Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
File: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft (raw, json)
Hash identifier: y9ORcEuds5RjXnAtzfghuSmEZfHags1m9oDCuEsGyP8=
Subject key identifier: 44:F4:49:EA:03:F8:60:98:6C:90:CE:01:5F:00:A8:97:8F:50:26:48
Authority key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
Certificate issuer: /CN=6790960ac4ba271502f1738a59490856f1975b1f
Certificate serial: 0197B6A14E983DA7B7599EDE974A87B0BCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
Manifest number: 08E7
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl (hash: H6diX32Mcu2G4JfssP7R2dzd+oe2Ym+0S0aXOE+igSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4e:98:3d:a7:b7:59:9e:de:97:4a:87:b0:bc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6790960ac4ba271502f1738a59490856f1975b1f
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=44f449ea03f860986c90ce015f00a8978f502648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:73:32:d0:0a:b9:34:39:46:86:27:33:0d:
1d:82:5b:df:e2:a4:49:d5:06:ce:36:fb:78:d8:9d:
22:db:64:bb:be:3d:43:5e:d0:8a:b6:0e:1e:64:82:
b0:de:89:2f:ed:4b:ec:93:4f:13:c1:a8:e9:3c:69:
2b:bb:ad:59:95:2d:f0:d8:df:be:0b:a1:90:44:a8:
f7:e0:9c:ca:eb:47:49:b7:a7:18:4b:10:34:f1:ea:
a7:41:49:33:bf:c3:d5:09:08:d1:c5:dc:7e:fa:80:
32:d4:63:56:9e:15:08:74:ba:5c:9c:1c:81:6a:33:
a2:a5:25:be:56:c9:8e:49:d9:bd:0f:12:24:1d:00:
b0:c9:52:90:ca:64:62:b3:d6:a6:82:0f:0e:d1:83:
10:29:ec:b4:eb:fd:5c:34:ef:72:08:9d:9d:b4:6f:
51:00:c8:c9:6a:f3:9c:d6:39:14:39:88:1a:3f:f8:
19:80:a7:9d:7b:62:71:ad:d5:79:aa:cf:09:0d:18:
59:b4:07:03:60:e7:b5:f5:e5:2e:da:e1:48:41:69:
04:33:43:44:96:cb:95:dd:a9:74:c5:c4:a4:83:7a:
1a:88:44:df:10:d0:19:68:54:82:04:27:08:12:bf:
53:dd:91:21:7b:a8:14:28:77:e5:8f:74:a4:a4:c0:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:49:EA:03:F8:60:98:6C:90:CE:01:5F:00:A8:97:8F:50:26:48
X509v3 Authority Key Identifier:
keyid:67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:e1:5f:d8:3c:c6:de:6f:54:ae:88:99:6b:a5:22:bd:3d:
2a:35:36:00:5a:20:0e:04:6d:cd:9c:1d:5f:ce:80:be:89:dc:
d2:9e:0b:fe:c9:0b:c1:6c:5e:71:c1:39:bc:16:bb:b7:c2:bb:
18:02:8a:77:8f:80:b2:c6:9a:5b:d8:68:d9:5e:c9:19:fd:68:
b0:76:6a:ff:ae:f4:b7:eb:21:b2:f9:50:88:b4:32:e5:1d:b3:
d1:5c:03:d4:99:4d:db:70:c1:12:4a:05:4e:74:2b:49:7d:00:
c6:07:cf:36:69:b2:1b:9e:0f:16:5f:dc:36:fc:57:59:3b:16:
eb:1e:0c:45:6e:0e:8f:06:5e:04:59:65:4c:47:6b:5c:6e:c5:
e3:7d:81:e7:1e:a8:d5:30:d6:f9:c7:cf:d2:19:35:f9:7b:92:
95:36:fa:9d:05:df:25:d9:31:d6:45:07:2b:29:2f:5b:db:01:
fb:19:a6:7a:9d:2f:db:38:cd:04:76:0c:cd:6c:b2:dc:bf:40:
c9:6d:4a:f9:43:35:13:86:e1:96:23:41:4e:8d:c3:4d:82:e8:
e5:a0:e9:ff:a8:5a:70:0c:16:f4:e8:49:a3:7a:2c:79:f4:ba:
2f:63:79:c1:e9:67:ac:12:0a:b3:d5:25:0e:e3:0b:24:ab:9a:
9d:d4:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:56 2025 by rpki-client