Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: bjMXfQ2AuyJHm12MGypqJMy74XIL/O+q23Wuo8+qm8g=
Subject key identifier: 15:E5:E3:4B:E3:CA:17:96:CA:CE:D0:C4:1F:63:1B:E4:DF:29:90:34
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 0197B74588D1DAFB8D7BF49D5FB404DA0920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 108A
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: uc8l13N+2bGLsnBY47ApWB3rc+atdJLhRB6bK0lodGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:88:d1:da:fb:8d:7b:f4:9d:5f:b4:04:da:09:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=15e5e34be3ca1796caced0c41f631be4df299034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:7f:f8:51:dd:f4:93:d4:77:72:be:d2:bd:
50:40:07:86:4c:3a:0e:e0:2a:28:ac:b5:b1:b4:94:
1a:70:2c:bf:3d:46:ca:ae:47:2e:a3:5c:63:69:00:
2f:62:98:7f:6b:71:60:b3:62:30:f7:6c:39:38:99:
15:ef:6b:25:c8:c0:83:7b:21:71:fc:a4:e0:bc:77:
d9:aa:1d:c1:91:27:1d:5e:d8:99:77:c6:b9:cb:e1:
f8:8e:36:e8:50:25:8b:54:c5:ae:85:b3:a3:ed:d3:
35:ae:46:fe:e6:d7:b8:f9:f2:56:5f:d8:bf:75:81:
0f:5b:a8:ae:27:13:34:68:45:81:d6:91:7a:f6:22:
22:2a:82:2d:53:d4:8d:26:14:e6:7f:f5:cc:d4:93:
be:24:46:44:b1:88:ca:35:92:b8:34:35:22:62:a3:
81:6f:7c:2f:57:87:06:4e:a8:c3:91:9b:f7:22:88:
b0:b6:55:96:b7:f4:90:2d:b4:fb:1b:4a:07:e3:51:
15:7f:42:e7:7d:46:97:47:19:8e:b8:de:b9:ba:03:
19:19:6a:2a:c4:ff:51:d8:4e:a4:84:29:5d:77:4c:
07:96:92:bd:98:8e:3a:57:b1:30:9f:2a:c8:66:dc:
e6:29:0d:5f:72:1f:f8:bf:c3:cf:82:eb:e7:58:6a:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:E3:4B:E3:CA:17:96:CA:CE:D0:C4:1F:63:1B:E4:DF:29:90:34
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:45:19:16:ef:45:b3:f6:54:d2:77:d8:57:d4:13:5b:8f:a8:
e6:73:ef:58:c5:24:a7:51:a5:9a:73:7c:c3:b6:e2:c4:27:5c:
42:94:c5:43:78:32:3b:da:bb:46:d9:0d:8f:e4:36:15:e9:a1:
ea:91:c8:02:ea:8b:4e:67:f6:fe:a3:1c:2b:ac:67:22:ca:de:
f3:71:5d:4c:b2:69:cb:42:e0:28:16:dc:b9:15:62:e3:99:9b:
d8:1e:39:52:0f:c3:35:93:c6:b4:d1:c7:5e:89:b5:68:ca:ef:
56:c7:9a:29:4f:b7:56:42:7a:d8:df:f5:a3:15:10:de:d1:f2:
44:3b:44:6d:da:1b:2a:70:cb:4f:56:e3:ca:af:f1:05:c7:f4:
39:74:ce:d8:27:18:11:d7:8c:3b:85:66:d7:4b:3c:cd:16:bc:
19:19:eb:5d:17:f8:b6:6a:ce:3e:a6:77:d4:56:c2:af:6d:ce:
6b:36:20:68:66:53:54:00:c7:75:72:9e:fe:3a:fc:61:08:06:
a3:2d:ca:03:bc:06:5d:17:56:00:b8:30:4c:e8:cd:5e:1c:68:
3a:21:72:b0:c2:da:f7:3e:cc:ed:a7:df:ac:33:a1:86:e0:16:
e9:a8:22:28:ef:49:ce:b7:ee:7c:da:dc:93:a4:2f:6a:39:d1:
52:43:9b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:39 2025 by rpki-client