Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: 5bLPiyT99MZLktwnTHqhCOVZQU+M47tAJxmFvqix5lM=
Subject key identifier: 5B:65:CF:75:C8:2F:64:B6:B5:91:D8:1C:79:C7:01:46:A1:19:51:30
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 01958B4D9EC453C0B0016699AAC9040AB39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 0C5F
Signing time: Wed 12 Mar 2025 17:01:14 +0000
Manifest this update: Wed 12 Mar 2025 17:01:14 +0000
Manifest next update: Thu 13 Mar 2025 17:01:14 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: xXI0cd0bm2Mf6Ip4+hyiMmramNTDLGIVeQqwULcqycQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:9e:c4:53:c0:b0:01:66:99:aa:c9:04:0a:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Mar 12 17:01:14 2025 GMT
Not After : Mar 13 17:01:14 2025 GMT
Subject: CN=5b65cf75c82f64b6b591d81c79c70146a1195130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:3f:79:bd:1a:f6:1b:a7:87:78:28:69:4b:
13:67:bb:91:c9:11:30:42:fb:6e:c1:67:58:6a:d9:
10:09:6d:2d:15:f3:be:7f:65:9e:4f:6d:6d:14:fd:
e3:89:ae:9d:d6:5a:08:8f:25:b1:87:97:7b:39:39:
4d:ca:a3:8b:1b:c2:ce:76:43:49:55:5f:32:37:15:
09:9c:52:64:40:d1:52:92:c4:56:8a:ed:0a:4c:03:
5d:46:fc:97:58:db:16:46:86:d4:4c:0b:30:4b:f7:
e1:8e:2c:7b:3e:da:9c:77:fc:b7:23:a4:a4:17:4e:
d0:a3:ca:73:65:c2:e4:10:49:50:3e:d2:d0:f6:ce:
21:b7:21:2d:40:ce:14:63:8f:82:df:f8:be:ed:ce:
7f:d9:c3:72:26:6d:f6:3b:52:d9:83:dd:1a:3f:23:
01:e1:63:1a:88:d4:6e:e5:41:9d:89:6b:14:64:9f:
f0:fb:ee:52:65:97:2d:49:a3:5b:93:7f:a6:a6:7b:
7b:b7:23:c7:fa:8b:e4:c4:e0:75:d1:b7:7f:97:1a:
bb:39:e8:5c:e7:c9:03:83:7e:4a:ec:0c:2d:0e:cd:
19:f8:d0:65:0b:5c:bf:68:84:48:bd:f4:d1:59:9e:
5b:8e:4b:99:7c:03:74:74:84:2f:44:f8:a0:0b:58:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:CF:75:C8:2F:64:B6:B5:91:D8:1C:79:C7:01:46:A1:19:51:30
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d9:63:19:c1:a4:ab:4c:fd:d5:92:b4:c4:1c:84:98:a0:0c:
51:55:af:2b:2b:52:0e:30:3a:53:04:66:67:5d:d9:de:ae:0a:
cb:aa:4d:95:b4:72:c1:81:71:ec:0c:77:8e:b8:22:6f:af:c7:
94:a9:a8:d3:26:52:88:e3:a0:3d:64:d6:4d:0f:b3:f7:07:9d:
50:83:ca:8d:8d:71:59:ac:9d:16:c2:9a:47:1d:6b:f0:f4:b1:
fa:31:d0:f9:22:6e:40:4f:3f:be:9e:09:34:ce:51:db:95:45:
0a:d9:45:5a:1e:70:22:06:a9:65:34:bd:81:dc:9c:b6:9a:b4:
ce:ba:4d:be:3a:67:f1:a2:7d:4a:25:cb:b7:5b:bb:ce:45:a2:
63:25:24:34:71:13:0e:ed:41:44:d1:36:69:bb:ac:ab:4d:a1:
25:b5:dc:ab:52:52:0d:bb:36:f5:aa:20:5e:8e:75:8e:6a:ea:
9a:8a:3f:d2:25:a9:e9:3b:4b:30:60:db:7b:d7:c0:54:8d:fe:
90:f0:49:8e:30:5e:0c:14:34:01:5b:c9:8a:5f:ab:bb:e7:ea:
f8:26:b6:09:dd:9e:e6:a8:db:4f:3b:70:57:85:ae:d0:7e:5d:
cb:e6:7c:f3:60:5b:75:be:b2:20:11:b4:4f:1f:ec:9c:9a:ac:
2f:e4:f5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:50 2025 by rpki-client