Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: ZZDTv4PqfMVt3RWBreMdavg4NdnOTzy7HMQd5RaLkVI=
Subject key identifier: C0:41:09:85:A8:DE:4E:D7:C5:A8:0D:28:28:B8:B1:4E:10:15:B2:A5
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 0197B6A1718A1D7CE7F1030D3853AEB75871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 06F4
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: HNv2AoEqQbbpYNN85RvEKQyq1gpfo63gyPQTN7t4qBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:71:8a:1d:7c:e7:f1:03:0d:38:53:ae:b7:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=c0410985a8de4ed7c5a80d2828b8b14e1015b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:ae:42:3e:9f:2c:b1:4a:3c:ba:cd:28:d2:
5c:d3:18:af:2a:19:7d:af:85:9c:2e:47:68:6d:b3:
6c:da:da:81:83:f5:91:06:59:c5:9d:fa:c9:23:34:
b9:0b:dc:35:10:f4:e5:ac:73:ee:48:56:36:7f:95:
04:eb:7b:c1:2e:1a:78:48:b5:a6:5b:0f:70:5d:c9:
d2:11:51:c0:dd:32:6c:08:fd:b2:c0:97:9d:99:14:
28:fa:1e:ef:48:9e:14:6f:8f:08:cb:8e:24:3c:e4:
d7:e1:01:fa:71:cd:4f:d9:78:b9:98:75:03:78:5e:
9c:ba:fd:97:18:83:23:1e:d4:e9:9a:88:52:10:ed:
3f:d3:37:fc:6a:ae:32:b0:ee:84:6d:49:8f:fd:18:
60:6c:94:6d:b0:a5:5c:78:d7:bf:db:9b:50:62:9b:
5b:a5:28:40:10:0a:63:bd:d5:6a:3f:80:1c:b0:dc:
78:66:5e:07:3e:8a:ec:01:ff:e1:70:0c:1a:dd:dc:
3d:f7:9c:eb:b4:a4:03:da:5b:c9:19:07:f0:82:93:
86:fc:f5:63:55:e3:1c:46:42:8b:08:7d:03:20:e7:
52:b8:54:64:d4:16:7a:e9:f9:b7:2e:35:64:6b:89:
0a:0c:c9:94:07:03:a2:86:2d:32:02:db:35:45:80:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:09:85:A8:DE:4E:D7:C5:A8:0D:28:28:B8:B1:4E:10:15:B2:A5
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2e:db:7f:68:14:08:ec:47:22:29:66:89:0e:85:99:47:77:
1c:42:bb:e2:f5:f1:6c:9e:28:95:2c:b1:5b:db:c5:28:86:ca:
4c:46:bf:73:63:9d:13:2e:4d:2e:75:ad:05:e3:9a:1d:b0:ab:
69:37:78:77:63:28:c5:7d:f6:cd:77:4e:56:f5:c2:ca:77:f5:
a6:de:1a:fc:d8:fc:eb:b8:3b:cf:6f:49:0d:48:4e:0f:72:2d:
06:45:a6:70:ab:cd:9c:47:57:83:6d:1c:6e:23:c8:20:c5:1c:
6a:c8:97:ac:5e:3c:4f:62:2a:e2:85:30:df:68:d3:08:47:c1:
c8:a3:24:21:52:6f:5b:fb:91:41:4b:91:72:86:81:27:e1:c3:
1a:76:3c:be:56:e8:6d:e7:bb:93:e6:bb:b3:20:6e:30:c9:47:
f8:af:c8:2a:09:43:ad:82:29:79:b3:57:e0:4d:70:0c:b5:65:
b8:11:3f:68:b9:01:c1:13:32:50:90:f9:67:72:11:d1:3e:93:
b6:65:9a:8b:1a:01:ee:c7:e9:c2:6d:f5:71:8a:1e:c9:44:a6:
1b:13:ae:ae:6c:17:2b:b8:ba:d0:13:d1:f8:fe:da:bc:4b:93:
8b:46:ba:b4:53:ae:9e:df:a1:f1:18:fb:b4:41:ab:6e:e4:f3:
12:8b:c4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:34 2025 by rpki-client