Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File: zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier: uISz2RvnuclcKZxUIRs0fxHH+66kLh7JCrkyyqbsWmw=
Subject key identifier: 11:CE:A9:BF:1E:67:CF:E6:76:D6:62:1D:3A:8C:FD:3E:17:09:34:34
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer: /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial: 01965914B72914270A0596E388D3ABF9EA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number: 0EA1
Signing time: Mon 21 Apr 2025 16:00:51 +0000
Manifest this update: Mon 21 Apr 2025 16:00:51 +0000
Manifest next update: Tue 22 Apr 2025 16:00:51 +0000
Files and hashes: 1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: Y2nouXysbMOXFQJ/P4vfPDC9MHua1HVPC8W+wdOGtC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:b7:29:14:27:0a:05:96:e3:88:d3:ab:f9:ea:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Validity
Not Before: Apr 21 16:00:51 2025 GMT
Not After : Apr 22 16:00:51 2025 GMT
Subject: CN=11cea9bf1e67cfe676d6621d3a8cfd3e17093434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:97:2b:8c:04:51:8b:a9:01:11:70:d2:aa:
9b:7a:ef:2b:d9:04:e9:f6:f8:ec:90:04:7d:16:e8:
9d:76:68:25:cb:f0:c7:17:8a:b8:5a:f6:fc:7f:91:
bf:66:61:0a:b9:7b:6a:74:22:a4:f1:8a:37:a3:bd:
aa:72:d0:6c:e3:cc:02:b8:5d:0d:d3:c7:2f:c4:6d:
a0:56:b6:50:bb:ab:33:84:a8:64:78:fe:f8:00:44:
5d:d7:74:05:0b:45:af:f2:63:50:48:f2:36:1f:4e:
d2:a5:2a:93:c6:a2:06:1c:5d:dc:b7:d8:8a:15:4c:
36:4c:33:36:22:d1:07:81:f2:59:02:ec:63:c3:74:
9e:75:e9:6b:30:92:b7:0c:94:eb:24:23:4a:82:a9:
88:e5:ba:68:cc:3e:28:de:7f:d3:2a:8d:56:0e:fc:
94:45:86:2a:99:2d:0e:3f:75:da:61:c4:dd:a5:d0:
a8:e0:b2:82:b1:87:6d:e0:0f:aa:c6:67:09:c1:f3:
30:a9:76:18:fb:7c:e2:f7:20:f2:df:25:25:cf:d3:
f1:87:86:a7:bf:b8:f8:8c:e7:ae:e6:88:e4:df:65:
ca:c7:a7:64:da:90:15:7b:95:d4:16:06:69:50:04:
57:52:68:92:1b:fe:e5:ee:f2:69:a8:bb:d1:58:23:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:A9:BF:1E:67:CF:E6:76:D6:62:1D:3A:8C:FD:3E:17:09:34:34
X509v3 Authority Key Identifier:
keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0d:c9:d1:f3:c8:72:5d:73:51:18:36:c8:d7:4e:e9:eb:81:
61:93:1e:78:c8:e5:f9:26:9a:48:48:1e:12:5f:66:af:2b:0e:
da:81:63:06:c5:98:8f:77:79:13:a4:a7:eb:7a:f2:86:16:d8:
03:a4:e5:c7:c2:9f:a5:ef:aa:5b:25:ca:d7:68:ee:94:af:5b:
18:d7:e1:e4:99:c1:ad:39:0b:14:f5:d1:36:0f:8d:5d:b1:f1:
74:e3:8b:5f:34:7f:56:42:04:6b:80:ec:2d:97:e2:6e:74:5a:
f4:e8:84:99:2b:a1:b6:40:19:5e:a5:0e:98:bc:b9:a1:28:5f:
ad:5d:1c:dd:a6:5f:b4:4a:fe:17:5e:42:76:07:60:41:ee:7d:
e8:74:66:1f:d1:64:17:99:b1:66:b9:f3:98:2e:f6:c5:4f:b3:
1d:d9:bb:12:a0:06:88:1e:8f:12:e0:3a:01:f2:be:ac:ea:79:
e8:4e:4e:5d:30:19:4a:01:a2:a3:cd:28:e6:46:d5:d3:2f:bc:
90:9b:01:01:87:4e:bc:c7:21:cc:91:fb:1d:3e:2d:c5:3d:9d:
a3:b3:46:17:e4:71:4e:22:f2:d9:29:3c:a7:b9:92:39:d5:34:
da:a4:dc:05:47:58:83:27:71:80:0c:eb:23:65:7c:75:54:45:
d8:9a:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:42 2025 by rpki-client