Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: 3wc3kbFkf01ObP3ZruJrHKStHvBCzPTeZkDTh/jG+F0=
Subject key identifier: C6:64:2D:9C:4D:6C:77:9F:26:7C:59:4A:D4:76:00:2B:60:1F:3E:F0
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 0197B7EAB7691AC6FDCF92C69F5C342F7B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 0B4E
Signing time: Sat 28 Jun 2025 19:01:42 +0000
Manifest this update: Sat 28 Jun 2025 19:01:42 +0000
Manifest next update: Sun 29 Jun 2025 19:01:42 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: XkpU7JdOo74otX6soWAW0EUvzYnFQ6sAzhNbD+g5Mhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b7:69:1a:c6:fd:cf:92:c6:9f:5c:34:2f:7b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Jun 28 19:01:42 2025 GMT
Not After : Jun 29 19:01:42 2025 GMT
Subject: CN=c6642d9c4d6c779f267c594ad476002b601f3ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5f:ef:73:c6:36:ca:ef:33:73:40:62:ae:a5:
a9:fa:a9:63:2d:39:3a:84:87:ce:77:fa:d3:85:7c:
5f:7f:c5:cf:09:b2:72:f0:34:b7:29:d9:25:63:65:
1d:9f:b9:8c:b9:fb:67:62:70:81:a2:c9:f0:b9:4a:
29:c5:05:01:d1:9f:fb:a2:94:97:52:a8:71:e5:b7:
a3:39:0d:c6:da:24:ec:98:f9:cb:f2:cd:45:78:60:
f4:88:24:3a:d7:7d:89:2b:a3:e6:de:50:61:e2:15:
57:56:a5:3c:14:0a:80:bc:04:91:ff:27:3e:c9:9a:
e5:10:d3:95:a1:5f:af:2f:91:43:b4:ab:34:f2:5c:
b2:0b:4a:d9:8f:b3:9f:82:77:9e:fc:92:4f:f0:f0:
cf:99:63:5d:9e:fa:93:c8:b8:f4:a2:33:89:10:19:
b2:c2:b2:c2:55:07:50:3d:40:ff:54:85:a1:d2:d2:
89:94:9c:88:84:57:eb:dd:cd:0e:cc:c4:94:65:78:
5e:0d:4d:20:d8:f5:b3:e3:61:3c:ba:21:d8:f2:31:
a0:2e:67:ce:ea:a6:a8:5f:a9:d4:94:a2:85:ea:84:
25:5b:cc:08:7d:9d:a6:06:1a:b8:d9:9c:b6:a9:00:
d1:ae:72:bc:68:75:48:e1:ac:b3:7a:91:e8:a5:1e:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:64:2D:9C:4D:6C:77:9F:26:7C:59:4A:D4:76:00:2B:60:1F:3E:F0
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:96:bd:50:17:9b:d7:05:01:f8:66:83:dc:64:34:19:e5:fd:
7c:87:8f:b7:35:7f:a3:89:83:b4:b8:87:99:90:52:b3:90:60:
a6:a1:41:c4:d8:b3:55:c6:af:de:93:80:64:65:9f:c1:f4:c9:
97:bf:bc:00:25:0d:9b:3c:da:a7:ae:7d:de:8a:41:26:be:ac:
d6:7f:b2:04:2e:dc:00:bc:d8:a9:9e:ed:4d:a1:91:42:0f:d0:
3b:68:7e:d0:d9:8c:59:02:d8:7c:1e:64:bd:9d:34:52:26:c0:
12:b5:64:4b:15:d6:41:57:cf:57:62:25:89:1a:3e:98:1a:82:
b4:c2:56:99:b0:7f:dd:0f:5a:b5:fb:24:e4:ba:ae:8c:f0:fd:
f4:ec:62:56:b7:2f:23:8f:b0:94:c9:99:3f:38:63:96:e9:76:
e4:54:0b:75:92:62:b8:ed:48:2b:a5:93:5e:e8:a2:3c:8a:ff:
22:67:3e:25:78:b2:93:7f:ba:e2:07:a5:71:18:31:d8:2d:54:
01:91:b3:92:e2:72:37:11:9e:66:51:7d:ef:14:69:23:60:15:
de:14:a3:b7:05:f3:2b:c9:d0:76:e3:5b:ef:dc:8e:6b:62:df:
4c:b9:0d:27:1a:cf:4d:09:c6:2c:24:e8:7b:99:3a:6a:84:e7:
42:4d:cb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:28 2025 by rpki-client