Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: r02ADI4e7A3fDqgEvsml/q2/AjUHSmyRDI1YkmhlSR0=
Subject key identifier: AA:EC:99:1D:8D:72:34:2A:D0:69:16:1B:CE:6C:C9:F8:49:A1:29:76
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 01964D7EFF99B62F4F1DFA31A82663DC199E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 11D7
Signing time: Sat 19 Apr 2025 10:01:30 +0000
Manifest this update: Sat 19 Apr 2025 10:01:30 +0000
Manifest next update: Sun 20 Apr 2025 10:01:30 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: fzMFN+wYIo7YxSrZwOOw4re1KY1Zeawnf/0fW7dNXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:ff:99:b6:2f:4f:1d:fa:31:a8:26:63:dc:19:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Apr 19 10:01:30 2025 GMT
Not After : Apr 20 10:01:30 2025 GMT
Subject: CN=aaec991d8d72342ad069161bce6cc9f849a12976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:0d:40:4c:0c:cf:7e:32:65:97:a8:db:42:
8a:57:c5:86:ac:b3:19:ff:68:0a:d7:03:4c:f8:61:
7a:5b:42:18:87:fb:b8:b1:9e:07:37:5e:f0:be:b2:
47:0b:1a:dd:cf:08:0e:48:1a:cf:fd:5d:00:01:52:
79:64:0c:d3:08:33:06:1c:98:d8:4d:7f:b5:76:ee:
42:a1:05:21:9b:fe:1b:69:47:51:ab:2f:28:7f:1d:
90:ff:6c:7f:0c:5f:c3:63:18:67:4d:db:1c:54:05:
6f:d4:40:8d:3d:ed:87:3e:00:cd:7b:24:a8:30:dc:
0b:1d:3c:11:36:9c:a1:b3:47:a3:82:10:03:11:3f:
7a:bf:c7:ff:f8:fa:8a:67:b2:9f:b0:84:d1:60:0c:
d5:1f:8e:a3:9a:0c:4e:1c:ed:1f:30:8c:0a:4f:c4:
f0:31:ff:59:57:17:b2:30:33:e4:5d:09:84:48:43:
ab:f0:d7:1c:e9:cf:cf:b0:dd:79:c0:9b:03:e6:29:
9a:23:58:21:d0:8f:aa:39:7b:95:5a:12:6f:0e:ce:
ae:19:b0:2a:09:7b:88:b7:8f:87:34:cc:a9:81:cc:
21:46:41:a7:13:fd:ef:be:fd:40:50:b7:2b:31:83:
7f:ff:e6:41:ea:ff:7e:4d:9a:28:13:08:b5:f2:95:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EC:99:1D:8D:72:34:2A:D0:69:16:1B:CE:6C:C9:F8:49:A1:29:76
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:48:7d:ed:64:1e:5c:dd:dc:ef:51:7c:c6:16:04:b9:7e:
17:4f:cf:83:24:54:d4:2c:c6:49:c4:ff:23:af:16:09:b1:4c:
7a:65:e8:b8:2a:d6:c5:fa:d2:de:23:43:96:7c:c6:14:6e:d3:
ac:41:af:96:0a:ae:99:b7:d4:ec:1a:a9:b6:b1:8d:41:ff:a0:
2f:b7:a8:27:e6:30:04:2b:ce:6e:1d:2c:92:3f:a2:44:fb:02:
dd:a5:5a:ee:cf:77:0e:36:a5:09:5d:02:14:5f:d8:72:b1:47:
e7:37:5d:33:d4:40:f0:65:9c:ae:ba:b8:fd:c8:1b:ce:57:d8:
73:9c:77:a2:af:aa:a9:f0:59:e0:71:c6:f8:28:fd:17:1b:bf:
7c:cb:fd:3f:84:ed:e9:c2:db:74:4a:a1:e5:13:9f:f1:83:bf:
6a:30:73:7d:88:42:48:38:8a:89:80:9f:a7:f8:b5:77:60:fa:
5a:66:39:81:03:aa:d4:ea:cd:7b:1d:70:bf:89:a4:7f:95:5a:
58:7b:c1:06:ed:1f:1e:09:5d:d8:3c:c6:bb:58:03:e7:44:f9:
ba:a9:e7:c9:61:98:5f:ef:97:96:81:b8:1a:2b:4e:b8:64:2a:
21:19:29:9a:aa:64:05:36:f5:13:3d:1d:48:fd:58:56:01:4f:
d9:68:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:28 2025 by rpki-client