Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: 201LHPkR722n8etxMPB2xOIXLzm9EAc1VdGDqhd5lHE=
Subject key identifier: 5F:7F:89:DF:1B:B7:AF:0F:B9:3A:2A:27:7A:0B:C1:14:3D:AF:6F:F4
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 0197B70F40991C3AF1B28D3FE19CEE0E6084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: lHPpViAH1909duso3tos3jlCUnxtpyCQpN6O6i6fkUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:40:99:1c:3a:f1:b2:8d:3f:e1:9c:ee:0e:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=5f7f89df1bb7af0fb93a2a277a0bc1143daf6ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:e1:59:07:83:fb:2f:f4:b7:df:c0:86:88:
b2:b4:eb:26:73:04:70:d0:79:09:48:28:c3:5e:79:
a2:2d:22:e1:66:cd:d9:f5:83:b0:29:ee:62:78:d5:
ea:83:54:4e:be:75:6f:5e:fd:4f:23:6e:27:89:25:
30:1f:f2:7c:1e:a1:a3:15:56:33:56:fd:69:5a:d0:
36:e0:37:d5:60:05:e2:e2:77:55:8a:05:69:e3:6d:
4f:a2:62:3d:df:b8:6d:f2:4d:0f:08:8b:58:08:40:
3f:5b:92:50:03:24:44:22:b6:cd:cc:31:e4:01:52:
4d:17:37:66:35:f9:8a:74:c2:2b:66:7a:c3:f0:d6:
4a:e0:b6:6d:02:8f:25:f8:c9:a5:79:b4:3c:aa:1d:
1c:87:cb:7f:f1:df:cf:dd:24:03:11:07:57:f0:1d:
d6:97:a3:38:63:ac:dd:6a:0c:44:0d:d6:38:ac:39:
61:96:a1:56:75:25:b2:91:15:23:f4:be:08:2b:64:
e3:a4:a6:a1:2a:cc:a5:0a:7c:1d:05:09:62:98:5f:
62:6b:30:01:ee:2e:e6:90:19:dd:37:69:dd:36:71:
7c:30:56:a4:6f:86:5b:bd:35:e7:f9:d5:74:1e:08:
23:57:1f:f1:e5:e4:18:d8:05:dd:81:41:c9:d9:bc:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:89:DF:1B:B7:AF:0F:B9:3A:2A:27:7A:0B:C1:14:3D:AF:6F:F4
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2b:fa:c8:bc:d9:0c:e6:a0:1c:17:fe:8c:0a:53:a3:4a:47:
35:f0:56:43:10:94:f3:ce:c6:b7:0f:02:fd:36:09:ce:a2:df:
f3:64:00:7b:6e:13:ac:10:d1:af:2a:52:04:ae:68:4a:00:4d:
09:1a:cc:68:94:99:bc:f4:9b:11:20:bd:ae:85:20:20:2a:9c:
eb:73:8e:7d:a1:1a:c6:42:5b:f9:11:bf:ed:06:ee:30:c4:5d:
50:11:17:7e:87:81:76:5a:2b:a5:92:d2:31:08:e6:48:80:06:
ec:27:88:82:e6:50:3e:c1:28:72:20:31:c3:32:bd:d7:1e:c1:
44:08:dc:88:25:0d:ff:a6:64:b4:9f:1c:98:7d:55:4a:66:4e:
83:cc:6a:1e:17:41:c4:89:b8:42:f4:9b:0c:ba:67:f8:fa:bf:
1f:62:e5:b3:5f:b5:28:c7:fe:8e:c6:7a:ca:b6:70:f9:79:7b:
e0:5f:07:ce:7d:f7:f6:27:27:2f:c9:0c:8d:16:f8:1b:81:cc:
cd:d2:93:07:7e:a5:25:ec:88:4f:a3:44:a5:8c:6f:d0:b7:f6:
95:8a:65:9d:77:be:02:94:88:4c:ec:5e:ef:41:27:fe:15:b9:
48:00:b3:59:9c:af:05:87:ad:b6:ac:f9:36:49:a0:0d:ad:59:
44:fc:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:16 2025 by rpki-client