Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
File: zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft (raw, json)
Hash identifier: W45MZdF341LvLGLgaELwt7dWdSs0kO2NBaTd2fRpeA0=
Subject key identifier: 1A:D0:F3:F7:A7:5F:CB:2C:85:8A:3F:63:47:C3:1F:5C:CC:14:0F:87
Authority key identifier: CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
Certificate issuer: /CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Certificate serial: 0197B7B3757E9CD97A9C0F03C4DAAE81BB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
Manifest number: 67
Signing time: Sat 28 Jun 2025 18:01:20 +0000
Manifest this update: Sat 28 Jun 2025 18:01:20 +0000
Manifest next update: Sun 29 Jun 2025 18:01:20 +0000
Files and hashes: 1: zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl (hash: 035VeVQK4U3teYjJPfsOmXlcfQLjVpCfaymAwRDRa4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:75:7e:9c:d9:7a:9c:0f:03:c4:da:ae:81:bb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Validity
Not Before: Jun 28 18:01:20 2025 GMT
Not After : Jun 29 18:01:20 2025 GMT
Subject: CN=1ad0f3f7a75fcb2c858a3f6347c31f5ccc140f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:51:f6:a1:dc:ee:1a:e4:b8:e4:a8:ce:09:
0e:66:ed:f4:1c:66:56:5c:75:7d:34:9b:9b:6a:4a:
81:3e:66:6f:0c:c2:3f:cd:df:a1:43:01:00:a3:6e:
71:ba:29:1f:2f:4b:ff:49:66:67:16:9d:1b:0d:60:
b5:e9:cf:ad:df:49:8f:bb:ca:01:59:8e:49:3b:89:
69:a0:c3:8d:7f:0f:ed:b8:d2:7d:04:c0:e9:b6:36:
d0:78:e3:2f:03:1e:9e:26:2d:39:7e:6a:3a:77:ba:
c1:6d:85:43:03:5d:05:ac:9b:56:a1:1f:61:5a:8d:
d3:9b:f6:76:ee:a6:b6:c4:45:43:48:90:47:c6:7f:
dc:8a:79:e1:eb:64:82:6e:ba:fa:0e:92:c6:b2:94:
38:ed:f2:92:71:26:2f:41:8a:3e:70:64:c7:d8:13:
47:f2:8f:fc:f6:d8:ca:7d:34:4e:c9:aa:45:17:97:
71:dd:08:1c:54:e4:c9:2a:bc:91:d8:38:19:77:de:
bf:1b:24:63:58:d3:29:b8:3e:b8:01:f4:7c:1e:b2:
91:31:f0:e2:56:01:76:e3:ce:a1:b9:5b:b0:3e:a1:
09:91:24:e6:70:a7:01:a8:8a:83:34:f8:35:f7:e9:
f8:7e:6a:35:e6:48:a3:6b:c2:f5:3a:67:8f:3e:ec:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D0:F3:F7:A7:5F:CB:2C:85:8A:3F:63:47:C3:1F:5C:CC:14:0F:87
X509v3 Authority Key Identifier:
keyid:CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:42:1d:c2:9e:e6:5e:57:01:0c:5d:d0:68:8c:d4:53:47:0a:
59:24:d0:89:4b:52:17:6b:90:4b:da:42:6e:3d:44:ea:79:1c:
32:20:fb:ef:2b:a5:d1:43:c8:37:49:61:fe:59:b6:65:4d:c3:
52:be:40:40:29:67:41:19:83:30:d9:ad:ec:75:a4:9e:85:03:
11:f6:b8:1e:c6:60:27:e4:d1:44:57:15:1f:70:31:60:2d:4a:
76:bb:f7:71:95:82:71:5a:97:6b:77:42:02:3d:b1:21:b2:5e:
98:a8:5b:39:46:87:43:fb:c4:23:3e:78:a9:61:e6:f1:09:88:
6f:fb:f8:c5:e0:88:a2:50:85:8c:51:ab:ac:75:cb:83:0c:8d:
06:c3:5e:04:a7:01:05:cc:92:a3:19:93:dd:23:77:5b:2d:f4:
2d:83:31:eb:a5:f5:a3:19:fd:f9:46:2c:81:00:49:42:65:e3:
49:94:dd:c0:97:c0:dc:91:17:87:1c:58:59:6d:87:78:73:c6:
e8:26:15:1e:de:15:37:79:f5:28:6a:c7:d9:6b:ad:75:b1:d5:
72:dd:0e:12:6a:b4:4a:8b:02:40:41:51:a9:b6:b1:2f:38:e9:
f1:cd:ab:9e:93:29:41:71:bd:f0:b8:0d:89:f3:3a:72:cb:86:
e3:8e:54:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:19 2025 by rpki-client