Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier: NoUIyyIUyOUSVK2vFoIbvlXPrRYCwiBDEe/tL9Oa9bg=
Subject key identifier: 15:33:7A:67:65:54:DE:C3:93:80:29:74:D0:BF:7A:95:8B:B1:94:A6
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial: 0197B77BFA8F28F44C26074C083AB0FB12C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number: 0CEF
Signing time: Sat 28 Jun 2025 17:00:44 +0000
Manifest this update: Sat 28 Jun 2025 17:00:44 +0000
Manifest next update: Sun 29 Jun 2025 17:00:44 +0000
Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: 4Z/7chYl6urqLeMMj9DnXDW3NDSrfMDVBX7tLFnrWJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fa:8f:28:f4:4c:26:07:4c:08:3a:b0:fb:12:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Validity
Not Before: Jun 28 17:00:44 2025 GMT
Not After : Jun 29 17:00:44 2025 GMT
Subject: CN=15337a676554dec393802974d0bf7a958bb194a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:45:e4:8d:d2:e5:0b:93:9a:f0:df:9c:cc:9e:
8a:6f:e4:1f:d4:76:ea:a1:c6:41:97:fe:d5:bb:01:
3c:26:d0:b2:b2:bb:76:bd:b7:c3:be:c9:1f:3d:80:
18:f9:56:18:19:ec:36:54:33:a5:33:e6:19:76:0d:
a4:86:7e:41:fa:cd:a7:41:bd:db:c3:9c:18:47:ee:
79:1a:de:cd:6c:66:de:c9:ab:1c:ff:31:5d:19:64:
9f:ce:d4:0e:3f:a2:7a:03:b3:3d:45:c3:7b:3a:c5:
fa:43:7d:67:a3:4f:d4:24:3a:75:dd:d8:a1:ae:a7:
d8:88:5d:f4:40:bc:c8:0a:98:56:77:aa:1a:2a:e1:
2b:e9:2e:e9:0b:79:74:ba:2c:32:6f:b2:69:4c:68:
92:9b:ae:40:5a:f6:35:1f:1a:95:de:51:11:1c:b0:
34:c6:15:58:47:32:b4:65:20:12:4e:36:f3:e4:04:
cf:d9:dc:18:39:4e:6a:cf:3b:a8:b9:4e:2b:54:dc:
35:14:14:30:39:88:d3:59:76:f3:5e:b8:ff:73:fd:
f1:3c:b3:69:84:c0:5f:02:e5:4e:d8:e9:db:8e:94:
b2:34:1e:3c:44:7f:e7:aa:4e:4a:95:71:e1:af:07:
83:cc:37:f3:bb:74:c4:39:70:72:63:9e:f6:85:b4:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:33:7A:67:65:54:DE:C3:93:80:29:74:D0:BF:7A:95:8B:B1:94:A6
X509v3 Authority Key Identifier:
keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ec:6c:37:f6:a7:87:83:e2:e2:8a:ac:87:b4:19:e5:45:79:
2b:21:65:c9:dd:b3:a6:48:16:46:2a:43:13:a7:3a:40:a0:ee:
50:e0:23:39:b7:82:6c:19:b9:83:d0:76:a8:69:da:4f:c7:a3:
a6:28:eb:62:39:8b:5a:88:ca:49:89:1f:8f:96:51:8e:74:91:
d9:9f:79:30:42:99:2a:08:80:fc:21:d1:52:cd:8c:75:db:bc:
42:7b:b3:e7:4d:2e:f1:fb:d1:ce:d5:d6:4f:33:c6:d8:a1:c7:
0f:60:21:e2:f2:88:4d:27:73:03:11:00:9b:c5:0b:3c:19:c0:
68:65:37:ec:db:f4:20:e6:d9:8e:11:97:6c:aa:ba:10:11:32:
c6:e1:1f:a9:46:87:70:9e:9f:30:ea:b0:b8:1c:86:ea:11:1f:
d4:43:44:d9:bb:16:9d:4c:f6:d5:d1:31:91:57:3f:06:e0:cd:
87:7c:a4:56:2e:f5:16:f7:76:8d:f9:ce:27:8c:25:85:c9:05:
21:f2:cc:95:4e:f4:e1:5e:9a:76:bf:e4:a8:cd:37:20:68:c7:
e4:a5:b0:8b:a3:b3:91:54:29:d4:1f:38:91:53:13:fa:c5:13:
d3:fd:93:71:45:9c:e2:c6:11:1d:32:a6:8e:8d:81:05:f3:4f:
c8:d3:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:15 2025 by rpki-client