Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File: KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier: VDS6DLPS7CqYpffqI17i/nPlo1IuQFqR5rfmNFNLgrU=
Subject key identifier: FF:C7:B6:98:96:8B:5B:2D:CA:0E:46:23:D9:BC:1B:C9:FF:EF:33:BC
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer: /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial: 0197B7EA8835D0B153AB1625E19116291B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number: 0970
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: /SR6H15f3lFtDIIxmwqEep3eHn173zXWrF7k93uD7Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:88:35:d0:b1:53:ab:16:25:e1:91:16:29:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=ffc7b698968b5b2dca0e4623d9bc1bc9ffef33bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:07:28:e9:74:7f:d9:4f:49:42:5a:f0:4a:
b8:38:a8:c3:de:69:c6:59:ad:d3:a9:42:59:0f:d0:
df:f1:4a:f7:5e:a6:ac:dc:0f:c7:9c:7e:16:e7:fa:
ea:44:eb:40:74:9f:de:66:74:81:f9:f0:77:ac:84:
22:5c:36:f0:97:46:e1:df:e1:be:00:f1:84:60:22:
e2:72:51:a9:ce:5d:55:71:9f:aa:20:f1:a8:0b:01:
bc:8d:93:5d:15:22:ea:37:5d:fc:e9:fb:a5:a2:ea:
fc:00:7d:76:06:57:95:9c:17:8f:6b:64:b9:d6:b4:
95:3f:55:24:22:8f:47:57:e2:3a:d1:90:b4:29:24:
e8:22:ea:96:b6:d1:20:24:53:34:fa:dc:24:2d:3e:
09:17:ed:a3:f9:2d:be:3d:84:7a:75:4e:1b:4d:e7:
cc:18:36:e3:44:3c:23:ad:63:b9:2d:f5:2d:2b:e1:
f3:c8:39:98:3e:80:3f:fe:41:be:2f:02:b6:45:26:
e2:96:49:66:03:c6:11:92:fa:b7:1a:30:27:6e:7b:
98:65:9c:01:23:76:60:6c:98:05:79:b0:5f:a8:87:
38:c3:55:dc:cf:76:8c:8f:6f:d8:fb:bd:8d:69:bb:
92:ba:c5:16:93:6c:f4:d0:ce:f2:73:05:6a:9b:26:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:B6:98:96:8B:5B:2D:CA:0E:46:23:D9:BC:1B:C9:FF:EF:33:BC
X509v3 Authority Key Identifier:
keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:f5:56:e3:98:7e:3c:a6:60:68:3a:34:a9:9e:8e:ec:8e:
b8:93:df:d4:fa:35:a7:1f:0c:ba:45:a2:35:a5:7d:b4:85:64:
64:a4:03:7d:59:ea:34:1f:94:80:19:7c:18:f6:6b:5e:78:89:
de:8a:40:43:97:b3:07:30:d4:c8:3c:45:25:49:09:f0:6b:a7:
44:65:c0:30:c9:d9:21:0d:d5:1a:b7:1a:b5:76:37:33:12:10:
c9:2b:c6:42:84:fc:5c:ae:34:ac:40:34:ce:64:dd:cd:cd:c8:
39:20:35:8c:e2:be:8d:47:77:e0:67:87:83:e1:4a:cd:fc:87:
43:95:ec:47:e1:78:56:2a:92:72:2b:ea:0f:a4:2c:9b:85:12:
97:b2:be:54:32:a1:3b:fb:bc:d3:7e:e3:fc:c0:58:cd:55:72:
dd:39:e9:e9:61:ea:47:6c:7d:8d:8b:71:fb:fc:33:66:b5:95:
ef:5f:ba:e8:40:79:d4:29:8e:53:73:32:e9:55:2d:85:1d:d6:
09:f2:bd:59:b5:ea:9a:0a:5c:60:85:c2:2e:ba:c5:10:70:42:
dc:9f:ce:33:99:72:5b:f1:40:73:90:56:4f:76:af:6a:84:4d:
24:46:9a:1a:89:a9:ea:bd:dc:fd:64:fd:a2:3c:4e:d5:f6:eb:
83:d8:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:13 2025 by rpki-client