Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier: IxEsFwr3o4bWeCEns9d7qbGNDrX+kwQlEjF/DgIMvi0=
Subject key identifier: 51:FD:CF:8E:CF:F5:1F:FD:E7:5E:01:AB:74:79:05:BB:55:6F:E6:7F
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial: 01964A7D55E02D8295DE3129C88F2CB46BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number: 125F
Signing time: Fri 18 Apr 2025 20:00:50 +0000
Manifest this update: Fri 18 Apr 2025 20:00:50 +0000
Manifest next update: Sat 19 Apr 2025 20:00:50 +0000
Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: hGg5GpK0g5Mf0gEg0Y3lH9Mq9wedjoLi2ylMqWoASxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:55:e0:2d:82:95:de:31:29:c8:8f:2c:b4:6b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Validity
Not Before: Apr 18 20:00:50 2025 GMT
Not After : Apr 19 20:00:50 2025 GMT
Subject: CN=51fdcf8ecff51ffde75e01ab747905bb556fe67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:20:fc:a5:e6:38:6d:c9:92:f0:79:9e:a2:
ff:8b:7a:cf:28:8f:95:c0:f4:bc:2f:e4:d5:85:77:
e0:45:97:74:8c:53:e5:0c:81:10:45:c3:c5:d2:1a:
15:2d:a1:39:b2:9d:a5:2a:8f:83:f6:e5:2c:7d:06:
91:98:5f:1a:54:b9:3b:31:77:75:f8:8d:c8:17:06:
c5:64:e7:88:3c:0e:03:94:8b:e3:fd:e4:3a:ec:33:
a4:e2:8e:2e:4b:fb:05:7b:0f:17:d9:d3:95:c2:e9:
76:8a:7d:15:aa:8d:b0:98:f8:4f:23:44:94:30:97:
dd:7c:6b:58:b0:d9:f9:91:b2:22:81:9e:27:e7:e6:
ae:9d:ee:2d:54:23:9a:97:ba:f9:34:d9:6b:28:9b:
c3:bc:f2:19:63:22:a4:80:2a:32:48:cd:dc:ee:98:
17:77:90:ee:77:0d:34:05:3e:dc:8d:a4:69:79:9e:
c0:4d:0a:8e:b0:2b:7e:42:69:c0:d1:c7:b3:6e:bd:
e3:e8:8d:9e:a1:9c:db:87:58:79:6f:a0:0c:4b:fe:
67:a6:49:a8:6c:1d:58:40:7d:9b:89:4f:d9:5a:7f:
21:d1:f2:b2:9f:19:ab:69:99:a4:27:66:36:d6:ec:
1d:9b:ad:c9:49:99:41:99:0c:a7:1f:b5:70:cc:ff:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FD:CF:8E:CF:F5:1F:FD:E7:5E:01:AB:74:79:05:BB:55:6F:E6:7F
X509v3 Authority Key Identifier:
keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:30:42:46:62:30:ca:c3:e8:7e:2a:e5:13:4d:fb:5c:9d:
7b:ac:ae:74:fd:11:8c:75:3d:0c:74:04:08:d9:af:59:08:64:
87:26:e0:bc:dd:2f:c4:10:66:f5:8e:82:b0:41:d8:33:9e:62:
e4:48:4b:64:e2:6d:25:ea:a0:c8:5a:54:23:cb:bf:73:e1:22:
2c:e0:5a:22:17:75:88:86:39:84:11:e7:75:b1:76:63:eb:a5:
62:77:e4:d0:ce:6d:3a:24:a5:1c:9b:be:75:ba:a3:67:4a:8a:
a2:9d:d4:9c:65:28:fd:d3:8b:ab:7e:a7:45:9b:50:df:ed:84:
3b:73:5c:7e:87:96:87:60:c3:08:9f:be:4b:0a:08:d2:33:6d:
4a:97:d7:d4:c7:7f:5b:60:97:2c:dc:6a:c3:fd:26:e8:27:0c:
11:bc:8a:53:b3:b0:76:6f:f9:d6:8f:e7:b9:db:ca:41:a4:db:
9a:43:4a:f4:31:16:2e:bf:01:fe:42:d7:eb:a6:d5:77:0d:88:
43:d6:9c:31:38:6c:8e:f8:0b:6a:80:97:97:c5:2c:23:93:d3:
d6:12:e3:48:39:fb:87:74:ac:42:ea:35:ee:ee:9d:21:fc:a8:
d5:6b:1a:26:99:5a:bf:5b:8e:62:18:13:f8:29:9e:9b:ca:db:
d7:5c:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:07:25 2025 by rpki-client