Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: LSTQUSnph4jp1cOt5m9Acl/0vvmFsxpmxxXv53Nh8bQ=
Subject key identifier: 1B:CE:2B:C8:9C:5D:B9:B6:1D:85:69:DE:29:FB:9B:4C:42:2A:61:54
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 0197B77C5C22A4EBC0A2038E28E4F186C1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: kDLqZXPzPWore0GkzPIJJE5Wasin98C5Qg76dqjWEyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5c:22:a4:eb:c0:a2:03:8e:28:e4:f1:86:c1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=1bce2bc89c5db9b61d8569de29fb9b4c422a6154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:8c:8c:fb:27:8b:59:42:11:2e:4e:3c:41:
91:c4:c2:78:4d:23:71:bc:e8:48:38:99:4f:a9:34:
32:33:11:61:42:f4:16:a4:c9:1c:c8:90:3d:52:23:
42:0b:31:cd:aa:7c:95:b1:f8:ce:c6:8f:76:83:c6:
64:96:bc:91:1f:7f:31:e2:12:a6:35:48:36:5b:0c:
0a:da:06:68:d9:ab:27:be:3e:4d:ae:1d:7b:1c:98:
bb:a2:af:f8:a2:26:cb:7c:20:3f:ea:24:f7:6f:a1:
81:30:b5:ea:c3:fa:96:22:30:26:d8:13:0a:fa:ff:
dd:e5:03:58:28:5d:67:db:5a:27:cc:1a:94:bd:a2:
fb:a7:9a:1b:fd:f8:f7:ea:ea:58:4d:93:24:8d:70:
4b:66:3a:c2:80:bc:29:58:00:e9:48:12:48:13:55:
3c:59:82:9f:04:6a:f0:a6:fa:aa:b2:a6:bd:2e:34:
84:b8:26:60:9c:00:52:89:d7:bc:f6:e5:1c:ac:da:
3b:ba:6b:61:25:84:c2:05:26:8a:f0:93:bb:da:1e:
cb:c1:35:6c:da:cb:c3:13:91:61:af:3c:35:f2:4d:
93:de:48:2a:86:a4:51:2f:3c:02:c2:ca:07:a0:f5:
f0:f7:3f:c3:cd:c3:9e:37:93:b4:3b:d7:ac:74:31:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CE:2B:C8:9C:5D:B9:B6:1D:85:69:DE:29:FB:9B:4C:42:2A:61:54
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ce:48:fa:1d:fc:c5:db:3a:29:69:bc:35:04:91:b9:fe:45:
5a:cf:94:da:7e:40:9d:0e:c2:30:67:4d:57:be:3b:0c:b2:49:
6b:04:c3:02:4d:17:17:6c:8e:a0:ea:16:ab:76:d4:0e:8a:1a:
29:dd:6c:7a:88:ef:91:db:85:bf:10:22:b0:12:9c:f2:de:c3:
0a:2f:63:e2:ff:ae:b0:bb:d6:ca:38:fe:34:63:1f:15:3c:2f:
f1:ef:cc:d1:60:24:9a:9b:01:b2:97:3c:68:8f:8e:1b:0d:ae:
15:41:ff:5b:ca:5c:2c:8a:68:0c:8d:97:41:16:a5:4d:c4:23:
e0:a5:58:25:b4:54:65:c3:93:90:4b:a5:33:ff:7c:5a:ac:b8:
b9:66:de:2c:5e:f2:05:66:c0:7e:fc:8a:1c:3c:08:26:1d:59:
b7:57:a5:bd:73:72:ea:c0:b1:07:f9:bc:41:48:cf:50:bc:5f:
9b:7c:33:0a:4c:8f:26:60:46:8a:1d:42:a9:67:a0:08:5e:8d:
2e:91:9b:8d:ba:a5:24:ee:15:37:2b:96:2b:22:f9:56:b5:d0:
c9:af:a7:c4:f8:16:5a:be:d9:b7:33:09:29:9f:b2:04:1c:ab:
f8:55:c8:4e:d0:d8:32:42:10:71:97:cc:47:c2:3b:18:8c:29:
89:16:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:44 2025 by rpki-client