Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: v3CX5qaPDSaOl4K5QYHeupQ09z055ECQobxwuxLBfrk=
Subject key identifier: 01:DA:94:9E:2B:B7:58:20:67:A7:7E:75:1C:15:13:E5:AF:EF:F1:1A
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 0196451F85C0CA17AD64BF8AFEE90B8CD751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 0A8E
Signing time: Thu 17 Apr 2025 19:00:15 +0000
Manifest this update: Thu 17 Apr 2025 19:00:15 +0000
Manifest next update: Fri 18 Apr 2025 19:00:15 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: e3rgH4h3lo+RkJE8NxkrqcHFGV4Toabg7ph5aZO3wx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:85:c0:ca:17:ad:64:bf:8a:fe:e9:0b:8c:d7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Apr 17 19:00:15 2025 GMT
Not After : Apr 18 19:00:15 2025 GMT
Subject: CN=01da949e2bb7582067a77e751c1513e5afeff11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:2a:65:db:1e:dd:49:fb:ca:5d:1a:0a:f6:
40:a7:52:78:31:88:a5:2a:76:56:41:52:a0:d0:b4:
37:30:45:10:48:5e:b0:dd:f2:de:8f:00:47:f8:be:
e4:e5:b7:dc:35:35:00:1e:e5:8a:b1:dc:98:6b:a0:
bf:d8:85:90:6f:d2:5a:1c:31:57:d3:47:0e:91:43:
6d:7d:87:16:47:64:1d:48:68:b8:84:25:15:03:e9:
14:4b:b1:19:69:18:36:72:12:60:06:84:a5:44:e9:
68:86:c2:dd:8d:5c:9b:fc:61:58:68:a0:57:83:ef:
a7:f8:34:7e:d6:47:de:88:d5:2e:bc:cb:65:81:51:
8c:dd:d3:4d:36:a3:8c:ac:d4:88:43:86:b8:28:3b:
9b:d3:cc:25:a9:36:36:6f:5b:c4:04:f5:81:cd:8d:
98:96:62:44:e7:ed:01:eb:05:22:73:63:dd:23:01:
39:42:01:62:df:67:db:72:15:ea:de:2a:c6:11:43:
13:98:62:9c:04:04:9d:f5:e5:35:a3:0c:6c:2d:a6:
d9:a3:ed:5e:50:81:14:03:b0:7c:06:61:54:03:c3:
48:69:3d:a3:63:f3:08:13:cb:01:da:49:74:52:a9:
a0:b4:d0:70:26:9f:2a:b3:f4:18:7b:93:8a:84:7a:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:94:9E:2B:B7:58:20:67:A7:7E:75:1C:15:13:E5:AF:EF:F1:1A
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:00:b8:db:64:28:ea:31:13:5e:1e:c4:53:cd:14:eb:90:a9:
7c:82:28:a0:de:da:4b:e5:c6:8e:80:c3:23:34:d8:d2:5b:4b:
8c:60:93:69:66:ba:b4:2e:9e:e1:02:4a:34:18:1a:cd:ea:af:
43:ad:c6:28:c3:40:07:d0:61:b7:db:5e:f2:4f:b6:ae:9d:d4:
a9:4c:1a:7c:a8:24:1a:08:26:1c:f9:f7:ce:11:2e:19:17:1e:
4f:4c:35:12:c5:28:6c:14:a6:b3:72:bc:72:8c:1d:a8:90:ae:
03:86:59:2e:df:30:07:f6:9b:2c:f2:34:ed:6f:36:f1:3c:70:
a2:ea:d4:ff:1e:a2:c5:e7:ca:cd:77:43:98:95:dd:e3:f4:e3:
02:52:7d:fd:17:44:a1:0f:00:51:1c:2a:b4:67:7b:4e:25:ca:
f8:dd:a5:fa:93:bf:e1:28:1c:84:87:01:10:07:00:4a:ee:25:
08:71:07:14:04:f3:f6:cb:5f:81:3b:d4:a9:d0:dc:84:37:db:
bc:d2:6e:2e:84:e6:1f:b0:32:68:dc:13:d6:04:99:a4:23:d9:
53:39:64:96:b4:b1:92:73:62:62:8f:c5:b5:05:bd:6d:3e:4a:
59:0e:14:6c:78:36:64:57:a7:dc:2b:3d:14:03:85:17:9b:a8:
85:bb:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:47 2025 by rpki-client