Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
File: z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft (raw, json)
Hash identifier: 7gJQuwCURiFDZ7VWrEMibq70nUNFy932GBWlRZ2nqXE=
Subject key identifier: 59:AA:DA:9E:29:63:C1:01:93:83:CF:E9:06:66:F2:B9:2C:27:62:BE
Authority key identifier: CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
Certificate issuer: /CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Certificate serial: 01965C834D1FBDF2AA323934E86D7DD1D561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
Manifest number: 0202
Signing time: Tue 22 Apr 2025 08:00:30 +0000
Manifest this update: Tue 22 Apr 2025 08:00:30 +0000
Manifest next update: Wed 23 Apr 2025 08:00:30 +0000
Files and hashes: 1: z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl (hash: 6x+rJSQkojUHTJEa70DVWpWNPCEpwbMwQM12KwnF5UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:4d:1f:bd:f2:aa:32:39:34:e8:6d:7d:d1:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Validity
Not Before: Apr 22 08:00:30 2025 GMT
Not After : Apr 23 08:00:30 2025 GMT
Subject: CN=59aada9e2963c1019383cfe90666f2b92c2762be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a5:9d:9c:33:c8:dc:2a:ac:da:51:98:49:6f:
06:96:54:ce:b7:14:ad:aa:fa:0b:82:57:41:b4:16:
3d:00:47:03:dc:ca:e5:e3:6f:d9:cd:5d:ab:62:ce:
3b:c7:b5:41:ab:ad:dd:be:f7:62:bc:0b:b3:37:a9:
34:8b:b7:97:97:0f:12:1d:40:7b:0e:46:1d:35:22:
05:ff:ce:66:06:53:c1:bc:fc:67:a2:de:c9:b6:57:
e1:ab:13:82:e2:e3:94:37:0b:34:df:19:fa:9f:27:
38:15:bd:60:b8:89:f5:42:28:50:ec:3f:23:3f:91:
e8:24:7c:06:61:e7:e6:be:ad:1d:5f:fd:6e:58:9f:
a6:8d:43:58:f6:ce:d0:69:52:90:f5:0f:69:18:69:
de:2b:2f:ca:84:c4:ec:22:73:2e:04:8e:9e:fa:2d:
4c:02:79:9b:48:28:aa:dc:18:de:ac:91:b2:26:ab:
06:bf:a8:8e:82:2e:cf:71:6a:98:57:25:ea:18:41:
5c:1d:74:f8:47:2c:1e:a0:31:8c:6e:d7:38:4e:7d:
d4:46:b8:93:8c:f9:59:30:70:b9:93:03:cd:10:48:
24:c9:c8:1c:1a:7a:d9:8b:9e:3b:07:34:c2:15:7a:
10:b2:ec:ee:ee:0b:9a:80:a8:e2:c8:59:62:22:37:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:DA:9E:29:63:C1:01:93:83:CF:E9:06:66:F2:B9:2C:27:62:BE
X509v3 Authority Key Identifier:
keyid:CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:95:09:ca:86:3d:9b:0b:cf:f8:45:b2:1c:46:f1:6c:02:4b:
8c:19:38:1d:f2:cc:52:51:7a:33:6d:6c:2b:a2:44:25:fa:c3:
d8:18:51:c1:2b:9e:47:32:15:43:d4:13:c7:a5:1d:78:9c:38:
6f:cd:5e:f0:c7:94:c4:e1:67:10:31:97:f3:52:9e:31:51:c2:
b0:ef:4d:70:e3:59:8a:7c:a8:5f:fb:8b:47:14:74:11:d2:4f:
87:1b:fc:92:9e:1a:b2:db:84:86:0b:d6:b8:6a:08:fc:c5:d0:
72:1f:a1:d6:5a:83:fc:db:8c:44:f6:5d:27:b7:4b:9a:67:ce:
b3:84:1e:75:6f:e5:ff:b2:e5:74:4d:16:a0:55:b2:5e:9c:b7:
7f:07:69:67:05:e8:e5:12:c8:05:92:b7:ba:f6:e4:9d:50:58:
91:7f:98:51:6c:b0:f1:d0:af:49:24:3a:89:5e:15:1f:be:3a:
66:c6:0f:7e:0d:45:71:98:0d:19:a5:6e:fa:92:ba:17:b3:6a:
87:90:68:97:40:bd:a7:cb:f6:c3:ff:b2:e6:10:33:8a:91:e7:
2d:ad:f7:6e:e2:5f:87:66:65:c0:5a:f4:60:3e:68:a1:13:cf:
4a:88:54:a9:1d:a3:24:a3:ac:22:25:46:9f:b8:aa:70:40:67:
97:a7:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:06 2025 by rpki-client