Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: onavigoauAiNTV4x0KYNCidOm62FzqcNoc1tLA41EBo=
Subject key identifier: 63:49:90:F0:49:B9:D9:B8:31:21:06:19:D5:1E:40:57:BC:78:9B:D1
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 01958C60B9BF4DA911FEFDBA0C862E75DF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 0DF6
Signing time: Wed 12 Mar 2025 22:01:44 +0000
Manifest this update: Wed 12 Mar 2025 22:01:44 +0000
Manifest next update: Thu 13 Mar 2025 22:01:44 +0000
Files and hashes: 1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: GvkYwhwc2qJerHWQ7YyLB2mwYxteFppKUF0kOEEF3aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:b9:bf:4d:a9:11:fe:fd:ba:0c:86:2e:75:df:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Mar 12 22:01:44 2025 GMT
Not After : Mar 13 22:01:44 2025 GMT
Subject: CN=634990f049b9d9b831210619d51e4057bc789bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:92:e1:a8:6a:74:91:e8:25:f0:6b:54:30:
73:73:ab:7c:db:2c:e0:3f:72:bf:5b:3b:fa:bd:11:
2f:90:ca:3e:29:2e:34:32:51:39:09:01:bc:78:be:
29:de:53:4e:37:79:d6:4c:4b:6e:90:a7:bc:c8:2f:
0f:84:49:8e:b8:49:ca:6c:fc:80:99:ef:7e:56:41:
66:96:46:66:a7:21:36:5c:68:22:aa:ac:49:0d:76:
13:42:19:6b:4f:18:6f:e1:16:3a:bb:88:a8:68:77:
d3:cd:44:f0:56:4c:f8:2a:06:d4:80:d7:63:25:bd:
62:f6:e1:23:dc:a6:70:f8:8e:df:53:ea:ba:d4:10:
73:46:e6:e0:25:c5:c5:d0:2e:ce:3e:be:8c:5b:c4:
21:e3:ee:4c:0f:90:e9:11:7f:0e:da:f9:49:b2:37:
e3:2b:73:84:ff:7c:94:3b:a9:68:61:13:b6:2a:c3:
ce:af:35:c4:dc:14:8e:d8:5e:6f:07:ab:54:ca:97:
5d:e2:fc:44:b3:b2:e8:98:05:98:71:18:71:a4:a0:
7e:48:d0:96:01:95:33:86:e5:0a:57:2d:5c:b6:77:
88:7b:53:6a:7e:7c:98:a6:a4:1c:23:b9:c6:69:8d:
71:93:36:97:94:bf:66:08:03:bc:a6:3b:58:9f:63:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:90:F0:49:B9:D9:B8:31:21:06:19:D5:1E:40:57:BC:78:9B:D1
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:04:94:42:43:88:32:58:45:8f:17:52:4d:b0:26:04:d0:1f:
02:1f:c3:8a:19:fd:c6:16:60:2a:2d:a2:b0:df:ea:5f:06:58:
e2:e4:10:11:ca:2f:92:65:20:5b:e7:0c:18:23:97:00:ba:a1:
9a:ea:90:f1:54:1b:41:cd:a9:7a:b8:d7:d4:bf:ca:ca:10:d2:
73:c9:df:fd:55:6f:4e:93:38:ec:b7:16:88:54:36:ed:94:d5:
02:12:30:fe:76:e3:0c:82:24:af:c3:6e:5c:8c:a0:25:8d:e7:
c2:32:e4:b7:51:90:c9:6b:d0:03:55:96:8e:6d:bd:3c:0f:23:
23:32:30:7c:b3:b1:d8:5e:7c:01:9b:3e:98:fc:b6:ca:a1:b1:
a2:96:75:b4:04:ef:ab:12:a6:fd:09:42:f5:2e:30:1f:80:7e:
a7:75:df:77:79:b5:94:9d:04:94:7c:8e:b6:f8:16:3d:d8:1d:
29:1b:21:47:dc:eb:36:cf:d7:fb:72:56:9f:4a:bb:b0:37:c1:
99:7c:ec:7f:6e:7c:64:97:dc:13:e8:ad:bd:7d:8d:2f:50:d9:
f7:da:13:b5:66:8c:e4:aa:c1:ed:d2:c0:9c:81:ec:d7:10:e1:
ed:6c:cb:29:4e:b1:fc:8b:ef:7e:b7:a3:ff:06:7d:6f:c9:08:
6b:76:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:11 2025 by rpki-client