Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File: Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier: pY6dnMk9sKkRHJctQZbMUijMw627R+PuWnOrGbMcrPo=
Subject key identifier: 33:41:4A:1C:4A:67:BE:5F:CF:6A:3D:C2:6F:44:97:7A:06:04:01:BE
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer: /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial: 0197B6A136F0B5F3F52848C614D7DBF2A7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: ko1GzEX1Lr68nhMBQ9/iP6/x9LyprPgFfVtBB4giTy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:36:f0:b5:f3:f5:28:48:c6:14:d7:db:f2:a7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=33414a1c4a67be5fcf6a3dc26f44977a060401be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:77:72:e8:8b:40:03:af:91:cd:46:28:00:
ab:3b:c2:4f:66:71:83:06:92:e8:1a:89:2a:0e:99:
51:ad:99:b6:08:da:a4:36:14:d3:43:af:65:44:e5:
e0:b5:60:91:2e:b2:aa:d1:37:09:62:80:0a:18:d8:
03:85:c0:d9:25:a5:f3:1e:56:73:96:11:06:c4:26:
c7:5e:98:fa:18:32:61:45:08:84:9f:d6:fa:22:d6:
51:b5:60:14:a6:74:3a:fa:72:5e:bb:fd:62:b3:9f:
61:13:82:80:42:23:01:9a:6f:45:e9:a2:e6:fa:40:
12:e8:f6:45:78:fd:a5:09:01:bd:1d:ba:57:ac:40:
0c:85:a7:fd:44:46:11:c6:2e:93:b8:42:8a:3c:e1:
fb:7e:d5:46:8d:fa:82:b5:9e:0d:48:fb:52:fb:6a:
37:41:4c:c1:4c:c7:c6:8f:ae:b3:a4:1e:3c:c0:41:
6f:72:8b:8e:32:3e:87:9e:86:1f:7f:4c:43:96:95:
af:df:60:6b:3a:24:b9:62:9a:67:38:f8:2c:8e:98:
ba:75:57:65:0f:2f:f2:21:ae:9e:eb:07:d8:78:88:
30:f0:5b:a2:c9:05:dc:7d:f0:0d:28:a3:17:d0:49:
7f:ee:5c:6d:2f:0a:5a:55:19:78:f3:6a:c3:5c:ed:
ec:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:41:4A:1C:4A:67:BE:5F:CF:6A:3D:C2:6F:44:97:7A:06:04:01:BE
X509v3 Authority Key Identifier:
keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f9:ed:4e:63:a6:d3:ac:b1:2e:a4:10:8e:b8:ae:b0:53:67:
41:b6:84:bb:8f:05:ab:dd:b7:0a:b2:0e:4e:4c:93:65:fe:45:
33:80:8a:da:6e:dc:21:48:99:e6:18:66:4e:4b:38:8e:22:19:
fd:50:08:f5:dc:9a:22:00:51:98:ec:3e:38:2f:f5:1f:02:b8:
d3:b3:da:bd:93:28:15:2b:eb:d6:aa:01:a5:3d:5d:54:0f:f4:
1e:ca:ba:f3:59:a2:e5:69:79:c1:e9:bc:b0:1d:5c:82:b1:44:
e3:c9:71:2d:27:af:cd:f5:4d:90:bc:24:90:47:47:da:ae:39:
c1:7c:d3:62:bc:ba:02:8b:62:25:78:7b:dc:37:8e:c0:6f:ab:
e0:c4:db:5d:fc:c4:de:45:4d:0b:04:0e:1b:60:d0:07:dc:83:
48:86:c0:b6:95:ff:7f:17:6c:40:69:f5:b5:99:51:26:69:78:
c5:58:24:e7:a8:d8:d1:32:6c:73:df:a8:08:df:e4:06:c9:74:
c3:0c:7c:69:43:b3:46:6a:84:42:f8:15:65:0a:86:9d:7a:c1:
4b:0a:af:4f:7c:d0:5b:9e:44:22:d3:68:a6:b3:f1:c2:76:7f:
54:35:88:e2:41:af:ef:aa:93:eb:0a:06:38:fb:4c:e3:09:19:
1e:fb:8e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:17 2025 by rpki-client