Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: Ei/rs/zjjLKQIC7myLm/DSbJm7iBvyBQqP4S33NwZV4=
Subject key identifier: C0:6F:02:E5:9D:C4:F9:D7:2E:FC:A3:20:03:90:5B:32:84:92:B3:F1
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 019651C9639D4B17CDCB79CBD7F8680DA450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 08BF
Signing time: Sun 20 Apr 2025 06:01:14 +0000
Manifest this update: Sun 20 Apr 2025 06:01:14 +0000
Manifest next update: Mon 21 Apr 2025 06:01:14 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: Tbssl2Kj1gcW2zf1hBecLugqsVF3ve6xAyzPxAMNNC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:63:9d:4b:17:cd:cb:79:cb:d7:f8:68:0d:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Apr 20 06:01:14 2025 GMT
Not After : Apr 21 06:01:14 2025 GMT
Subject: CN=c06f02e59dc4f9d72efca32003905b328492b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:c1:6d:c6:32:9b:23:e6:bd:05:d3:60:24:
ca:7a:36:60:6c:ea:a1:35:64:94:46:b9:20:93:a2:
6c:5f:61:5e:2b:26:8e:16:c9:0d:0c:1b:50:23:78:
8d:9e:2c:ec:22:cb:c2:8b:04:bd:fe:2d:f6:d4:96:
d2:52:0e:4d:fd:07:92:c9:1f:62:58:e2:8c:e8:23:
87:54:0a:0d:64:c8:31:ec:2d:f1:83:5a:f8:7e:de:
55:6f:78:9f:b9:40:77:77:67:00:f5:3d:1f:0f:ad:
6a:45:c2:9e:22:db:20:4a:99:d6:f1:36:0a:d0:28:
7a:b5:50:3f:a5:17:8c:f5:7b:ce:90:c5:54:9f:60:
11:39:9d:6f:1c:d7:0d:81:78:41:d9:80:99:36:66:
00:93:8f:74:48:31:d1:4e:a6:a6:a7:f1:ca:09:2e:
51:d6:08:93:85:de:8c:b1:8e:ba:ae:70:dd:e2:9c:
b6:4d:92:a2:98:20:12:fa:66:2c:a3:81:a7:3e:a0:
f1:f5:da:46:95:0e:2f:a8:41:99:f4:f9:db:19:d4:
a4:d3:a4:cf:e2:38:ce:fb:22:f1:e7:83:6a:25:e3:
fe:b5:a8:58:ee:82:b9:8d:ba:34:df:68:f5:b9:1b:
37:21:51:42:f4:a9:0e:7d:e9:20:15:05:60:c2:c6:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:02:E5:9D:C4:F9:D7:2E:FC:A3:20:03:90:5B:32:84:92:B3:F1
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2c:88:01:61:97:e5:0c:7e:f5:e0:24:66:02:66:5f:c1:a3:
43:74:ad:ea:bb:e5:c5:d0:44:54:f5:7e:7a:71:f6:32:26:34:
ba:e6:1d:8c:55:1f:b2:f6:b4:b7:d5:a3:34:d6:64:e4:6e:cf:
52:3b:af:70:1a:02:4a:66:b4:f4:28:4c:50:32:22:97:b1:48:
03:a9:da:ee:df:5d:5c:25:84:20:54:b7:95:f4:af:0c:4f:a5:
ee:e2:50:f5:f2:11:d5:69:6c:9f:46:28:17:3f:6f:97:c1:60:
6d:cd:d3:b1:f3:d4:6a:19:1b:e6:01:c2:93:76:cb:f8:f6:ad:
8f:2b:dc:ef:e6:94:f2:e3:1b:13:51:de:4c:ab:77:10:89:a4:
5a:4c:61:c0:12:41:1f:9a:9b:4b:d5:4f:f9:4f:1e:56:ea:9b:
f0:2e:a6:33:f3:ec:91:1f:c5:af:ff:e3:af:c0:98:cb:11:56:
30:8a:05:f1:b5:87:3b:b7:71:15:b6:62:d6:b8:d3:7d:92:d1:
80:43:2e:82:b3:ac:f8:d1:a8:e5:78:76:90:50:b4:56:b8:fb:
22:4b:a7:1c:ec:14:20:0b:59:5d:a0:71:88:db:d5:e7:fb:de:
b9:7f:5b:e2:8e:3f:b1:6b:60:e7:47:40:1e:ad:10:22:b4:c7:
7a:d5:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:54:02 2025 by rpki-client