Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: FMoTQTAvMNxS498S3F2X2hUsrnGY4MonGPCiXs7Co+s=
Subject key identifier: 6D:D0:6D:7C:03:80:9D:CA:79:66:84:53:00:C7:A2:8A:D5:EA:34:99
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 0196A16466404F96A8A06325F25B7F6CA27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0C68
Signing time: Mon 05 May 2025 17:00:33 +0000
Manifest this update: Mon 05 May 2025 17:00:33 +0000
Manifest next update: Tue 06 May 2025 17:00:33 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: dalWqtA3Es8+q53+kawFUNykjmV9G8ndBClzLx+Elr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:66:40:4f:96:a8:a0:63:25:f2:5b:7f:6c:a2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: May 5 17:00:33 2025 GMT
Not After : May 6 17:00:33 2025 GMT
Subject: CN=6dd06d7c03809dca7966845300c7a28ad5ea3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:08:3e:74:14:f3:13:80:4d:52:21:5e:7f:
e0:bd:11:fa:6f:ff:97:c5:1d:9f:f2:81:2e:3f:ed:
3c:de:ad:1d:fc:e5:9d:0f:65:2a:c9:60:96:5c:8e:
42:6f:8f:e1:a3:67:dc:c3:73:a8:05:c2:0d:96:b5:
9b:18:ed:8d:68:e5:2c:6e:b1:c8:c1:69:ed:f3:3e:
d5:34:e4:c9:e0:f4:12:08:ac:8a:60:fd:d7:b7:8a:
87:c7:20:90:7e:1c:e8:83:6a:90:40:3c:a7:4f:d6:
e5:23:69:ff:26:c8:68:3c:c7:55:f7:d8:90:74:f1:
c5:4d:32:03:c7:8f:ae:1e:71:ce:94:7d:40:9e:df:
8e:0f:75:fb:84:ef:1d:95:7c:af:6b:c7:c7:a0:48:
ac:a1:d3:3f:87:aa:cd:c6:ea:e6:39:19:f3:02:27:
d7:8b:74:51:76:ff:f9:35:fa:4d:6f:ef:15:b8:50:
57:92:83:9c:39:d6:8a:a2:ab:f4:9f:db:77:4c:83:
b0:5f:1f:81:3f:9d:b8:ad:30:84:6c:39:4a:93:52:
6d:bd:3a:18:72:d2:4f:f2:34:76:4e:94:e6:5b:24:
bd:e4:6b:24:84:36:6e:0b:5c:8d:39:8e:e2:04:6b:
cd:4b:f2:c3:e3:34:21:4a:a7:c3:bf:de:94:c7:19:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D0:6D:7C:03:80:9D:CA:79:66:84:53:00:C7:A2:8A:D5:EA:34:99
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:95:6f:b2:42:e7:d0:f5:85:b8:ab:77:6e:f5:cd:47:98:87:
ec:7c:a0:05:91:28:64:d0:4f:20:9f:49:97:1f:32:94:8b:00:
f6:be:07:c6:cb:43:e8:a9:e4:18:1a:8f:bb:8b:aa:f6:2b:83:
39:3b:8a:c3:07:01:a7:91:2e:a6:6c:64:81:3a:f0:e1:f8:2a:
4d:d2:03:bd:7d:ad:53:69:94:cf:cd:43:9d:b9:90:0d:2f:e4:
98:66:2a:0c:cf:b0:34:1a:42:79:34:6d:11:9a:23:03:e6:50:
a0:59:50:4e:8c:9d:df:50:0a:a0:b4:a7:3a:ba:b0:1d:e4:ac:
18:4c:03:62:49:d4:e6:ff:3b:88:df:66:cf:d8:1a:5f:8a:fc:
96:fc:8a:50:da:24:04:d8:d3:30:65:ed:b1:18:bd:13:b7:2c:
54:61:b0:7d:e2:dc:d0:ec:50:23:d4:03:1e:e2:25:40:80:a0:
50:2f:3b:57:d5:64:0c:48:a1:65:c9:81:e6:6a:31:9a:d0:cf:
be:fc:3e:23:1a:05:07:00:05:e7:9d:1a:5c:0d:3f:c1:9c:cc:
9e:e9:08:77:86:a0:5d:2e:98:61:d1:1b:6c:fe:d7:c1:02:38:
e5:5a:9c:eb:c0:86:bd:a1:b8:07:0d:fa:5f:c3:a5:d7:b7:a4:
ab:c7:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:32:16 2025 by rpki-client