Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: lzQk+EYB0nPl/fZjbgJC8yVO8SOGLAktK72kD2QW/mQ=
Subject key identifier: 33:39:A9:4D:FD:35:E5:DF:2C:20:C1:38:60:08:CD:C0:2A:2B:94:9A
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 0197B70ECA345329841C14433FD16261E668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 0D47
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: 7uV9OmH9ZfUGU5FIRfAMeSMa4jW8BaRSHFGcmXJjB8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ca:34:53:29:84:1c:14:43:3f:d1:62:61:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=3339a94dfd35e5df2c20c1386008cdc02a2b949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4a:19:6c:22:06:ce:54:4d:4e:31:af:3e:9b:
b8:90:3e:de:26:38:cf:5d:6d:2a:91:ec:11:d4:40:
8b:c8:db:d9:76:36:12:74:cc:05:c2:a6:a9:56:7f:
0b:74:56:57:c3:d5:58:05:e0:55:35:e4:ff:73:85:
75:e0:16:ad:ea:e5:c2:55:bb:e6:3a:6d:45:24:8e:
16:96:15:85:c2:18:7a:c2:fe:e5:c9:22:d3:aa:db:
48:81:51:dc:1e:e3:57:a0:d9:be:a3:0b:15:e1:69:
0f:7e:27:93:60:fb:e7:47:c7:ed:13:1f:57:53:79:
fe:b1:06:4f:a4:22:0a:96:72:38:4a:52:a2:0d:33:
b2:36:c9:1a:a4:7b:09:25:fb:b0:b0:59:ee:25:2c:
52:f8:33:7c:f1:62:f6:ce:70:7d:98:a3:3f:cf:97:
52:e1:11:a6:7a:70:6f:2a:57:b6:50:24:f9:13:d7:
12:6f:3c:68:3a:ab:e5:fd:2f:6a:e0:d3:ce:f0:01:
c4:61:bd:8a:cf:7e:c2:a7:5f:90:b9:bd:78:67:e4:
2a:e4:88:a8:2d:eb:11:4c:81:c1:55:06:ee:c3:36:
52:a1:5d:0b:96:f3:e5:6b:68:08:6d:5b:cb:4b:9d:
ab:2b:27:df:f7:fd:69:a2:25:5d:4b:86:29:54:8f:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:39:A9:4D:FD:35:E5:DF:2C:20:C1:38:60:08:CD:C0:2A:2B:94:9A
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:2c:26:65:14:56:12:91:f2:51:1d:2a:ee:ed:56:1e:da:cf:
e4:24:91:08:e1:14:2b:1b:73:66:ff:e4:ff:ad:a9:33:99:ae:
9e:52:e7:a7:53:49:37:6a:ec:c1:77:23:61:ed:f4:1a:51:27:
15:ca:c7:81:f7:00:b6:01:51:84:f1:7f:56:4d:ea:35:1c:0b:
8d:bb:7d:80:a9:3b:db:33:aa:96:8f:6a:9f:7d:e5:72:a6:6e:
68:ee:87:0c:9a:8f:e7:13:0f:79:31:34:49:66:68:27:5c:07:
dc:71:c3:c9:22:d0:b1:6b:42:fe:fe:33:fd:3f:69:03:f1:94:
52:19:8d:33:40:50:5f:5f:cb:a7:c2:c4:fb:85:6b:56:4d:5c:
c0:8f:57:9b:0b:d5:51:4b:47:38:ed:85:ad:14:d4:ef:97:6a:
f2:69:af:13:43:24:b8:0d:a4:44:04:f6:e7:7c:93:72:8b:53:
72:d5:ca:74:6e:67:94:f1:a9:2e:d6:05:e0:1e:42:73:d7:27:
13:29:dc:7a:35:44:32:9c:df:0c:dd:d0:f0:bc:55:40:ff:2a:
13:38:eb:52:eb:dc:a3:d3:a7:04:3c:46:b5:36:c2:0c:10:57:
61:19:76:d9:c6:22:c9:27:5b:08:42:1c:28:06:0f:b6:44:f6:
06:a4:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:30 2025 by rpki-client