Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier: NEToD44yfuUGGom79Jw5AVcW5dLYt6hG6jsjVm/vxpU=
Subject key identifier: 2D:2F:CF:AD:5F:21:BE:98:0B:3D:4D:5A:9A:4C:57:E5:98:FB:DE:EC
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial: 01965A5E2D2B902FF5117F6C61A4625E6894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 22:00:43 +0000
Manifest this update: Mon 21 Apr 2025 22:00:43 +0000
Manifest next update: Tue 22 Apr 2025 22:00:43 +0000
Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: 7fzJpzwukrxfxuetpkJBiqAFHi3ncZf+tpQxLrpGFTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:2d:2b:90:2f:f5:11:7f:6c:61:a4:62:5e:68:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Validity
Not Before: Apr 21 22:00:43 2025 GMT
Not After : Apr 22 22:00:43 2025 GMT
Subject: CN=2d2fcfad5f21be980b3d4d5a9a4c57e598fbdeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:e9:3b:49:ff:36:71:6a:01:54:e4:4f:5f:
7e:a9:6e:89:d6:2a:a4:8c:5b:08:0b:9d:62:9c:14:
66:df:ae:6b:51:f3:fa:bb:cc:ef:c7:ac:b5:cb:d8:
c4:10:b3:bf:0b:64:38:8f:40:fd:7e:43:20:a8:fb:
b0:48:64:d5:c4:a3:52:a9:76:35:51:61:0b:5c:73:
91:f7:eb:40:87:0f:ca:94:84:06:eb:4d:a9:37:0f:
e9:14:7a:a2:6d:b7:6b:0c:75:5f:a1:5a:75:25:75:
b8:ec:3a:2f:d3:b1:58:e4:ab:27:9c:2c:a1:0a:5c:
51:7f:ec:fd:3c:da:9f:19:c8:0e:78:ee:d9:e9:fe:
78:49:e6:78:3f:d9:81:3f:78:2f:58:f2:0e:2d:cd:
f2:7c:94:97:82:7c:62:63:4d:1f:49:da:68:8a:63:
99:e2:89:dd:87:c8:cd:29:e1:11:f0:c0:29:d3:2b:
7b:73:27:1d:33:4e:2d:e9:36:79:f9:b4:65:79:f4:
c2:36:39:41:28:3c:a6:b3:50:6e:42:a9:2c:c8:56:
28:ae:ec:7f:9a:e7:4c:8a:ef:8a:cc:04:5c:95:a2:
fd:e9:3f:21:44:85:dc:bc:00:e6:30:11:04:91:12:
bc:f5:5d:ce:f1:4e:13:6e:44:e9:9e:8c:05:59:df:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:CF:AD:5F:21:BE:98:0B:3D:4D:5A:9A:4C:57:E5:98:FB:DE:EC
X509v3 Authority Key Identifier:
keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:a3:a9:0d:f7:3f:57:b3:d4:34:5b:9c:16:4b:d7:75:55:
f6:5b:98:ce:ed:70:ea:40:3a:f5:79:f8:7c:f1:b3:cb:e4:44:
6e:98:e2:23:6c:84:ff:23:e6:6e:8f:a6:1b:fb:d5:7d:85:d7:
12:a5:58:8a:b7:f7:2b:12:64:b5:29:06:9b:d8:c1:7b:98:c8:
9f:db:a7:6c:bc:f5:bc:a9:ac:2d:22:28:8c:7a:37:46:63:55:
d8:db:c8:25:04:c0:1c:3b:d4:9d:7b:9d:bb:89:c4:8d:21:03:
1d:a6:9f:fb:3d:37:a6:a4:19:27:ab:99:dc:8c:16:6a:7d:ea:
f4:af:de:e3:e0:f5:d2:cc:b4:d4:83:63:07:d1:86:5c:0b:fc:
e2:0e:60:e9:c9:b2:69:f4:e0:77:d4:63:20:ce:b3:98:8a:83:
19:96:06:43:ba:7e:17:2b:34:74:4d:7c:d8:5c:85:a5:37:0a:
7d:90:23:e3:30:83:c9:3f:cd:05:3c:cc:25:3a:fc:90:ad:c4:
ab:a5:d9:55:1a:4d:af:e6:d0:f0:18:a8:03:c7:e4:1c:73:83:
0c:3f:b2:4c:05:86:f6:a7:af:bb:84:94:86:8e:ca:a6:34:03:
57:b8:32:25:81:c4:7f:36:2f:5f:f1:8d:7b:c3:ed:55:12:d2:
3f:70:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:12:31 2025 by rpki-client