Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File: mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier: a4QqftCE1N/f9cc1SzyyE1wamQ2zgR6Ybq0AOvz3OiU=
Subject key identifier: 81:AB:C4:23:EA:90:43:56:B3:B4:8E:27:BF:CD:17:0A:D8:F0:5C:29
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer: /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial: 01965981F63D19AE76A1FF23F3939FC695BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 18:00:11 +0000
Manifest this update: Mon 21 Apr 2025 18:00:11 +0000
Manifest next update: Tue 22 Apr 2025 18:00:11 +0000
Files and hashes: 1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: Qz2Cx6plaN1JaGkNSdfOea38JWaGpqskO0isyHZeGSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:81:f6:3d:19:ae:76:a1:ff:23:f3:93:9f:c6:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Validity
Not Before: Apr 21 18:00:11 2025 GMT
Not After : Apr 22 18:00:11 2025 GMT
Subject: CN=81abc423ea904356b3b48e27bfcd170ad8f05c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:f6:ff:6a:4c:ce:4d:58:40:b0:fb:c9:4e:
c8:27:28:b3:93:e2:12:97:b5:27:a5:2a:a5:93:13:
96:d6:57:a8:80:4f:e9:67:79:45:3a:70:f0:13:de:
e9:fc:63:2d:79:4c:fb:e2:03:9d:26:a7:6a:4e:33:
34:07:d9:cd:76:37:34:b8:ef:3e:55:0b:69:3b:d0:
3f:d2:0e:ef:f7:11:9d:9d:f6:6d:f9:db:2b:31:67:
03:e3:21:5b:32:d3:2f:bd:f3:4b:21:3a:2b:28:23:
53:60:95:4a:16:6d:05:b2:cc:77:69:ec:9d:7d:f2:
c7:5f:0e:73:0a:0a:30:9d:ce:67:b3:01:0c:e6:ba:
b3:76:c0:4d:cc:07:2a:89:ea:08:50:06:d7:c6:2a:
b4:63:51:7f:45:d9:21:d6:f4:3a:60:06:4e:a7:4d:
d3:e9:02:6c:31:a3:79:ac:39:29:79:aa:e6:e2:1b:
3f:c3:5a:bf:39:06:32:1b:9f:72:35:a6:9e:48:69:
e6:05:ab:67:bf:c9:8d:d7:cb:3c:a9:0b:d1:f8:82:
3f:d6:09:22:9c:02:5d:8d:36:cf:5a:a5:41:31:bb:
25:9d:5a:9f:96:3c:06:61:41:7a:3f:14:aa:e1:93:
7a:f3:37:e8:e7:21:5b:cb:7d:5e:da:02:1f:5c:cb:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AB:C4:23:EA:90:43:56:B3:B4:8E:27:BF:CD:17:0A:D8:F0:5C:29
X509v3 Authority Key Identifier:
keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:54:a8:5a:db:bc:30:d3:76:27:07:2d:de:2d:12:98:78:cc:
2d:0b:a3:d3:a1:ed:72:22:8b:91:0d:92:7d:c4:2c:c9:74:f9:
a9:94:23:4b:59:2f:ee:4e:92:d7:f8:c1:ab:72:36:c2:da:a5:
3b:59:1e:85:db:74:02:00:99:f9:39:de:82:10:f7:f0:61:ba:
48:9e:7d:78:cc:2f:94:a0:47:38:be:45:9f:a8:26:d2:70:67:
6d:fa:eb:44:22:f3:2b:06:9a:fa:c5:7d:0a:72:84:42:42:b5:
d0:e7:d9:34:44:93:e2:cd:45:2d:a8:68:c7:36:a3:16:cf:90:
36:f1:eb:43:e3:b3:23:cd:f1:af:71:d2:ac:7b:e6:b2:ae:61:
be:1f:bb:c3:b1:74:91:ee:ba:25:23:11:19:19:ef:a6:da:c0:
56:aa:bd:b5:9e:2f:ab:ee:fc:0f:7f:52:ce:c2:6b:33:03:18:
02:e9:a0:ec:fb:af:d8:b8:a5:04:53:52:8a:23:13:6e:93:5e:
11:ab:4e:94:29:dc:fd:25:d8:cf:23:a7:ab:a9:10:de:e8:a0:
90:fa:1e:68:e8:23:bc:49:70:bf:9f:20:86:3a:0f:dd:df:df:
f0:6e:60:86:8b:1f:4a:d0:b8:ba:d8:c0:b9:95:2f:c2:51:d6:
79:79:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:24 2025 by rpki-client