Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: Dpseq0b8em8tdLQWIVuLNI96sKzS7Pf0askqPA2z6gI=
Subject key identifier: 5B:5A:98:C9:9F:F8:F1:65:DB:8A:BB:C8:49:26:B4:8E:E2:6E:40:78
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 0197B7EA788630A8CEABFC0935EE9E8B915A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0A03
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: 5vrClhccK2/D7B6QH3r82nBIhikOOGsSKnRvcRs5T2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:78:86:30:a8:ce:ab:fc:09:35:ee:9e:8b:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=5b5a98c99ff8f165db8abbc84926b48ee26e4078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:37:cf:7b:59:01:a3:48:af:9e:4a:85:f5:
f5:1c:ae:3a:e4:e6:55:c1:e0:cc:c6:0d:70:00:e7:
f6:4a:bb:96:86:ee:22:dc:d7:0a:64:f0:ce:00:b6:
c4:30:50:18:b2:49:a4:bf:22:63:92:48:d4:54:f0:
01:b8:00:c8:cd:86:57:dc:c3:ce:da:66:86:ec:88:
1d:ff:2b:a2:ba:a8:69:45:e8:c3:0c:a9:e3:a6:e2:
10:9c:31:82:3c:cf:79:c0:c9:8c:f6:ba:96:3c:8e:
41:fa:54:20:e7:25:96:c9:e9:51:63:94:07:99:52:
62:5b:c6:c9:2b:52:ae:0e:5c:ff:c7:77:56:9c:ce:
07:5e:f8:ee:15:75:2a:f9:04:e1:67:6e:6d:1f:67:
57:04:8b:95:4a:ff:ea:9e:fd:77:4f:29:9c:93:b4:
a1:d5:d4:37:c5:7e:1e:92:71:d9:f6:2c:c0:d9:40:
20:d4:32:30:d6:d6:69:ba:af:96:25:c3:65:2a:33:
b0:a5:84:cc:1b:c2:36:ed:a0:86:57:f7:5e:c3:24:
89:88:03:b7:ad:6c:b6:05:0d:2a:a5:be:34:b7:0e:
0c:a1:70:77:9c:16:cd:a8:89:ee:7b:b4:23:7c:c4:
ea:f2:b3:4a:72:34:22:d2:0d:d3:da:8e:f4:80:3d:
0c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5A:98:C9:9F:F8:F1:65:DB:8A:BB:C8:49:26:B4:8E:E2:6E:40:78
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4f:27:c9:c5:89:4b:3d:5b:64:e6:0e:71:5e:d1:15:dd:22:
ed:f9:b8:2d:06:d3:67:9f:42:b7:02:1a:22:0f:e9:47:23:7c:
10:1e:6b:04:82:3e:f0:70:1c:c4:b3:0a:5e:2c:d7:30:a8:fd:
cd:67:8e:30:33:a8:be:b8:03:fc:35:bf:a3:af:fe:43:2c:be:
f1:f3:c2:72:79:df:c5:49:7e:ef:7d:04:3f:11:e8:8f:96:a9:
7e:04:d2:83:b7:09:44:a9:38:e8:71:c1:1f:e0:bf:ec:7e:6a:
04:6c:7c:6d:a2:79:09:d9:5f:70:50:97:49:71:3d:af:ba:ce:
fe:18:7c:5b:ad:b4:4b:5e:ed:2b:e9:58:fb:cb:3c:3a:28:8c:
9d:7d:dd:fc:68:eb:50:f1:d8:17:64:8c:fd:53:84:aa:fe:62:
de:e1:c3:75:51:5a:f0:bf:8b:80:cc:26:ac:83:58:35:cf:ea:
30:2f:e6:8f:d4:b7:70:91:0d:79:98:8d:40:42:0b:7d:79:aa:
c6:bf:cf:f0:c7:95:ec:f3:95:d4:1c:bb:c1:8b:1d:b8:49:ab:
d3:e8:f1:d3:40:6e:82:7e:25:e7:5c:72:7d:58:7d:dc:1d:57:
e2:ba:50:4d:71:7c:cc:30:33:44:b7:98:be:f5:a2:fe:87:a8:
ec:fb:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:50 2025 by rpki-client