Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: TELmCY6p5a1cL58vRa45X83G/q4JDLrWBOaXfyhI/qo=
Subject key identifier: E7:D6:D1:47:D8:4C:2D:A9:DA:53:03:61:F2:2E:04:7E:85:07:48:BD
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 0197B9D8801710885562199701E219505372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 04:01:02 +0000
Manifest this update: Sun 29 Jun 2025 04:01:02 +0000
Manifest next update: Mon 30 Jun 2025 04:01:02 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: dXoWBC1aDGaveEb8FOxAJFTxKEMUqj7y3AdPp5ymxbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:80:17:10:88:55:62:19:97:01:e2:19:50:53:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Jun 29 04:01:02 2025 GMT
Not After : Jun 30 04:01:02 2025 GMT
Subject: CN=e7d6d147d84c2da9da530361f22e047e850748bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:39:00:08:ca:e8:92:22:41:2c:2f:7b:e7:
93:03:a7:b5:21:93:5c:54:6b:d4:8b:b0:1d:09:c1:
d3:cb:63:2b:db:15:ea:4c:9c:f4:48:c7:47:e4:6f:
fd:15:41:d7:21:09:0e:82:8a:34:a3:a8:90:42:b3:
a8:cf:0b:34:a8:ce:f2:01:28:2a:74:cb:21:0b:9a:
b3:59:14:a3:2b:3f:f0:bc:8b:f3:21:22:96:d1:14:
04:f3:52:63:43:6d:91:b1:2f:bd:c5:c7:eb:91:fd:
2f:7e:de:91:53:45:5e:f0:a6:55:0c:cd:35:89:fe:
1d:61:c9:4c:10:e5:b5:fd:32:65:4a:f8:55:72:54:
30:45:14:95:e1:1e:da:ac:6b:ba:93:4b:07:6b:4b:
d5:c1:f8:25:1e:22:dc:be:d4:ae:47:09:40:e9:f6:
1b:04:cf:18:b5:e2:58:c9:a9:23:7f:b8:bc:74:78:
d6:5d:6b:7f:02:37:55:c1:07:84:cd:f5:ce:38:c7:
14:bd:ba:d9:44:c7:19:2a:c8:56:03:92:26:de:d4:
47:9a:5d:7d:44:89:91:1c:7e:00:45:e7:4d:65:04:
16:db:ea:d8:3a:02:5c:31:27:78:09:eb:8d:63:5b:
a0:db:c6:15:18:7a:b8:df:16:76:17:8e:c9:11:ff:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D6:D1:47:D8:4C:2D:A9:DA:53:03:61:F2:2E:04:7E:85:07:48:BD
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fe:26:62:28:f7:ab:ea:54:8e:4d:be:0b:71:b2:58:7f:25:
db:88:ab:ad:de:9e:ed:9a:ba:7c:6b:f7:1e:c2:55:36:11:e8:
6e:0d:26:2c:4c:26:8c:a5:a4:1f:14:3f:ec:4e:ec:db:df:89:
53:fa:f8:24:22:09:e7:de:bb:87:4f:68:4d:28:49:a6:c3:ef:
58:fb:95:68:f8:b5:c0:b9:15:4c:b7:87:6d:8a:d5:55:9e:b6:
80:37:09:a1:7b:19:2f:4a:82:fb:81:60:33:2b:33:e3:c0:71:
5d:5e:08:df:02:a9:ee:a3:94:0b:b2:96:ad:9d:f0:81:df:cf:
8a:be:94:69:b5:8f:8d:bd:ad:05:fd:df:16:d3:5e:4b:59:44:
bc:1a:d0:cb:ce:d9:c0:d0:d7:d5:c6:c4:c4:0d:7c:a3:e0:d1:
97:4e:fe:2b:e4:c2:86:bc:1c:92:d1:cf:19:a6:75:50:61:1d:
86:ab:bf:bb:0a:70:48:7b:e9:60:5f:b7:f0:e7:33:75:04:0a:
62:3d:83:ef:4f:4c:1a:ea:91:f1:bf:9d:7c:3c:bd:8e:81:6f:
78:cf:a4:49:b2:01:81:61:46:a8:c2:50:d0:5a:49:d0:e3:5b:
76:86:3c:5f:d4:16:a7:ab:fa:8d:85:20:ed:c0:c6:b0:d6:65:
75:71:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:46:45 2025 by rpki-client