Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: y020Czn5A1aRcWXlXy3fpTGsrRTpah00VvCFENvb3+k=
Subject key identifier: 45:A7:48:15:55:C0:AA:68:77:E2:E0:71:E4:34:CE:F8:F6:51:E9:0F
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 01965CF0DD54C56E0096556C4CC6E71D9A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 0FC3
Signing time: Tue 22 Apr 2025 10:00:11 +0000
Manifest this update: Tue 22 Apr 2025 10:00:11 +0000
Manifest next update: Wed 23 Apr 2025 10:00:11 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: nFZSswAlWUuGRdWjRF5aLTp6Wwncu7Jd6HefjE9pWB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f0:dd:54:c5:6e:00:96:55:6c:4c:c6:e7:1d:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Apr 22 10:00:11 2025 GMT
Not After : Apr 23 10:00:11 2025 GMT
Subject: CN=45a7481555c0aa6877e2e071e434cef8f651e90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:93:cd:30:87:04:4c:6e:a7:1e:2a:8d:ea:
a7:72:d7:65:7d:8e:57:6b:94:75:cd:8e:f4:f3:0c:
9c:49:f0:90:a6:9d:d9:80:94:5d:1a:a9:74:75:4d:
10:34:02:11:38:43:49:c1:e1:9f:e7:fc:73:04:92:
64:68:78:21:b5:1a:1e:24:53:36:93:48:02:f6:6e:
8a:84:47:a4:17:cf:88:5c:55:3e:a9:b7:0e:6d:7e:
42:90:ef:c4:e7:7a:20:bc:2f:6e:53:5c:42:55:b3:
c7:e9:e6:5b:63:ce:f9:4d:21:5b:58:9e:8b:0f:d9:
f0:48:ef:1b:c4:4a:69:78:5f:6f:90:e9:eb:a2:78:
5d:fa:7e:3f:c3:7e:37:73:1f:3a:d2:ed:b3:53:f7:
8e:f2:e8:65:cb:29:eb:50:50:cc:4b:f1:8d:bb:77:
e2:b4:cd:e6:51:2a:9a:09:70:0d:61:eb:fd:fd:66:
cd:b6:b4:90:84:1b:9a:5c:6a:7d:f3:c5:83:a4:ee:
7a:81:ea:33:70:dd:0b:ad:d9:4e:42:34:01:14:86:
ea:2e:14:b6:ba:97:30:cf:ca:81:e4:19:22:11:64:
9c:64:64:ca:2f:3e:6b:af:00:0d:6d:b9:2f:e0:db:
da:ec:21:70:fd:8a:05:67:43:57:c4:91:42:19:81:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:48:15:55:C0:AA:68:77:E2:E0:71:E4:34:CE:F8:F6:51:E9:0F
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:35:68:b6:a1:ef:18:d9:13:98:c4:d6:f1:d5:f4:89:9a:be:
f0:2e:79:64:5e:4b:0b:96:2e:99:28:d2:2f:e5:b2:4e:e2:e5:
e5:30:f7:81:1e:4d:34:16:bd:b6:79:56:5f:34:1d:05:a0:f1:
0d:67:87:76:dd:59:d9:b9:38:dc:3e:32:4a:a4:f6:7c:0d:18:
6d:6b:de:c3:aa:c7:da:4c:b9:0b:6f:ca:40:da:69:af:b6:3c:
fb:ee:1c:0b:a8:1c:99:70:3d:6f:97:c0:b2:9e:e4:7e:48:29:
54:d9:45:6e:19:81:2e:56:e5:37:27:00:6d:ec:ef:ba:2d:1e:
6a:3d:6d:11:05:b3:52:b7:43:88:45:07:b9:50:be:c3:3d:2c:
e9:60:65:38:f8:aa:da:b5:24:a1:ef:0a:69:c5:2c:54:23:31:
90:6f:51:23:9f:bf:1a:d0:4d:53:cb:c6:dd:ca:11:63:5a:23:
08:9b:e6:7c:e1:d0:ca:8a:f0:c9:7e:3f:9b:37:7a:0e:dc:b5:
7e:fa:9c:a0:18:a4:5c:a4:0c:36:4e:45:c2:e5:47:9b:c1:09:
27:6d:fc:fd:75:cd:a4:2c:de:4b:5e:72:dd:9b:0b:3f:23:b6:
cb:e7:fc:11:73:e8:18:db:bc:fe:a3:eb:6d:a0:45:48:3e:ed:
76:0c:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:58:57 2025 by rpki-client