Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: mzduZo5ir9V4CJQTL7oiQMeDw65rBopWyFPpKTnrMKc=
Subject key identifier: E7:ED:C5:F5:2C:6C:D3:AA:BA:6B:F3:1F:7B:A8:DB:47:01:9A:C3:FC
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 019655DCB23E65A1B7A37F727C2F9345D18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0DBC
Signing time: Mon 21 Apr 2025 01:00:48 +0000
Manifest this update: Mon 21 Apr 2025 01:00:48 +0000
Manifest next update: Tue 22 Apr 2025 01:00:48 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: 08zZG7/CswqI++hn1lXHPIcKt7nz5vj5mplcFhPcHIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:b2:3e:65:a1:b7:a3:7f:72:7c:2f:93:45:d1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Apr 21 01:00:48 2025 GMT
Not After : Apr 22 01:00:48 2025 GMT
Subject: CN=e7edc5f52c6cd3aaba6bf31f7ba8db47019ac3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:eb:3b:be:40:b1:c2:94:5e:dc:86:99:05:
56:23:e7:ba:b8:e0:17:c3:fe:b9:6e:20:41:60:35:
d4:4f:8f:18:a6:d8:82:3d:54:70:74:49:ca:6d:9e:
76:15:c8:26:a7:a0:c3:ff:99:cc:e6:11:b7:14:94:
74:d9:f6:b0:a0:57:4b:30:7f:9a:96:ae:bc:18:9c:
ac:1e:0b:60:ee:33:83:20:13:2d:7a:b2:e1:84:f9:
01:6b:82:f3:9f:7d:fd:5d:0e:f1:8e:09:d5:22:22:
5c:0e:4b:d6:1f:07:f3:98:93:31:ba:0a:ec:7d:54:
85:46:94:a9:be:b4:ee:0a:38:23:3c:d3:67:2f:a5:
88:58:cb:09:ae:ae:ae:37:23:f9:68:5a:d9:1d:44:
07:73:dc:73:ab:69:3a:e7:de:08:fc:0a:74:28:13:
4a:89:40:45:c0:69:79:c7:be:d2:3c:ee:5e:7e:dc:
d1:1e:4d:a0:98:37:60:f8:40:49:a9:8b:23:f4:39:
3e:5c:85:83:55:73:da:2f:ce:8f:22:7e:d5:72:d1:
bf:8e:ea:2b:05:3d:d9:93:a1:a4:a8:0f:e0:3b:42:
56:b0:40:35:cd:ba:1e:82:de:aa:eb:23:5e:32:22:
87:e1:b9:fe:2f:ec:83:9f:45:4c:8e:52:07:12:40:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:C5:F5:2C:6C:D3:AA:BA:6B:F3:1F:7B:A8:DB:47:01:9A:C3:FC
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:67:99:ac:a2:80:3e:87:4c:e4:7c:40:36:ca:9c:9c:c3:60:
2d:50:8a:49:65:3d:6c:c7:16:48:fe:cf:88:c6:2b:45:a1:43:
90:54:63:fd:3c:f3:7c:bd:33:97:20:47:9f:c0:ba:e6:f6:80:
41:36:18:2c:00:d2:04:8c:76:8c:4e:b4:94:ab:c3:56:2b:76:
cf:fb:7b:d8:5c:b8:20:5d:20:e7:7a:1b:f3:3d:b4:24:bc:e1:
b8:ca:d8:27:b6:fa:c0:0f:c4:83:ea:f1:2c:13:79:6b:99:33:
cc:8e:9c:6e:6a:b3:24:bb:65:75:27:c9:6c:45:92:de:9b:26:
13:20:97:65:01:c2:6e:db:7d:75:b5:ee:98:ed:0e:fa:fc:a9:
e2:92:c1:d4:5f:72:9a:de:8b:7f:f6:9c:94:a6:c8:2a:6a:00:
b2:c7:91:e2:4e:c6:89:56:cf:96:2d:cc:f3:18:da:19:99:2c:
f3:6a:fe:1b:90:a3:a6:db:b0:eb:17:94:5e:b5:0f:c8:34:3e:
2d:ef:61:45:80:5c:60:ee:ec:35:37:7b:97:2b:50:a2:16:ff:
ac:c5:a6:06:7d:81:e9:ed:b2:9c:f7:93:7d:eb:cb:b7:c2:8a:
8f:1c:e1:9d:03:03:c1:ba:8d:86:da:41:21:d1:48:54:3d:c1:
69:54:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:19:41 2025 by rpki-client