
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: rfxZ1glxcuNUy44h9evWZV3v+Y+gwMcjgbRgOHSicT0=
Subject key identifier: 45:9D:8B:AD:3A:99:11:E1:CE:64:A0:C0:11:C5:D0:4E:83:FC:DE:D6
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 0197C68138B27025929F02D867365B568674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 1576
Signing time: Tue 01 Jul 2025 15:00:46 +0000
Manifest this update: Tue 01 Jul 2025 15:00:46 +0000
Manifest next update: Wed 02 Jul 2025 15:00:46 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: 7HPHjj+UItWaPJeipstAuutqpl37YDHHOhELTBjijBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:38:b2:70:25:92:9f:02:d8:67:36:5b:56:86:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Jul 1 15:00:46 2025 GMT
Not After : Jul 2 15:00:46 2025 GMT
Subject: CN=459d8bad3a9911e1ce64a0c011c5d04e83fcded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:74:14:c1:97:86:55:b9:23:af:70:63:16:
cc:7a:78:eb:db:31:64:33:b3:b1:e3:2a:9c:e6:b7:
09:7d:57:91:9d:8a:83:02:0d:31:60:ca:25:63:19:
2c:71:e3:32:b3:69:31:b3:ea:aa:89:72:18:58:d0:
54:e7:6d:f5:24:85:f8:ce:cc:34:e8:0c:43:13:c2:
28:5c:b4:0c:10:37:91:39:e6:de:ca:56:63:61:39:
9f:c9:a8:3f:3c:ff:3b:70:13:25:d3:0a:14:84:b2:
60:08:a6:4a:34:f3:f1:0e:6c:eb:7d:51:bd:c5:2e:
c9:32:1f:b9:f8:31:76:78:40:8c:64:1e:2c:e1:57:
d4:0e:06:b0:c0:f0:b2:04:4e:60:33:5c:eb:70:40:
fd:ce:79:76:2b:c4:3e:e6:30:20:6f:d7:7f:36:8d:
94:78:69:86:ce:d3:2a:6e:9e:af:2b:0d:a4:db:6b:
fe:1d:44:62:5f:8e:96:9a:aa:e6:0c:fa:a5:f1:6f:
33:cb:b6:f5:0d:00:a2:80:08:c2:ef:9d:72:f9:59:
6e:e2:74:d6:c4:82:22:8b:44:db:9b:6c:ff:cb:c0:
16:4a:3c:6c:c7:00:09:6a:45:90:81:c7:d6:89:f9:
3d:e8:c6:a5:c9:11:43:fb:ee:9b:e5:a3:a9:74:c1:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9D:8B:AD:3A:99:11:E1:CE:64:A0:C0:11:C5:D0:4E:83:FC:DE:D6
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:b4:31:c7:a0:a1:9c:2d:c3:5e:76:ae:7d:c8:ea:64:d0:
cf:c0:c1:ab:6c:0a:a0:06:0d:5e:6d:5e:55:b0:44:6a:a1:c0:
f6:69:a1:d5:c5:b7:b6:66:1d:6c:93:2d:f8:df:7f:78:95:88:
7c:d0:35:fb:74:ef:9a:27:93:7f:f3:16:24:d1:9d:1a:4f:bc:
22:ca:3f:19:f7:b8:6b:fb:7d:d4:9c:19:a0:51:ef:97:49:a9:
fc:aa:85:4d:0f:85:0b:b7:f2:c8:37:6c:69:d8:59:76:4e:ba:
2b:a1:55:97:8a:0b:4b:4e:51:e3:32:d6:23:e7:ed:26:0f:5e:
cf:d8:22:0d:83:11:3b:36:b6:65:49:ad:2d:89:f1:f9:60:7b:
62:2f:72:9a:99:c6:20:1d:aa:c8:5c:48:d0:9c:92:02:e5:79:
c7:9d:51:09:1c:6c:d8:ef:0e:5e:02:58:24:5a:65:4d:b5:da:
df:12:34:bd:1d:76:8b:e1:c2:10:74:ff:fe:3e:94:1b:68:1d:
aa:d4:08:a5:34:6e:a6:54:52:60:fe:d6:76:55:d7:4c:16:9f:
d4:16:68:28:03:f2:11:f2:bc:0b:0b:67:ba:4b:85:eb:ea:e2:
1a:de:67:14:0c:af:d0:1f:b8:dd:c5:2e:66:db:2a:57:db:a5:
99:ec:6e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:36:19 2025 by rpki-client