Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: ES0nKThvGohN+0KxahjAHjrSaRuXeUIxiRs3MlAqowI=
Subject key identifier: F2:46:22:09:EF:2C:61:92:C3:EF:57:B5:E3:38:76:F7:56:4F:6C:06
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 0197B88F45E937DDB8A3B93BE12AD7AFA48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0BB1
Signing time: Sat 28 Jun 2025 22:01:26 +0000
Manifest this update: Sat 28 Jun 2025 22:01:26 +0000
Manifest next update: Sun 29 Jun 2025 22:01:26 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: XXl8MaFAJAO+51F4zAut9ql2lwCLh2R9TYTm7OCyvEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:45:e9:37:dd:b8:a3:b9:3b:e1:2a:d7:af:a4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Jun 28 22:01:26 2025 GMT
Not After : Jun 29 22:01:26 2025 GMT
Subject: CN=f2462209ef2c6192c3ef57b5e33876f7564f6c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:ee:01:af:28:2f:93:dc:40:87:72:65:45:
c2:df:9a:28:c6:16:d0:7d:cc:65:cf:b7:ae:df:89:
3d:ac:45:ab:da:6f:60:5e:cd:8a:51:c3:b8:9c:c8:
4f:03:56:da:69:7e:d3:44:d1:4c:17:2d:12:66:c9:
66:67:b9:40:5c:0c:a6:87:96:cf:da:f2:f9:5f:6d:
6d:e2:8d:62:77:7b:81:8c:3c:c2:6e:3f:37:ea:61:
d3:67:0d:a5:44:c7:27:ac:2e:e5:95:69:bc:d5:22:
fd:f2:c4:53:fd:83:85:54:30:eb:07:9e:34:eb:b8:
0a:d7:e2:10:96:44:8f:8a:f5:dd:ce:e8:c0:5f:d8:
eb:7a:63:d2:9a:7c:d2:64:ef:5b:94:b0:ad:87:93:
45:9e:8b:0a:31:61:72:76:8d:5b:1b:1e:e3:cf:29:
60:d8:8d:95:44:06:1b:ab:a7:6d:dc:82:4e:c2:3d:
14:3a:1b:77:1a:b2:39:d9:de:5c:0e:44:b3:a2:ad:
a7:e3:46:8d:d3:09:26:44:47:bf:d7:ba:d2:19:88:
3e:7b:21:fa:5b:22:57:04:01:ad:70:ca:4c:f4:b2:
a9:78:e0:22:d8:db:df:24:f6:6c:15:52:e6:9d:4b:
e5:4b:53:b7:89:a9:65:1d:6c:14:ca:11:50:50:e1:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:22:09:EF:2C:61:92:C3:EF:57:B5:E3:38:76:F7:56:4F:6C:06
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:08:e4:dc:dc:cf:da:37:90:06:9a:b6:2f:ff:16:d1:9f:
a6:5b:48:21:46:4a:7d:d7:cc:17:68:0f:00:b1:ae:f1:e2:6b:
29:e2:9d:25:6b:7c:c4:94:9f:e8:fd:08:d0:bd:38:fd:2d:c8:
14:94:24:3c:d0:82:52:9d:39:2f:92:60:9a:0e:00:75:f9:ee:
b9:d5:6f:d0:2e:ff:5a:7c:a7:b4:1c:b7:8e:7d:72:46:76:bf:
f4:7b:57:e6:7c:cf:95:71:80:e7:25:66:d6:be:9b:43:6d:61:
f8:69:d9:87:36:54:c4:b9:ed:98:fa:1d:34:60:85:60:a4:cf:
c0:a2:02:db:d0:89:4b:db:8b:4d:26:0c:75:35:00:4b:84:6b:
48:1d:eb:70:e1:7e:5a:8b:f4:f5:33:ad:95:1d:f6:95:b1:ff:
cd:b3:82:6f:c0:a9:00:09:e4:6c:9f:54:48:25:6d:80:aa:fa:
61:82:0c:f7:de:c8:49:41:3d:67:59:fa:64:a5:2d:87:85:5d:
7b:a9:48:8b:25:05:c8:14:d8:54:a5:fb:7d:5b:c3:00:57:9b:
ac:68:80:df:96:04:bf:77:00:39:a5:e2:c3:73:33:70:ac:46:
61:0a:11:f9:80:d3:d9:9a:b5:44:cd:6a:89:53:26:76:e1:cd:
8a:e1:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:11:51 2025 by rpki-client