Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: AbR5XLFcIy4OuhY5aTIWkJ7UspAh7D8Gfdwa3mdwllk=
Subject key identifier: EB:F1:2D:52:90:A2:78:8D:AD:2E:6B:26:4C:BE:C9:F2:2C:A3:6C:18
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 019641E8BAD61AAD73F371D6B167CFB08191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 1481
Signing time: Thu 17 Apr 2025 04:01:33 +0000
Manifest this update: Thu 17 Apr 2025 04:01:33 +0000
Manifest next update: Fri 18 Apr 2025 04:01:33 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: lMMqt51LZJfdd8Vs6jDwtYuh55+RHVNxCaHAtMACwbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:ba:d6:1a:ad:73:f3:71:d6:b1:67:cf:b0:81:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Apr 17 04:01:33 2025 GMT
Not After : Apr 18 04:01:33 2025 GMT
Subject: CN=ebf12d5290a2788dad2e6b264cbec9f22ca36c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:81:3f:10:41:37:68:b9:81:e4:0c:1d:9c:
76:02:51:0b:42:06:bb:dc:7d:c3:c3:23:fc:1e:bb:
5d:be:c6:be:08:f1:8a:f8:3c:d8:0b:84:2e:6d:c2:
1d:7d:47:36:b7:af:bc:e2:04:e7:25:04:b8:d3:58:
f7:af:8f:39:c8:41:4d:e1:f5:55:85:d8:64:43:4f:
16:c1:aa:0d:06:b2:e8:30:41:2e:58:b8:ff:3e:6f:
00:39:44:4f:fc:54:79:9d:86:c2:89:09:f5:e2:7e:
19:04:2e:31:22:61:80:c8:26:dd:c6:9c:48:93:ea:
ca:8b:cb:85:ca:88:35:e4:39:da:49:a2:5d:b3:de:
69:c4:cc:67:69:70:65:67:34:3f:bb:d5:99:67:c9:
b2:01:cc:6b:3f:03:ae:9d:93:b9:eb:7a:54:30:7a:
15:eb:1d:a2:07:b9:b2:c6:d1:f3:fd:8d:17:bf:ea:
bd:87:06:a3:dc:79:32:8c:31:92:5b:00:73:07:98:
b0:95:c6:ea:e7:5e:32:df:ad:64:67:a0:b0:3a:f8:
60:0e:2d:a8:e7:f7:e1:cf:df:f8:e6:c9:ed:b7:42:
d5:6f:12:43:ad:36:93:0d:2a:fc:e8:ab:19:a6:ff:
e3:70:6a:7c:6c:b0:66:e8:54:b2:9e:33:55:27:a8:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:2D:52:90:A2:78:8D:AD:2E:6B:26:4C:BE:C9:F2:2C:A3:6C:18
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1c:b6:5c:cc:12:ee:80:c5:1b:33:4c:a0:b4:34:95:cc:fb:
c8:89:df:80:64:66:29:d6:f0:42:14:75:05:05:02:55:62:10:
44:5f:ab:ba:7b:ae:72:16:02:ec:07:90:bc:8c:4d:c5:3e:fc:
f0:d6:ab:e7:1c:52:e8:09:b4:b4:2a:a4:4e:51:16:71:12:a9:
be:01:5a:0c:bb:56:4f:ff:eb:89:74:d5:47:05:ae:55:a6:13:
81:0d:b9:20:54:46:fb:1b:6f:4a:50:c4:0c:11:07:30:ee:06:
94:87:f7:aa:58:27:49:1e:38:41:19:b7:3d:35:b8:96:6e:b4:
d5:28:38:7c:32:2d:69:38:48:78:10:32:43:b8:03:df:79:bc:
f3:7d:67:80:d6:fe:be:2d:fe:a8:fa:a4:5b:39:80:d3:a8:b3:
fb:15:8c:a4:75:dd:ca:ed:7c:95:52:29:61:d9:44:f6:72:46:
7b:b2:1d:94:f3:e5:81:31:80:54:2f:f7:bb:85:e0:e1:d4:2b:
28:1e:f9:19:40:83:1b:49:dc:8e:bf:d9:d9:78:b3:e3:3b:2a:
89:22:66:76:df:ce:62:e3:6d:ff:5c:df:73:0e:36:5a:5b:31:
70:ef:26:1d:08:a1:83:29:15:cc:ef:42:88:0b:16:5d:d5:44:
71:61:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:44:40 2025 by rpki-client