Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json)
Hash identifier: qwXLV3CrobU+hsKW6pUCJXZZkFljDqct9va4aAXU034=
Subject key identifier: 09:B4:B4:7D:CE:B8:96:24:E6:CF:22:A3:39:BE:33:7F:80:06:1B:08
Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Certificate serial: 01965349C79EC28D3333EA47C8E70F06960F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
Manifest number: 0E5D
Signing time: Sun 20 Apr 2025 13:01:06 +0000
Manifest this update: Sun 20 Apr 2025 13:01:06 +0000
Manifest next update: Mon 21 Apr 2025 13:01:06 +0000
Files and hashes: 1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: e1iWNM+9mGbgGhsfzMY7pliyPVMYHX33DIPWBlG8iZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:c7:9e:c2:8d:33:33:ea:47:c8:e7:0f:06:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6
Validity
Not Before: Apr 20 13:01:06 2025 GMT
Not After : Apr 21 13:01:06 2025 GMT
Subject: CN=09b4b47dceb89624e6cf22a339be337f80061b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:37:a0:00:54:42:f3:3f:35:43:50:7f:56:
98:75:ac:cd:20:2e:e6:cd:35:b8:ec:1b:3a:2f:cc:
07:2e:da:6f:4e:ab:ea:85:c0:a6:4d:7c:24:f4:af:
8c:cb:22:f5:bb:38:3c:f6:81:c9:d5:06:65:53:36:
3d:a8:05:42:87:15:a4:91:dd:c1:a0:88:2f:ed:91:
95:ae:20:b9:96:0b:cb:55:2f:d6:f3:fc:2a:b3:75:
be:79:eb:81:75:2d:b6:2d:0d:d3:73:d1:89:cd:cb:
9f:6b:a5:4d:20:de:82:9c:b2:07:3c:3b:de:95:b4:
2d:2a:1b:1f:25:7f:6e:50:b8:21:2b:74:f7:ef:8b:
b3:75:9d:bf:1d:17:62:28:96:3d:71:07:5e:d5:60:
4b:75:b4:bf:24:4b:8e:24:e8:59:08:ed:d1:83:ef:
32:30:c0:14:a8:e8:20:e8:06:15:07:53:b8:a4:e0:
cf:dd:12:a0:00:3e:c0:d0:3f:d4:22:6a:4f:46:39:
d7:bd:9a:fe:f9:92:ff:d7:56:57:4c:ef:6f:b8:ca:
6b:b1:64:6b:3f:40:13:c9:bd:1e:f9:3b:38:34:da:
f4:ff:aa:6e:0e:81:f6:5d:e5:60:72:ce:24:f8:4a:
c4:86:8f:57:2f:2e:7f:df:14:98:d5:de:1c:3f:89:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:B4:7D:CE:B8:96:24:E6:CF:22:A3:39:BE:33:7F:80:06:1B:08
X509v3 Authority Key Identifier:
keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e9:0e:9b:e4:44:10:fe:59:6b:ae:8a:61:42:52:c1:77:37:
81:9e:c4:d7:4d:a0:a1:40:d3:9e:4f:27:59:f9:3c:4a:f3:db:
47:74:df:9d:94:91:f1:60:c9:ce:3c:55:b3:e0:05:75:24:00:
86:a5:e1:f4:7d:7d:92:49:b1:38:b3:ab:3e:ab:b1:56:10:05:
b7:a8:c1:5a:2a:75:67:fa:79:bd:b7:19:43:e3:2e:3b:76:c5:
56:fc:49:87:4b:fd:cb:ed:22:f6:b6:43:a5:5f:6f:ee:48:23:
11:3a:8d:6c:4a:a7:bc:a7:d9:59:a9:74:6f:d2:9d:e5:cb:f7:
2a:a1:d4:c8:8a:33:ef:75:72:75:2e:4c:6d:52:6f:56:28:e6:
b6:5b:dc:66:ec:1c:ee:4b:9d:10:fd:ef:56:6a:02:ff:b6:1e:
f3:54:76:24:8a:d6:dc:1e:5a:a9:f6:7e:14:56:9c:db:b4:a0:
c3:9e:11:f5:70:78:a1:fc:43:f6:d2:b3:bd:f6:7b:03:8f:38:
84:57:20:34:1f:d9:c3:2e:d0:82:00:8c:f8:ae:aa:01:e6:b1:
a9:0f:f8:8f:58:f8:37:8f:eb:70:2e:91:55:1e:d0:39:77:24:
de:c4:d3:47:c1:67:bd:27:47:74:b2:02:4f:14:c4:0b:bc:56:
03:99:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:16 2025 by rpki-client