Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: h3LJj1uGefeophhOvQal4GOHsYG5BMc6V9ISH6RPvtQ=
Subject key identifier: 30:41:10:42:7C:2B:2E:EE:D4:52:85:26:40:4F:2C:4A:2D:67:29:8B
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 0197B6A1B1AC7587217A92C7C5A60C1C99F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 0D4E
Signing time: Sat 28 Jun 2025 13:02:19 +0000
Manifest this update: Sat 28 Jun 2025 13:02:19 +0000
Manifest next update: Sun 29 Jun 2025 13:02:19 +0000
Files and hashes: 1: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: 8WVOfX6KccXxaNX61qrGG9aSnN6JQupL8jCiFexk8dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b1:ac:75:87:21:7a:92:c7:c5:a6:0c:1c:99:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Jun 28 13:02:19 2025 GMT
Not After : Jun 29 13:02:19 2025 GMT
Subject: CN=304110427c2b2eeed4528526404f2c4a2d67298b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:f7:05:6d:f2:15:1d:92:4e:41:de:31:c0:
ab:1b:80:cd:5b:65:65:43:59:ab:ed:f0:3f:bd:4c:
a1:8b:2f:f3:16:7e:0f:62:e4:a8:10:4d:24:e5:ca:
8d:4e:55:63:dd:74:22:c1:bc:7f:16:ab:1f:4c:a5:
7a:07:63:dd:23:11:aa:47:b0:2f:f3:db:2d:42:ae:
d9:50:ee:9f:7f:3d:27:00:e8:25:44:37:5d:a8:6b:
78:9b:a6:20:5f:25:dd:21:26:bb:9f:3a:6c:e9:16:
79:74:7a:ab:c0:6f:4e:dc:e4:04:97:8a:eb:f3:05:
cd:1d:a2:f3:4d:62:ad:45:7d:98:43:60:2e:33:cb:
54:d8:5c:61:35:5f:e6:1d:e7:4c:f7:6b:4d:af:7f:
40:49:f7:ee:c4:37:45:85:54:36:64:ac:9e:f2:f3:
4e:11:eb:47:6f:84:6a:44:46:c8:68:44:e4:6f:fe:
13:6b:ea:94:b8:d5:b8:32:ec:2d:2d:85:fa:8d:73:
a6:e2:2f:a0:d8:70:23:ea:56:6d:0e:55:e6:fd:da:
4a:ed:98:fc:ca:64:8f:f0:04:11:2c:cf:18:08:cf:
b7:13:89:e2:61:ee:d2:f0:14:58:66:d9:32:12:95:
10:7f:b7:33:ce:05:98:e5:96:58:db:24:ab:9c:2b:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:41:10:42:7C:2B:2E:EE:D4:52:85:26:40:4F:2C:4A:2D:67:29:8B
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:7f:79:4b:a6:f9:f9:26:0f:9e:f1:3e:ed:9e:e0:5e:5b:60:
bc:66:72:02:0e:4e:17:1c:02:be:50:a9:c6:1b:7b:59:e1:97:
4e:fa:52:59:7e:75:91:4d:8e:48:9b:26:0f:a9:36:2e:bf:bf:
f0:a8:8e:54:79:3c:8c:ca:41:04:b0:d1:a9:a7:13:b5:0c:65:
42:a3:59:c4:fa:e0:e2:62:97:c6:d5:d8:2a:28:4d:fe:43:44:
f2:65:51:4f:ee:68:c0:31:d1:d7:8a:e5:70:8d:98:24:7c:11:
e8:03:2e:9d:9d:f2:27:3f:66:fa:bc:2c:f0:4a:fc:fd:a1:35:
81:33:34:eb:4e:ed:a3:00:38:28:5c:28:de:b9:a7:5c:95:1c:
c3:0e:7e:6c:a7:20:cd:31:73:76:9d:02:14:20:ef:55:ca:1a:
88:65:89:97:66:2b:e0:2c:36:7f:3d:fd:62:4b:cd:1c:21:1b:
14:1a:60:52:88:1b:f0:ef:a8:3c:80:55:0e:60:10:fe:7f:61:
15:dc:28:9c:5b:f0:23:51:d2:0a:f7:c5:c6:98:6c:cd:f7:5c:
29:ac:76:f3:fd:e5:fc:44:75:f2:0d:24:62:99:f4:ac:72:f4:
97:0b:40:51:ee:e3:9e:34:42:da:65:8e:64:a6:a1:db:8f:e7:
eb:a3:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:52 2025 by rpki-client