Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: 8UDdusLBBMG3qmwE2ry2MUyP7ICstd+rXTI29YxZZUQ=
Subject key identifier: CC:03:49:B1:DD:4A:B4:40:4B:3C:4E:2F:2E:72:FA:43:C7:26:80:A2
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 01965726AD382EEBC94081E5D7B243724E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 07:01:14 +0000
Manifest this update: Mon 21 Apr 2025 07:01:14 +0000
Manifest next update: Tue 22 Apr 2025 07:01:14 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: VmpXI/8fNiB3iKPt30+e7Fw4fVctrzkxfFOHj4CHAQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:ad:38:2e:eb:c9:40:81:e5:d7:b2:43:72:4e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Apr 21 07:01:14 2025 GMT
Not After : Apr 22 07:01:14 2025 GMT
Subject: CN=cc0349b1dd4ab4404b3c4e2f2e72fa43c72680a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:c5:3b:70:37:bf:20:f1:8e:61:54:68:50:
ec:10:e3:7c:8d:32:93:1b:77:e5:57:2d:24:72:95:
f0:8f:93:3d:85:31:77:0a:27:c1:6c:21:2a:e6:d4:
c6:90:0a:16:ae:5a:bd:35:ce:d7:8e:52:1f:6d:7a:
85:6a:c1:c3:0e:a2:f2:6c:d1:66:6e:20:8e:c2:8b:
0d:d9:71:f1:a1:53:bd:17:3c:d5:ee:92:60:b3:23:
3b:66:5e:6f:ac:d1:40:9b:38:b1:d4:43:5a:ea:1a:
c6:b7:59:c8:17:29:bd:7c:4c:9a:4f:28:2f:91:6a:
ad:bc:28:21:e5:7b:fd:d7:ff:87:e5:7c:5d:eb:c9:
64:f4:89:21:82:14:9e:59:e5:11:29:1f:f6:c6:e0:
33:52:e7:3e:a5:cf:9a:f6:ea:f7:e3:2e:91:a1:76:
6c:f6:53:8f:e5:c9:4b:58:d9:51:6a:be:20:49:6e:
c4:38:02:08:95:f3:38:bc:f7:2f:d8:8d:8c:1f:b4:
53:f2:e2:fc:3a:c3:75:b7:a7:0d:95:4d:be:e7:37:
e7:70:8f:85:81:bc:69:65:9b:a1:c7:ac:b4:ee:72:
1a:82:51:6f:d3:31:0c:db:6a:93:61:62:3e:8b:b7:
be:4b:38:46:c1:f5:de:f9:4f:a8:31:c3:bc:2f:bf:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:49:B1:DD:4A:B4:40:4B:3C:4E:2F:2E:72:FA:43:C7:26:80:A2
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cc:77:28:10:49:f9:4a:ee:ef:c2:c0:18:f7:a7:ec:95:c7:
a9:47:46:0c:58:d9:0c:49:5e:a0:f6:1d:8b:13:29:67:d6:03:
07:bb:5f:70:0f:9b:07:33:9b:a0:99:14:87:da:99:d3:3e:35:
83:ee:a8:8b:47:f9:0c:a9:ee:4d:fb:98:01:56:cd:60:64:f0:
fd:4a:cf:8b:59:b7:a4:14:ea:b6:97:82:a8:ac:59:82:1f:82:
2d:81:3b:a7:6e:35:be:8e:eb:7f:7c:e8:ad:4f:24:e0:a7:ed:
e6:51:08:a9:00:2c:e6:d8:63:30:a0:32:9e:93:f7:53:d9:41:
0d:1c:96:19:a3:a3:d5:a3:2f:ed:ea:66:a6:19:30:95:90:cc:
e1:5e:9c:35:12:ac:51:70:4c:56:46:be:0e:53:34:52:da:b2:
37:4a:d0:ab:40:68:f5:5f:97:08:c5:86:0e:7b:38:e3:d0:8c:
89:54:be:77:cb:60:16:93:39:89:1a:6b:35:57:63:0e:c0:78:
89:2a:f6:fc:c0:b8:60:fb:df:c5:f6:ed:51:a5:75:fa:37:a7:
3e:8e:4c:5c:5f:d8:3b:48:c3:ee:42:7c:67:39:4c:64:d9:0e:
c1:8a:f8:e5:c2:8c:2d:6e:3c:3b:b7:9e:0a:6c:fe:f5:b9:9c:
56:68:57:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:23:14 2025 by rpki-client