Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: bLe9XX72WOz0G6yZsKT/lIFJ3mZg5YCX/Sl9no6hvZs=
Subject key identifier: 52:3F:98:58:08:5F:8C:6E:F8:B4:5E:28:B5:9B:7E:63:0F:CD:E0:81
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 0197D1A9F86B53E6AE8DFE0D3CCB3946FCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0CF7
Signing time: Thu 03 Jul 2025 19:01:06 +0000
Manifest this update: Thu 03 Jul 2025 19:01:06 +0000
Manifest next update: Fri 04 Jul 2025 19:01:06 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: /vWFJUhwgm12u/bzr+oP0L8wmPEgpTXz9fFwnRut7rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:a9:f8:6b:53:e6:ae:8d:fe:0d:3c:cb:39:46:fc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Jul 3 19:01:06 2025 GMT
Not After : Jul 4 19:01:06 2025 GMT
Subject: CN=523f9858085f8c6ef8b45e28b59b7e630fcde081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:f6:08:fc:4f:a3:50:5c:25:af:0c:fe:8b:
70:53:c8:c7:5f:6d:37:94:43:16:ec:2c:c6:5d:6c:
83:22:4a:e8:61:8d:1a:f2:7b:db:ad:21:e8:1e:7b:
97:d1:55:85:9e:0b:3b:4f:7e:6b:ff:8e:5e:ce:19:
46:27:15:9f:e7:12:3c:a3:56:63:ea:77:35:0a:41:
79:89:2a:f3:40:60:6d:15:af:5a:53:f4:ce:41:ff:
9d:14:f2:42:99:4b:cc:44:68:e8:9d:cb:34:8b:23:
c7:9d:05:d6:3a:47:94:17:11:44:d2:ad:35:bb:a4:
a0:8b:59:f8:12:c1:9c:8f:d3:a8:af:c8:7c:cf:4c:
2f:c3:ca:b6:27:6a:53:91:39:51:d4:bd:30:1a:02:
67:39:0c:03:5b:46:f3:90:32:47:e4:51:44:e1:ee:
51:be:67:49:eb:25:b5:7d:7d:83:e0:66:50:d5:1c:
00:5b:67:38:69:e3:48:06:b7:9b:23:57:64:5d:0d:
c4:96:cd:8c:07:5b:44:60:33:0a:34:da:65:7b:30:
9e:b2:d1:29:d1:2f:8a:d6:af:e5:6a:ea:fe:81:47:
29:26:f5:99:31:1e:50:89:ec:87:51:39:9c:5c:ef:
61:44:02:3f:bc:b4:72:ff:12:fa:da:1a:9a:58:9e:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:98:58:08:5F:8C:6E:F8:B4:5E:28:B5:9B:7E:63:0F:CD:E0:81
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d6:6f:4f:8e:14:07:e2:ce:2f:22:bf:26:54:d4:36:86:8b:
21:16:e7:c7:a0:83:4c:61:4f:e2:ff:df:48:d4:89:f3:45:d8:
71:0a:81:c0:a4:f4:ef:ef:df:af:4f:00:1a:dd:87:b6:6d:88:
c8:4f:17:9d:23:db:17:e3:85:ee:d8:ed:e9:9d:a2:52:eb:17:
a7:57:65:ca:52:ef:bf:3d:78:fa:88:16:d5:1d:59:ea:fb:73:
ba:ee:c5:d8:c1:b1:6a:40:a2:92:05:6b:a0:ac:1b:04:26:7d:
f3:7f:ad:95:4d:c9:aa:29:61:f5:23:1b:56:05:9e:61:ed:ac:
82:73:65:5f:cf:4f:d8:9d:5c:b9:de:90:85:6a:86:24:30:27:
c7:5f:2b:ba:5a:a2:dd:c0:75:2f:95:91:02:67:9c:4d:1f:bf:
55:1b:a5:37:2a:7a:5d:e9:4a:70:d8:67:b9:55:ab:41:9a:71:
8b:04:7c:8f:03:58:99:60:dd:9c:2a:69:19:ea:d3:a2:ad:80:
5f:0e:0b:c8:f4:88:fe:a9:ec:1d:75:50:f7:9a:52:b1:11:89:
60:6a:f6:a8:c9:f7:f2:6b:ba:44:05:3f:0b:ba:e7:39:c3:f2:
33:b4:32:4b:0b:39:7a:64:e6:a9:af:b4:65:69:ff:d0:f8:9b:
e7:35:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:17:23 2025 by rpki-client