Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: lzSWges3FNKDjQ22WRPAoXtGvbkuobJcJiR429pM/mc=
Subject key identifier: 9E:B1:DC:4E:3C:EE:F3:28:DA:DF:D8:6A:99:44:48:22:A3:B4:98:AC
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 0197B6A14E2CFA8787DA604A226AE2E7F8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: aRGXy9v4uAxQNIAc6altyrevzEsJloo2IbfECfNzA8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4e:2c:fa:87:87:da:60:4a:22:6a:e2:e7:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=9eb1dc4e3ceef328dadfd86a99444822a3b498ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:5c:40:64:dc:2e:cf:de:da:22:ca:be:51:
72:e5:33:89:bc:d5:19:10:ef:3c:cd:d3:88:ce:35:
5b:11:40:b9:3b:a2:48:44:9b:59:11:9b:a3:96:96:
48:3b:58:cd:c8:f0:ba:cb:e6:45:a9:e3:25:96:24:
b1:1b:25:48:0b:12:62:ad:0d:84:64:66:56:e4:87:
81:c8:c0:df:5e:41:6a:c7:41:8c:06:4f:d8:8c:cc:
ce:63:ae:ad:f2:51:84:07:92:fb:57:9b:88:60:9d:
70:31:6d:54:d8:1c:f3:47:86:6e:81:dd:a6:91:71:
92:1b:2a:16:7f:82:65:7b:5c:8a:b7:1b:c5:5b:87:
62:26:66:86:f5:82:ce:39:a3:7c:ff:38:1d:99:43:
7b:0a:34:5f:b1:b9:2a:44:85:e1:69:4d:e2:32:58:
3a:58:f6:4f:6c:62:62:94:89:48:24:2a:5f:26:c8:
70:f6:cf:92:0d:4a:9a:b7:75:ae:63:32:8e:fe:43:
32:11:64:a2:9b:be:db:37:dd:6c:d9:da:d7:01:64:
ed:b0:9b:4a:4b:30:87:33:72:bb:e4:0a:59:55:c7:
e7:ef:dd:bb:58:d8:7b:ba:c7:d3:1f:10:a0:96:8a:
17:fa:68:d8:ae:f1:41:b5:88:92:37:92:0e:f5:d0:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:DC:4E:3C:EE:F3:28:DA:DF:D8:6A:99:44:48:22:A3:B4:98:AC
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:55:66:19:e1:93:6d:ac:37:33:59:81:97:b3:a7:ee:34:3f:
86:a9:2e:18:b0:c3:46:c7:2f:c6:96:5c:27:67:1d:91:5a:b6:
fc:5e:e7:03:af:54:f0:4c:ad:4b:73:60:53:f9:c9:58:f1:47:
da:c8:8d:24:14:5f:c4:e7:97:d4:2d:d8:0e:d3:c9:77:cf:0e:
14:9a:a1:48:b8:28:bf:97:c7:89:ee:5b:d8:75:25:db:80:b9:
a9:17:56:c6:25:61:54:0f:ef:41:5b:88:19:1a:d1:dc:70:ff:
ee:af:5c:73:7c:42:f2:b3:82:9c:36:2c:8e:c6:fe:48:45:fe:
91:84:ec:a6:29:fb:b5:3f:2a:d6:c3:f2:33:1a:c0:1f:a1:94:
20:18:4e:9b:be:f0:93:f5:96:4e:f7:f1:20:08:e3:9a:cf:e7:
78:3e:7b:de:ce:fe:d7:b4:89:46:ab:d8:a0:7c:eb:57:cc:21:
c8:92:07:56:e5:31:0c:7b:08:85:b4:64:0a:00:90:58:30:ae:
8b:dd:6b:84:e4:eb:c6:8d:09:9b:9d:8a:f6:49:53:eb:9e:0c:
f6:ae:39:da:df:26:76:52:a8:d4:04:99:3e:26:ef:53:7b:98:
2b:b5:86:a6:aa:cc:e9:17:65:74:b7:3a:c0:d4:b9:a2:b2:34:
2d:54:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:46 2025 by rpki-client