Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
File: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft (raw, json)
Hash identifier: 98gSWxHms4R8rq4xzCMtjEWI0xxfg7xInSGaVtn0LKQ=
Subject key identifier: 0F:C8:EB:F0:97:06:92:83:52:9B:FF:AB:59:D2:9E:A4:6C:8A:80:F1
Authority key identifier: 67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
Certificate issuer: /CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Certificate serial: 0197B5FBDEDB6D416B665F250FF2C5B875C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
Manifest number: 01A1
Signing time: Sat 28 Jun 2025 10:01:11 +0000
Manifest this update: Sat 28 Jun 2025 10:01:11 +0000
Manifest next update: Sun 29 Jun 2025 10:01:11 +0000
Files and hashes: 1: Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl (hash: ULUd4ccK6m7InWuEk9BN4Fidw/wXxbp1g8F2Qqe/vcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:de:db:6d:41:6b:66:5f:25:0f:f2:c5:b8:75:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a979547687e7f9cd07c160a549c0df3b3cc0df
Validity
Not Before: Jun 28 10:01:11 2025 GMT
Not After : Jun 29 10:01:11 2025 GMT
Subject: CN=0fc8ebf097069283529bffab59d29ea46c8a80f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:6a:94:52:cc:68:a6:b7:7f:8c:f0:1c:3b:
aa:f9:be:33:e5:ac:fa:e9:dc:31:95:7e:af:8a:4b:
2c:8e:9a:a6:be:07:90:68:9b:d2:70:32:04:08:60:
c7:ce:46:32:dc:a9:16:05:cc:86:ae:8a:f7:8b:cf:
71:2b:39:1a:2c:ae:4b:2e:d4:cb:de:05:c2:6b:6f:
7b:13:d1:e4:2a:a8:57:93:22:b3:28:d0:92:46:8a:
cc:73:73:a7:c5:73:87:f1:64:eb:cc:7a:52:14:1a:
fc:38:aa:2e:a5:0f:35:a4:dd:4e:83:43:2f:f2:4b:
ad:57:a7:e9:73:fb:7f:72:4d:76:34:06:79:84:4c:
17:ad:e8:77:a2:36:67:ad:09:ec:a5:7e:fa:90:7d:
f7:ff:89:05:90:e8:18:21:bb:43:27:cf:c5:6b:a1:
7d:4b:61:43:83:56:94:4e:80:2b:53:6c:61:a5:48:
0b:3c:34:1e:cf:a5:04:38:ff:0e:dd:c2:6c:94:5d:
2f:aa:49:4c:de:13:55:0d:97:f4:85:6e:6d:ee:b5:
3e:f6:41:f2:1e:ee:43:c3:cd:e1:56:29:fc:c1:06:
ed:81:44:16:e9:b9:b0:ef:48:60:94:1e:0e:d4:e2:
aa:f7:c4:9a:15:e6:c7:6a:bd:be:f2:51:71:6a:78:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C8:EB:F0:97:06:92:83:52:9B:FF:AB:59:D2:9E:A4:6C:8A:80:F1
X509v3 Authority Key Identifier:
keyid:67:A9:79:54:76:87:E7:F9:CD:07:C1:60:A5:49:C0:DF:3B:3C:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e08cdc-a3d4-490b-8a2b-d9c3df8e92e7/1/Z6l5VHaH5_nNB8FgpUnA3zs8wN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:74:aa:ea:22:0f:14:b6:dc:8b:61:76:d9:2d:2f:d3:f2:c7:
b5:2f:cd:e9:b8:8b:52:a2:f6:90:d4:60:ef:8d:f8:6b:52:84:
b9:a4:b6:44:cc:13:99:d2:37:55:b4:3b:d1:4a:ff:b5:42:32:
7b:49:40:fd:fb:9e:5f:9e:29:e5:f7:1b:3e:80:8b:69:d9:a7:
ae:dc:35:3a:c4:d3:82:70:e6:21:64:a2:86:1c:41:64:e9:e6:
e1:98:f9:7c:88:de:81:45:fa:ce:33:2a:f8:c5:9f:91:e5:1b:
4c:db:45:9d:51:ae:48:c0:00:98:24:ba:13:9a:cf:2a:41:54:
c4:27:2a:d2:ea:da:9f:c5:28:8c:d0:af:e6:ab:93:a9:c1:e6:
80:17:2b:80:13:69:07:2d:23:e0:0f:58:39:8a:13:d7:5c:e0:
46:ed:cf:05:45:5a:b9:0b:ea:18:45:1f:86:0f:cd:4f:07:ca:
41:b8:9e:1f:7e:e6:78:22:df:11:73:5f:bf:e7:49:2f:87:ff:
be:28:65:5e:6c:22:3c:0c:a9:1a:bc:8f:12:35:4c:a6:23:23:
78:bc:06:4e:6a:83:cc:e3:dc:05:ff:d5:12:41:5d:13:9b:ec:
e1:90:fd:bf:0f:3f:31:7d:26:6a:41:94:63:15:60:2a:4e:8f:
16:75:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:16 2025 by rpki-client