Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: zhVCWyNamQCL/xI3mNFR9u+I1q3z1E7lXYHl9keVbks=
Subject key identifier: C8:2F:07:70:71:66:92:D8:EF:DE:0E:76:15:A4:2E:B9:CE:EA:63:8E
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 0197B6A0A80891B9DE49A0DDAB3B7962419A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 02D6
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: NeDEaQfNDYSFq9Pt1rbo7jz/Kl5Dm7jUJZOxYITi7i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a8:08:91:b9:de:49:a0:dd:ab:3b:79:62:41:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=c82f0770716692d8efde0e7615a42eb9ceea638e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:31:7c:1a:12:1f:12:cb:10:8f:e0:ad:41:
0e:b9:85:a0:e9:71:68:3f:16:d3:16:30:87:70:14:
8a:7d:5d:cb:cc:18:84:22:aa:b5:c2:a2:03:10:c2:
09:95:f2:4f:36:6f:f3:7c:44:c2:89:c2:9c:05:63:
02:ca:17:a3:22:e4:cb:68:f1:9a:42:f3:cb:63:8b:
37:20:2d:55:b2:d6:b0:e3:b4:4e:82:56:d3:34:04:
03:92:ed:3e:1f:45:f1:e9:1f:1e:d0:69:50:c9:e7:
f3:96:c9:c9:34:c0:fb:96:4e:14:a8:49:85:97:bc:
dc:f6:34:52:a7:a1:7b:36:06:ca:1b:f3:64:fb:7a:
e6:9b:f1:3a:0a:ac:3b:ed:37:3d:90:c7:7c:d0:e4:
90:0e:f5:27:66:88:ae:28:24:bb:d5:22:79:92:46:
30:5e:4b:d7:d0:24:47:97:6d:f3:6d:bc:1a:da:f5:
25:b1:7f:c7:d2:f1:4a:c9:b9:83:0e:4b:22:12:b0:
e8:02:9d:bf:eb:1f:18:33:6a:b1:67:6c:e7:63:18:
01:22:d9:a3:04:34:79:36:c0:d1:76:02:51:a1:65:
65:88:6d:c7:0b:f6:19:de:d3:b9:c5:94:35:e7:07:
dc:a2:81:08:bb:c7:36:08:9a:90:24:6a:f4:da:75:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2F:07:70:71:66:92:D8:EF:DE:0E:76:15:A4:2E:B9:CE:EA:63:8E
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9a:46:3d:5e:05:68:76:e1:34:7f:fc:eb:3e:52:6d:20:c5:
0d:3b:fe:15:78:b3:62:82:14:fe:7c:2f:0c:e0:18:b5:5b:87:
22:09:98:14:c5:15:f7:ed:72:0b:36:ad:b7:18:25:c8:23:8a:
c5:d5:80:ee:4c:c1:c0:cb:c2:c8:53:c1:21:d0:bf:e9:bd:8a:
8e:da:a7:d7:22:93:11:22:99:23:73:39:2b:18:98:b6:21:5f:
52:0a:f6:69:dd:53:89:11:16:e5:4c:9b:de:75:36:7c:0d:06:
48:88:a6:5c:ab:79:b1:c4:88:3b:cb:e0:82:77:6f:7b:08:ac:
bb:ad:1a:ba:6f:fb:a0:8a:40:35:fb:6e:6a:dd:b5:5c:34:83:
57:1a:d0:7e:82:e4:83:13:8d:66:b2:b9:67:f5:30:fe:7a:3d:
a3:35:0c:29:79:c9:38:76:a1:0e:a5:59:a2:3e:59:4a:0b:fe:
5c:15:30:b3:c0:ba:e6:8f:0a:7c:6f:4b:6d:ce:46:26:1c:7f:
7e:a7:a9:b4:a1:88:2f:a6:82:d6:92:66:4c:19:5e:f1:95:2b:
32:a6:dc:89:bf:b1:37:c0:fa:b1:42:4e:38:18:45:1a:72:58:
1b:db:05:ee:2a:54:09:02:5e:1c:d0:f6:08:a7:4f:b4:30:5f:
22:f7:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:27 2025 by rpki-client