Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: lV8HwrB6e2Sf0yRdjSbvGBU9bbWqB+1yRpO9LYHT23A=
Subject key identifier: 09:56:9C:F2:66:B8:15:AD:EA:1C:7C:5D:CF:90:97:75:3F:6F:7B:72
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 0197B6A10C905DDCD1B0B4B275BE59645BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0DD1
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: p4EnemfnI5iHRtCC9cmyY5MZi49okcE8hreO9VbQFxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0c:90:5d:dc:d1:b0:b4:b2:75:be:59:64:5b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=09569cf266b815adea1c7c5dcf9097753f6f7b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:f9:9a:9c:3c:46:9c:40:51:a4:3a:46:0f:
4a:05:3e:06:d2:e0:23:6e:96:8e:4f:8d:07:74:49:
6c:ee:06:2e:30:cd:34:29:c5:b6:f3:95:54:23:4b:
2b:c8:41:12:06:e1:3a:d3:05:61:62:5d:8a:98:9a:
43:b8:80:b8:50:3a:94:95:55:ed:9f:de:c4:0f:83:
53:ab:18:43:e4:31:14:5b:66:d7:bb:aa:60:d9:69:
b7:26:c6:cd:96:ca:16:6e:64:c4:be:f6:3f:1c:8e:
c9:42:ae:29:a4:d6:24:8e:78:5d:92:6a:e5:43:21:
0a:2d:c0:54:17:5f:ee:f2:f9:c2:2c:2a:85:b2:65:
0c:0d:c5:f6:26:e6:cd:47:8c:13:24:51:01:35:d8:
ec:ec:7e:cf:ed:67:fb:80:52:32:e3:d5:d0:37:73:
01:77:1f:eb:48:e6:7f:d3:bc:49:03:db:d3:fe:07:
d2:68:8b:bc:cc:a0:09:cc:ce:b1:55:99:ee:30:b6:
a6:32:c2:f9:93:16:10:a8:79:1e:42:f2:e1:1d:80:
3d:d4:89:9b:16:70:3c:0b:fb:c4:88:8a:6f:79:b2:
03:3c:b2:f4:88:d4:d6:c3:ae:92:82:0c:2c:67:cd:
7f:fb:63:26:db:7f:a4:b0:05:66:01:77:76:ba:4e:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:9C:F2:66:B8:15:AD:EA:1C:7C:5D:CF:90:97:75:3F:6F:7B:72
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:d1:ae:bc:46:61:2a:f6:4c:1f:73:1b:32:1c:8b:59:74:
67:0e:fa:e8:04:98:a8:e3:be:fb:c3:88:c4:f6:18:f4:87:9b:
aa:de:bc:58:69:bf:c9:6a:56:fe:71:f5:00:65:2a:4a:09:e6:
81:46:d5:54:f6:84:4b:01:9e:01:53:00:8a:74:ba:db:23:33:
1e:ef:99:ee:36:a6:6f:f6:be:98:12:72:3e:84:0c:3e:d8:b0:
b8:45:37:a8:74:8f:c4:20:3f:3b:16:64:6f:2c:17:04:86:43:
23:aa:17:73:c7:b5:ef:f8:a6:f9:10:ea:fb:96:ce:5f:13:b4:
e5:ab:d4:21:89:fd:ca:95:41:ea:25:65:8d:19:e9:0f:e8:14:
02:ce:02:77:a6:ba:35:6d:7e:0b:19:34:da:c4:5c:b4:e1:d7:
15:0b:fe:16:a8:41:ce:7c:06:36:ee:7b:55:4b:2a:81:c6:e0:
3b:70:66:4f:de:55:c0:77:06:4e:f2:e0:76:42:59:dc:90:73:
29:90:80:37:f4:df:8f:22:d1:ea:6e:8b:59:b7:54:7b:ca:41:
48:b9:af:ab:0e:88:98:05:d7:0c:aa:07:49:31:1d:3c:93:c9:
e9:75:3e:3a:45:f5:c0:ca:41:52:f9:a8:2c:2a:59:51:70:f9:
ce:50:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:38 2025 by rpki-client