Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: 8TvkBr5QvErDyR3IlG8dFqiCZ1OBbbZ8oRT5asVRnVE=
Subject key identifier: 68:6B:A4:96:EE:66:48:42:1C:24:CE:4E:81:BE:9A:E0:99:21:7D:D6
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 0196BEC9F538D8B58B09622A00D904214E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0BA4
Signing time: Sun 11 May 2025 10:00:28 +0000
Manifest this update: Sun 11 May 2025 10:00:28 +0000
Manifest next update: Mon 12 May 2025 10:00:28 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: YrRtqsfrDBbJBpFFdBtkQE2zvS0DxFad4xFeqUD0aGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:f5:38:d8:b5:8b:09:62:2a:00:d9:04:21:4e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: May 11 10:00:28 2025 GMT
Not After : May 12 10:00:28 2025 GMT
Subject: CN=686ba496ee6648421c24ce4e81be9ae099217dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7e:96:13:1f:f1:56:5d:e5:cd:ce:50:ee:30:
77:a7:56:f1:09:83:b5:7f:70:a6:69:85:d5:54:51:
78:19:78:97:2c:aa:1f:77:66:99:af:34:7d:f1:ef:
25:35:13:0b:32:e2:21:33:4c:8c:c8:ed:0f:35:ab:
d6:73:32:99:1a:4f:d9:d2:f6:85:5d:bb:1e:74:d4:
ed:a8:83:03:71:8c:96:ce:6c:fa:10:e2:e4:3b:47:
a6:af:d8:0c:8a:18:cd:00:96:28:ae:4d:97:13:16:
30:86:30:8c:8a:5f:3a:0e:fb:7d:63:16:67:95:97:
bc:56:77:19:17:40:78:12:42:61:8a:93:93:22:6d:
9e:c8:5f:c1:02:03:d2:11:55:05:41:79:2d:c0:c4:
63:87:55:2b:79:dc:74:13:a5:37:05:a8:f4:f8:33:
87:13:8a:34:c1:84:44:9d:0a:41:1d:05:f8:1a:68:
99:15:df:6c:6b:cf:0f:07:4e:84:a4:38:b7:66:5a:
cc:3c:13:f3:58:bf:ce:3b:c8:78:70:09:0a:f1:81:
ef:68:ca:eb:e0:12:7b:40:64:e5:88:4c:82:52:f3:
a2:43:d9:eb:4a:31:6e:34:a5:66:ce:c2:e7:d9:d3:
c4:a8:71:d5:60:a2:28:6d:f6:5d:55:9b:44:a1:85:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:A4:96:EE:66:48:42:1C:24:CE:4E:81:BE:9A:E0:99:21:7D:D6
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:92:6b:56:5f:49:fd:e0:f8:00:36:df:c8:7b:76:96:13:90:
cd:cc:42:59:df:1d:a9:28:1e:ad:05:cb:b9:a8:ba:2a:1d:a5:
b9:50:fe:16:b6:31:42:54:43:7f:95:ab:bd:7c:33:63:60:cf:
e5:c5:35:9d:b9:81:5c:7e:17:3c:21:a3:f9:e8:08:ea:a6:57:
5b:00:cd:2e:87:23:e0:88:1f:95:e5:1a:5b:02:25:4d:ce:1e:
f5:44:a1:bc:89:ea:96:80:cc:c1:0a:6f:2f:7e:e0:ca:9a:7d:
04:f1:04:a2:06:31:2e:c2:10:a9:80:67:41:2a:13:d6:24:83:
68:f6:a2:a8:63:4b:09:d0:e6:01:4a:96:be:f8:f6:af:ab:91:
1b:b7:d3:ff:1c:89:31:f3:e0:d4:ab:37:a4:40:e6:5e:3e:04:
1a:5f:c7:ac:4f:12:29:1d:38:45:59:49:00:c9:1f:35:9b:5a:
57:e0:e6:d8:81:f9:ba:5b:5b:52:5b:63:0f:30:56:a3:3f:2a:
6f:eb:db:91:61:c9:88:f3:df:ba:d2:ca:b4:9d:56:69:51:03:
92:fa:8d:7f:ab:7a:76:35:ea:30:37:53:25:98:16:46:e0:e0:
60:0e:cd:65:60:d7:1c:ad:11:9c:33:92:9e:69:be:4b:89:fe:
fe:20:60:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:34:13 2025 by rpki-client