Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: yvpIcvaexDq7rY1ZjHuXsjvHY1aEH5Ov1oTewNTYgNw=
Subject key identifier: 73:37:34:27:B4:D3:62:1F:C8:B6:51:7A:4E:26:C5:61:56:4A:76:A5
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 0197C424F39F3D154EB3C6D5D2D5F5123378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 04:00:45 +0000
Manifest this update: Tue 01 Jul 2025 04:00:45 +0000
Manifest next update: Wed 02 Jul 2025 04:00:45 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: U7xcFzmx02RWlac4psw32R+VaZn61RO0yctl5GFaMUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:24:f3:9f:3d:15:4e:b3:c6:d5:d2:d5:f5:12:33:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Jul 1 04:00:45 2025 GMT
Not After : Jul 2 04:00:45 2025 GMT
Subject: CN=73373427b4d3621fc8b6517a4e26c561564a76a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:25:c3:29:ea:73:35:5d:02:0e:d0:04:c5:
46:e0:98:c5:c7:16:0a:60:4f:2b:0d:39:69:8a:dd:
6d:ea:74:ea:b7:db:2c:6c:7a:4c:db:d0:cb:e7:fd:
fb:b5:e6:56:a0:b4:1e:43:ce:ed:7a:cd:90:85:b8:
98:1a:1b:bc:49:e3:13:cc:a1:e5:3c:ab:ba:e2:70:
c3:21:9a:9e:74:e2:42:74:cd:96:91:9f:9c:67:71:
7f:c9:fb:ce:64:3d:27:49:ce:02:36:a1:9a:2e:3a:
5d:6e:69:95:7e:42:bc:55:d7:2d:7c:8d:02:34:cb:
72:97:4b:84:50:f5:86:a4:00:fb:07:78:a8:10:91:
69:f5:94:73:54:8e:e1:60:13:f8:f8:e6:bf:97:06:
ad:0e:2e:e3:b2:78:0d:22:87:dd:21:30:b0:2d:9c:
d8:62:45:79:e2:ee:6f:eb:f6:d0:b6:7d:92:08:c3:
77:8c:79:44:00:e1:74:06:97:ce:0c:04:40:6c:bc:
f1:6e:ff:d3:8e:af:43:d5:ed:ea:8b:a7:cf:8e:84:
6c:f8:b6:2f:7d:92:91:72:8a:c7:e2:9c:08:17:05:
ce:53:bc:b0:ea:80:06:5a:c7:1e:77:2b:f7:f4:d8:
18:2a:31:94:5f:97:f3:fa:a0:f4:0e:8f:fc:fd:58:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:34:27:B4:D3:62:1F:C8:B6:51:7A:4E:26:C5:61:56:4A:76:A5
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:26:f1:45:1e:ce:17:ba:bd:42:5e:a8:0d:6f:28:73:c1:97:
1f:68:c1:07:dc:ee:b7:47:ea:95:16:e1:47:41:ef:e1:1d:2a:
69:c3:5f:81:f6:c2:10:f9:b9:8d:d9:7e:b0:ae:0e:26:2f:24:
7c:39:f9:22:5b:ac:9d:27:a9:3f:54:90:8d:53:81:c5:4c:97:
a4:62:02:db:77:eb:c6:dd:d3:db:c4:cf:dd:85:0e:9e:70:ae:
10:08:28:b5:83:02:4a:bc:f8:75:6c:97:17:2e:09:c8:8e:96:
37:4f:61:fb:e1:b7:d6:fe:67:5f:e7:96:80:46:2d:4b:ac:39:
e0:44:a5:10:3a:37:33:d0:d4:a2:a1:8d:02:1f:c2:04:b3:a3:
81:bb:5b:83:b5:b2:5d:ef:39:f1:e8:ad:41:a8:50:63:47:8a:
f1:b7:6e:21:02:94:31:de:b0:58:45:9e:23:cd:19:df:67:f5:
a7:c5:33:f0:0d:b4:aa:06:25:7f:88:74:45:5e:a4:84:7c:14:
e1:74:1e:9e:9f:50:39:7d:79:d1:9e:38:9a:25:33:c9:95:b9:
a1:fe:6d:ff:69:af:b4:8d:e3:0b:59:ee:0b:fd:06:1d:8d:92:
61:1d:10:4c:51:2b:f1:e0:56:6a:17:68:7e:70:cc:f1:aa:d6:
e2:e0:d8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:20:55 2025 by rpki-client