Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: rp+7DYmDiS/DQEYJAlN2mfPr6KyDsT6HeB+bNSXPizg=
Subject key identifier: 74:5A:22:3E:58:0A:DC:96:C2:38:F9:F3:F6:63:49:56:6F:6E:A5:8B
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 01965915512D4E6B2D43726A00AD70A374DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0E8D
Signing time: Mon 21 Apr 2025 16:01:31 +0000
Manifest this update: Mon 21 Apr 2025 16:01:31 +0000
Manifest next update: Tue 22 Apr 2025 16:01:31 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: TTpDLYjcWdLWcRPt+Hxls15esOrXloavD8JJwIQxYdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:51:2d:4e:6b:2d:43:72:6a:00:ad:70:a3:74:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Apr 21 16:01:31 2025 GMT
Not After : Apr 22 16:01:31 2025 GMT
Subject: CN=745a223e580adc96c238f9f3f66349566f6ea58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:95:a9:ae:74:cb:ea:cb:0c:77:b9:6f:4b:
ca:cd:f8:eb:25:3a:31:3a:83:ec:da:74:ee:16:29:
0b:d0:3a:bf:8d:25:1b:dd:40:64:06:ce:c0:fc:87:
47:e2:80:88:0b:07:b4:d4:d1:a1:49:3d:38:0d:ff:
a1:29:4f:19:e7:91:02:e0:38:f7:34:e7:5d:d7:58:
a6:4d:67:ba:34:56:3d:75:9c:a0:8a:d5:7a:83:dc:
d0:a6:93:62:0b:79:a1:08:e2:ac:1c:ba:80:b1:5a:
b9:18:7e:af:9f:b2:47:84:72:cf:9e:6c:89:ee:6e:
33:5f:f6:8b:08:34:9f:7b:3c:d3:c5:d8:2f:5a:34:
53:b7:95:c1:63:c9:95:00:72:50:64:ba:86:5e:fe:
0a:42:73:fb:e5:22:8a:08:c0:6e:96:d4:19:dd:ad:
e8:11:2b:c4:a7:33:f4:5e:84:d3:75:a1:9d:b1:85:
08:67:5c:27:9e:0b:91:79:44:59:14:ae:70:16:ef:
05:9d:39:73:1e:e9:16:49:32:0c:9e:ac:f2:2f:d0:
24:12:21:29:7b:54:49:2f:bf:5d:2c:9c:d2:13:cd:
28:cd:60:64:1c:1e:50:dc:a5:01:5e:fd:71:aa:b8:
55:00:ce:8a:76:bf:4d:30:c1:79:88:e5:a5:8a:91:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:22:3E:58:0A:DC:96:C2:38:F9:F3:F6:63:49:56:6F:6E:A5:8B
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f6:a7:b5:ab:38:94:2e:a3:f9:b1:9c:f4:11:47:26:6c:16:
db:e0:64:c1:47:a8:15:88:06:3f:b7:95:4d:49:f7:46:98:b5:
99:2e:67:c3:f4:8f:cb:dc:f2:25:a5:31:5a:73:9e:dc:2d:6f:
6f:e3:42:8e:95:0d:c2:43:5d:cf:bd:80:88:de:05:7d:99:e6:
4e:90:8a:2f:df:63:86:b8:47:e4:28:75:17:76:7a:43:d2:f2:
76:f8:bc:2b:8f:d9:2a:8e:1a:04:be:77:9e:cb:e8:e1:20:6a:
df:c4:2b:73:9b:34:3d:e3:72:5f:ed:1b:d4:04:79:e1:83:f6:
76:eb:83:58:c7:0c:cd:8b:87:7d:57:c3:01:41:51:d6:37:1e:
4c:32:16:80:53:8e:22:df:35:09:3c:5e:ea:69:0f:32:33:f4:
a1:a4:df:2b:b2:21:20:a9:9f:af:2b:7c:ff:07:74:f0:9e:85:
2e:b5:16:11:55:6c:15:27:9b:36:8f:65:b5:40:c1:70:11:6f:
98:42:57:a2:b7:19:42:38:37:fa:0e:2f:f7:cf:22:ec:06:66:
3f:0f:e0:f9:28:6c:3a:ac:ad:4a:ee:bf:ea:24:96:6b:45:df:
96:64:62:0d:ef:e7:50:cf:47:79:69:69:93:d1:49:31:24:d9:
b0:fe:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:58:57 2025 by rpki-client