Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier: 90P4O+8ZKaoVkZupyPt4+x104duLMS8YhEd/ecMdeWk=
Subject key identifier: 3E:D9:53:8A:D2:E0:4D:11:FA:7D:97:98:75:14:16:44:9E:F5:3F:2B
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial: 01965424FB4029A12DAEF3A2528E32C01DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number: 0C37
Signing time: Sun 20 Apr 2025 17:00:31 +0000
Manifest this update: Sun 20 Apr 2025 17:00:31 +0000
Manifest next update: Mon 21 Apr 2025 17:00:31 +0000
Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: LROjI63er6MNkVab1RyypnurBuna9YovqJDqr66Uikc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:fb:40:29:a1:2d:ae:f3:a2:52:8e:32:c0:1d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Validity
Not Before: Apr 20 17:00:31 2025 GMT
Not After : Apr 21 17:00:31 2025 GMT
Subject: CN=3ed9538ad2e04d11fa7d9798751416449ef53f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:f4:86:79:ce:66:95:c8:f5:26:9e:e9:6f:
dc:3b:38:f5:39:ac:ad:41:7f:44:cd:48:65:31:e5:
d3:03:f9:d2:88:c7:df:04:81:b2:48:74:ec:af:6d:
39:6d:d8:ef:49:e5:9f:25:3d:fb:b5:bc:c4:eb:5e:
da:23:4a:31:a2:8c:4c:21:6e:01:a6:b0:0c:46:47:
4e:69:01:1d:40:92:1b:9e:b2:72:ac:cf:9e:d9:4a:
09:ed:e8:b9:cd:9a:16:15:fe:e8:38:01:34:b8:b0:
2d:c6:a9:12:80:31:74:49:1d:db:61:a1:ff:76:0f:
d0:52:4a:18:d3:87:7c:0d:a4:5e:df:51:5f:97:74:
48:f0:a4:8c:a2:68:06:07:36:c3:8b:b4:41:c5:46:
3e:cf:d0:6d:ec:e0:1e:b6:eb:fd:4f:8e:c3:a0:2a:
3f:78:41:d2:b4:e3:b4:f9:90:9b:77:9c:c7:8c:66:
c6:42:48:60:1e:c4:76:c2:f7:66:ad:ff:81:17:7e:
dc:90:80:42:d3:77:26:90:f3:fb:49:85:3f:5c:c7:
6a:dc:2f:a8:69:a5:a2:a5:f4:89:e9:c6:50:9c:72:
46:91:08:44:3b:8d:2e:9c:1e:45:da:4b:57:6a:92:
c9:05:6e:22:ab:3f:d2:1a:84:66:b6:cb:a9:b3:f9:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:53:8A:D2:E0:4D:11:FA:7D:97:98:75:14:16:44:9E:F5:3F:2B
X509v3 Authority Key Identifier:
keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bf:4f:93:02:50:da:a9:f9:0a:04:a7:1d:a4:9b:1b:99:2a:
a8:cc:97:b5:67:1e:58:ca:64:3d:a8:3e:70:cd:ba:2a:12:b4:
78:d5:d3:42:f9:79:64:e6:5e:78:d6:44:40:f0:f2:1d:4d:74:
15:0d:8d:66:b4:17:d8:ab:87:48:da:1f:0b:e9:2c:d5:10:1c:
65:9c:20:f1:58:47:2d:ce:8c:4f:1f:12:8d:f1:29:d4:e6:aa:
27:bb:9c:23:3e:9b:72:7e:1f:5a:15:aa:2c:5d:5f:d9:e1:20:
bc:98:c4:8e:a5:1f:85:15:ce:dc:a9:6a:b3:37:e3:22:f5:63:
3e:50:ae:73:d6:65:5a:a6:d7:bd:32:da:b5:2c:f1:86:8d:9a:
bf:26:7f:2a:d3:1f:02:23:61:4c:33:b0:ff:09:26:50:c9:16:
38:ec:c1:2c:28:55:5d:34:cf:d5:9e:55:80:68:fb:9f:22:d8:
7d:53:c9:bd:fd:43:72:99:73:dc:bb:44:fa:bb:df:19:37:a8:
32:b6:77:b8:f0:26:69:18:ab:6e:a5:95:19:cb:d5:b3:69:28:
b9:de:8f:28:67:b6:6c:2a:53:cb:73:e2:97:8f:50:6f:c8:13:
17:d9:c6:a7:2a:85:03:bb:09:cf:b7:d1:a2:ae:e5:ed:41:87:
65:24:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:16 2025 by rpki-client