Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json)
Hash identifier: oJP1SxMmbI4Mc8Kmp77mToDCG7jjPGvN0Yb0fLgcXoY=
Subject key identifier: 98:86:BD:19:5F:90:18:B4:A4:26:24:5E:E9:A4:39:2D:9E:79:61:6F
Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d
Certificate serial: 019652A4A87D292DEFD04AA87601FAB426E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
Manifest number: 14F8
Signing time: Sun 20 Apr 2025 10:00:44 +0000
Manifest this update: Sun 20 Apr 2025 10:00:44 +0000
Manifest next update: Mon 21 Apr 2025 10:00:44 +0000
Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: gFOzJd0sziX2YynA+yKyBOMyJRSL+QdJZkT+v4S+j0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:a8:7d:29:2d:ef:d0:4a:a8:76:01:fa:b4:26:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d
Validity
Not Before: Apr 20 10:00:44 2025 GMT
Not After : Apr 21 10:00:44 2025 GMT
Subject: CN=9886bd195f9018b4a426245ee9a4392d9e79616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:4c:8f:6c:46:88:af:f3:59:3b:ec:75:5a:
9d:d6:56:b8:f8:c3:13:93:6d:03:dc:f0:51:a0:99:
12:d0:b4:e8:90:dc:64:1c:01:e2:fb:a6:06:41:05:
c2:c8:ec:c4:66:74:3c:1d:65:2c:3d:c4:b1:54:27:
a4:fd:b6:15:70:ac:b0:c2:fc:22:b0:4a:08:7f:fe:
c4:e0:ec:a3:ac:72:f4:55:f7:fa:8a:1a:98:a4:13:
b5:68:e4:74:7b:ed:f4:c5:e5:8b:5a:5a:18:00:d6:
09:1c:d8:02:e2:43:df:db:61:8f:c1:4a:f8:9b:6e:
78:98:81:18:00:5c:ca:3a:fb:c4:55:d9:41:13:60:
80:34:e6:d9:8f:5f:13:9c:e5:09:24:4d:80:55:b6:
8f:53:e8:f0:29:e6:f8:c1:94:01:fe:79:be:65:99:
49:44:e6:da:3e:cc:ea:a9:ef:88:1a:3d:e8:e1:5a:
25:49:ac:e8:9c:ce:60:9e:32:10:94:3c:f6:22:f9:
40:67:0d:a2:05:18:c7:c6:dd:0e:23:28:82:ad:88:
03:1c:41:f3:00:5b:76:50:ac:97:93:20:3e:3c:fd:
77:87:c5:dd:d3:74:02:eb:81:30:46:22:df:08:9d:
41:17:34:44:c5:0f:30:6d:96:04:eb:40:12:b6:93:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:86:BD:19:5F:90:18:B4:A4:26:24:5E:E9:A4:39:2D:9E:79:61:6F
X509v3 Authority Key Identifier:
keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:af:94:ef:e7:04:e8:55:01:05:c3:f1:c0:9e:76:9f:5b:8a:
8d:71:fe:74:2c:bf:6f:b0:68:61:90:a2:3e:84:e7:af:ee:b8:
d6:a3:9d:5b:e5:68:78:0f:f2:a0:70:f8:21:fb:84:60:6c:1b:
80:c1:d6:bd:5c:79:de:8f:9d:a0:6a:d7:da:e2:29:ee:0e:89:
49:2f:a7:2e:4a:f8:8f:07:28:60:fd:c4:b8:11:7d:ef:bd:aa:
32:f6:ff:99:ce:10:90:02:ba:78:7e:36:4b:55:1b:6f:6c:a6:
57:9d:60:72:76:89:1a:fb:ab:37:63:a1:6b:91:37:e7:20:30:
07:bb:11:87:3a:c9:da:b9:12:75:04:5a:d3:44:13:c7:87:24:
3b:9c:e6:26:8b:eb:2f:f8:df:61:ee:49:ca:82:47:b3:ca:af:
09:56:40:56:2f:ef:54:51:21:8a:89:b6:1b:2d:d9:3d:2b:44:
99:fa:16:ea:5c:7e:34:d6:3e:b0:5f:35:8f:43:11:84:94:ba:
f0:39:7f:04:1b:40:2a:da:d1:82:81:94:b8:6d:77:21:b7:98:
40:37:fd:63:a5:08:c9:f4:0f:22:9e:67:4c:06:66:7f:5c:84:
22:28:a1:b6:ca:b5:37:32:87:31:ad:20:77:0d:bb:a3:22:97:
e9:39:f0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:56:07 2025 by rpki-client