Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: uF9OIrtD1uGefRDXUR+pQnsLHBGW5FxuzFMLgW96tWE=
Subject key identifier: 9F:E0:E5:D7:57:05:BD:CD:B1:43:8E:74:77:9B:2B:F9:2F:F0:EF:42
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 0197B5FC494E36ABE4E068DE29F66F69BAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 13D2
Signing time: Sat 28 Jun 2025 10:01:39 +0000
Manifest this update: Sat 28 Jun 2025 10:01:39 +0000
Manifest next update: Sun 29 Jun 2025 10:01:39 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: +Yiw77QSD1i1GvVNngM7kyJpNo2jatM8C1BxFjnNsao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:49:4e:36:ab:e4:e0:68:de:29:f6:6f:69:ba:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Jun 28 10:01:39 2025 GMT
Not After : Jun 29 10:01:39 2025 GMT
Subject: CN=9fe0e5d75705bdcdb1438e74779b2bf92ff0ef42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:2e:c4:d1:18:69:65:65:3e:72:83:bb:98:
6b:aa:ef:3b:b0:05:7a:f6:c7:c9:93:07:b7:31:75:
b6:ea:b1:29:11:ec:1e:f3:a4:3f:cd:25:92:ef:63:
74:f0:97:ec:76:ec:81:00:e4:7e:5b:9c:84:47:de:
3e:94:a9:e5:90:be:0c:5b:30:d8:e9:76:23:bf:0b:
4b:7d:4f:85:37:32:bf:12:cf:2e:99:7c:92:83:38:
3b:85:ce:5e:74:bc:03:ab:d8:a5:d8:f3:16:73:c3:
c8:7d:55:4a:85:ef:d2:c5:c9:0d:48:21:c5:ad:99:
25:23:54:ef:b9:41:33:d6:9b:8c:f9:03:9a:5c:16:
c4:97:c9:fc:c2:da:f0:4f:b0:5e:ec:9c:93:8e:c0:
d2:2c:44:01:75:3e:42:88:05:cf:62:02:82:55:93:
e5:73:69:5e:5f:e1:e9:ad:ec:21:f4:4d:83:db:bc:
a4:d8:dc:5e:81:d3:22:c5:16:5e:02:4f:f3:86:e4:
c5:84:f8:dd:23:7e:90:ea:5b:cc:1f:19:4b:94:92:
1f:17:03:cb:fb:7e:11:ee:ae:5c:2e:f3:75:dc:86:
03:4b:1d:5b:61:72:a0:5c:b2:9d:df:ac:94:62:02:
57:48:38:d8:59:3d:40:3d:8a:2c:07:fb:0a:8f:2f:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:E5:D7:57:05:BD:CD:B1:43:8E:74:77:9B:2B:F9:2F:F0:EF:42
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9b:f7:58:3a:85:7f:a5:86:64:71:09:d9:ea:45:3d:fb:52:
78:22:ec:8e:4c:50:52:04:0f:3a:a7:0f:7e:81:e2:64:24:be:
88:c6:42:50:c7:0d:db:8c:c4:c0:e3:34:06:21:a4:d6:04:ca:
d4:c6:77:50:85:56:d1:d2:ae:16:d1:95:8d:9c:e4:5c:4a:ef:
1c:5c:37:25:b7:b6:69:6d:93:27:70:7d:04:29:41:e7:71:21:
5b:7e:5c:e3:a2:57:a9:22:d0:27:7c:91:96:47:db:a8:af:fa:
f6:02:5d:16:7f:48:14:88:07:1a:a1:bd:df:1c:43:a0:e4:f6:
c2:6f:77:03:e6:9f:79:19:8c:1f:4c:f2:a5:ce:02:08:65:35:
f8:f6:1d:01:7e:54:e0:5e:a8:d7:cf:82:65:35:57:b5:50:04:
c9:1a:d8:31:49:d4:47:92:44:bd:e9:c1:a9:f0:f1:7a:b1:93:
c1:fe:16:63:d7:fc:5e:33:6e:98:96:41:ee:79:30:03:ea:dd:
b2:d1:89:64:e4:18:ea:35:41:c5:bc:9c:c2:da:a0:3f:ae:4d:
fe:c7:95:d5:88:f2:e4:57:a1:d9:4c:3e:9b:d6:f5:43:ef:15:
ea:7d:cc:d0:4f:90:ee:58:7e:57:a0:a4:e2:76:3f:49:ed:b3:
9a:a6:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:09 2025 by rpki-client