:d4:c1:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6C:2E:2D:F2:48:31:7C:77:51:3F:45:61:43:54:EA:D7:D1:73:83
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:17:7f:a8:62:a3:a5:6d:ba:a8:d7:0f:9f:d6:16:72:18:90:
2b:af:55:49:ee:02:ef:cf:19:85:18:4c:8c:ed:10:a1:c5:cf:
96:f0:56:f0:31:7f:f3:41:e2:82:d3:dd:ec:22:15:08:39:f6:
9a:ca:97:86:cb:89:91:61:be:8c:19:7d:ff:0b:fe:d9:59:b6:
c8:b8:d0:33:33:ef:fb:fa:a9:b7:68:5d:fe:d2:cf:a2:0c:5c:
7b:ac:6a:0d:47:af:bf:5e:35:d3:2b:b7:4c:4d:d8:70:ab:5e:
7f:78:dd:25:f6:1e:0e:6f:24:c8:1c:7d:06:26:81:bc:03:ea:
87:94:e5:de:33:84:0f:d2:28:f2:43:62:e5:65:7d:11:48:64:
9e:a3:12:52:c9:07:34:78:ae:1e:4b:b3:28:7c:36:24:6e:51:
51:c0:3e:12:9e:2e:1d:dd:e1:4d:c3:86:34:b0:52:bb:2a:98:
fd:c8:41:39:85:f3:a3:bf:e3:46:38:0d:23:37:0d:f4:61:77:
08:dd:32:8b:df:38:a3:de:b8:53:d4:2b:a9:fd:98:3a:01:5f:
c6:b6:72:9d:45:57:2f:30:70:a8:cb:6a:91:88:74:87:21:fc:
53:46:f8:0d:b5:09:64:39:30:63:db:08:ea:64:c8:88:a0:a7:
ac:b2:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:16 2025 by rpki-client