
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: FzPsy7I2Uw0lk8MmufHRhbQ7+8WolM34B3Fn1F+JQBM=
Subject key identifier: 6D:0B:A2:21:21:61:16:A7:3E:E7:51:F8:DC:A0:A9:B4:5F:74:3A:AB
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 0197B7EA3556BB0355ECF7DA228379F22D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0C25
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: B+wR0TjYou+amB3hNpIsPI3GIQ4bSx2oFHAufFJYut4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:35:56:bb:03:55:ec:f7:da:22:83:79:f2:2d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=6d0ba221216116a73ee751f8dca0a9b45f743aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:4d:d0:88:0e:16:5c:d5:06:fc:46:72:6f:
b2:2f:02:0b:b6:32:cb:72:fa:7b:01:74:ff:22:dd:
03:40:d5:51:3a:f2:ac:2c:f6:cb:02:4a:bc:9c:c0:
82:4a:89:7a:0e:f8:44:1b:64:c9:05:45:90:f3:be:
81:93:27:17:8c:91:e9:e1:a5:e4:d9:a4:80:44:77:
3c:10:8b:b2:dd:ae:0b:42:89:c9:50:e7:8f:51:6c:
ba:ff:47:b7:a8:ca:53:76:fd:e2:2b:f6:a0:0b:d1:
bc:9c:37:9f:60:fb:b4:ec:85:65:51:1f:98:4c:98:
a8:0a:77:0b:e5:1c:d6:fc:3d:23:af:0b:1b:41:e8:
f5:a3:54:d8:6f:8a:ae:c9:80:10:90:26:d4:56:4c:
5a:87:fb:d1:8a:c5:af:1b:e8:39:6f:8c:e8:9b:ac:
cb:42:be:73:f9:ef:63:dc:c9:3c:ad:30:10:e2:85:
77:b1:e9:83:08:b0:86:95:ab:2a:35:d4:80:60:cb:
5c:44:03:ba:db:b5:4f:be:a1:9e:1f:ff:0c:83:b8:
22:a4:66:2c:10:78:0f:d8:c4:fc:b7:29:0c:85:a9:
06:fe:49:c3:32:57:cf:b5:dc:1b:3d:1f:d4:6b:4d:
b2:75:1e:d0:e7:b0:6d:87:91:4a:b7:95:f4:3b:2d:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0B:A2:21:21:61:16:A7:3E:E7:51:F8:DC:A0:A9:B4:5F:74:3A:AB
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dc:c9:01:16:1b:10:60:ae:b5:c2:e9:32:16:3a:8b:a6:8b:
02:64:81:85:4d:d8:a7:68:94:73:e7:b7:c5:31:7b:5f:81:2d:
96:c7:42:7d:1e:77:29:0a:ff:98:15:15:1f:4d:c3:84:1e:2c:
26:50:92:56:01:7d:99:23:3a:0a:f2:1a:4c:60:b8:22:4c:9d:
61:e3:96:e9:88:0c:ee:a1:72:cc:a3:3a:d1:21:9e:ac:b1:56:
08:60:c6:cb:2a:1a:4d:8a:90:86:80:e5:d8:5f:ce:cd:07:f2:
d2:1e:ef:45:b9:e7:38:5b:bd:12:be:a4:5b:81:ae:97:e3:e4:
75:65:43:60:ac:77:9a:0a:76:86:54:00:e6:e0:43:08:b1:f1:
c9:31:69:d9:b1:62:da:7c:c7:f5:29:50:6b:51:c2:dc:a3:cf:
6b:9b:b9:21:fe:8e:5f:d3:c1:81:df:fa:cb:ab:14:fa:06:2a:
b2:1f:f4:f5:a3:a8:3f:4e:87:2e:44:f5:c0:07:9b:b3:f7:a0:
68:7b:f7:56:25:3d:65:b7:9a:96:d6:5f:df:e3:cb:8a:30:4c:
1b:ce:20:8d:3d:ea:ac:72:c1:91:35:d8:44:38:2e:01:65:93:
86:fc:13:1f:27:f7:f5:32:7c:6a:d0:88:60:0f:82:4e:9a:25:
94:68:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:27 2025 by rpki-client