
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: by0Q8J17B07QMNTpvtKSXGKRvtfkc7R91JV9Pxh51zA=
Subject key identifier: B1:1B:26:B6:46:E8:CA:33:DE:19:DC:EF:2F:BF:58:25:A7:CD:88:F5
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 0197CEA966D07DB86AD6972129494733179F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 0E95
Signing time: Thu 03 Jul 2025 05:01:37 +0000
Manifest this update: Thu 03 Jul 2025 05:01:37 +0000
Manifest next update: Fri 04 Jul 2025 05:01:37 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: cM10Z7SiKcQnmNHs2+XPyNR2o/JTEPdGUwcHuy8TRig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:66:d0:7d:b8:6a:d6:97:21:29:49:47:33:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Jul 3 05:01:37 2025 GMT
Not After : Jul 4 05:01:37 2025 GMT
Subject: CN=b11b26b646e8ca33de19dcef2fbf5825a7cd88f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:83:7d:a9:3b:b6:77:2e:ae:3b:c6:0d:f8:
d1:7f:1d:42:6d:b1:a1:7e:90:ef:01:a2:bb:68:0d:
a1:bb:70:7c:99:34:1b:33:fe:5b:e1:93:bf:55:36:
3e:5e:15:d8:10:9b:21:66:eb:cd:c0:e8:e4:8c:99:
b8:1f:b0:88:33:71:05:b0:20:9c:a4:58:10:13:b8:
d1:c9:e7:3d:1b:a0:e1:52:33:f9:2a:d1:49:d0:87:
0e:31:38:00:00:20:86:74:84:37:c6:cb:34:c6:84:
3c:d9:87:9c:41:26:8f:da:ba:1a:e9:86:91:6f:91:
42:52:ff:c1:c9:e2:59:33:65:80:77:4c:00:af:08:
f9:71:0b:fd:84:2a:df:80:59:18:2f:f1:b8:d1:4e:
77:c4:62:11:8f:ec:b3:95:c5:31:79:00:39:e5:9e:
d1:52:b2:da:3a:ad:c5:1f:24:69:91:ec:1b:96:3a:
85:e1:2d:57:06:5c:74:dd:03:11:cd:83:ca:ae:18:
9c:09:17:28:e8:80:3f:09:0a:52:25:4c:cf:5c:72:
4d:e1:5c:7c:65:75:96:fc:f5:38:e1:55:7c:46:9b:
b0:8a:fc:a3:79:00:39:0e:30:cb:32:b6:1c:72:95:
14:f9:11:fa:46:ca:2f:1f:f5:7f:b8:2b:e0:b2:c4:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1B:26:B6:46:E8:CA:33:DE:19:DC:EF:2F:BF:58:25:A7:CD:88:F5
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f0:90:49:07:8c:e4:d2:6e:2d:46:65:40:05:79:30:fd:ee:
05:e4:11:c8:90:d9:d1:71:2d:93:b5:c5:f4:34:86:18:82:74:
f2:0a:da:05:f0:f1:5c:e0:55:48:b2:5d:47:3a:87:5c:11:fd:
99:cf:30:fc:3c:46:27:40:42:cc:dd:0f:13:0c:90:f1:35:74:
07:a9:44:5b:e7:08:24:61:4d:e0:2a:60:2e:33:15:be:59:94:
bb:94:96:39:8f:fd:dd:41:95:85:54:17:fd:99:8c:ba:1f:7f:
1e:69:b5:6c:fe:fa:d9:ae:be:ad:f9:58:0b:42:7f:18:4b:fb:
ae:ab:85:a8:73:bc:37:5d:da:3e:2d:15:04:1c:85:85:3c:90:
be:53:31:df:69:31:a3:97:38:24:0c:26:3c:d6:d8:aa:eb:69:
77:9b:65:7f:0e:aa:51:5a:0f:95:ef:aa:c0:69:69:84:2d:9d:
d8:24:57:39:a8:3d:6f:49:a5:d9:d9:c0:fc:0e:29:80:48:dc:
a3:7c:19:c1:29:92:4c:e8:37:37:dd:de:74:5b:92:ae:3e:e5:
ad:61:f8:de:be:1d:64:36:ed:80:a7:f4:0f:be:b6:9a:0f:3c:
5f:4c:41:d0:55:88:de:f1:0a:e8:db:97:08:76:ab:b1:12:7f:
c8:cd:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:08:16 2025 by rpki-client