Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: lckrfpGq2+ME42R5//YmIoc461npsarz9XjDV4oZbJE=
Subject key identifier: 01:C4:4C:D8:07:6D:4B:04:EC:BB:44:23:99:F6:D2:43:C7:A0:37:77
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 01964F6D3DDEABEB4530D1C562DEB8969B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 19:01:21 +0000
Manifest this update: Sat 19 Apr 2025 19:01:21 +0000
Manifest next update: Sun 20 Apr 2025 19:01:21 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: Uu3wBplAI11YtK4zqdlM8vtt6o1CX10jY2OW7noez4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:3d:de:ab:eb:45:30:d1:c5:62:de:b8:96:9b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Apr 19 19:01:21 2025 GMT
Not After : Apr 20 19:01:21 2025 GMT
Subject: CN=01c44cd8076d4b04ecbb442399f6d243c7a03777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:6d:a7:27:40:0e:dd:4e:e5:1c:39:ba:dc:
30:b2:f0:c3:69:08:1b:08:1e:6d:32:16:29:62:4b:
5f:35:73:d1:82:0c:ea:d3:88:fb:8a:e4:c0:0d:50:
97:54:d4:22:dd:3f:cb:0b:fe:b5:7e:df:11:ad:4f:
59:bd:dd:d3:b6:24:f0:45:1f:ae:ad:6f:36:17:86:
46:d3:12:b3:f9:fc:28:e5:bd:c0:47:c4:a3:7b:db:
c5:5a:d0:d0:6c:d2:97:0c:89:24:23:63:2c:fd:30:
bd:e9:d6:15:13:37:e5:d6:45:f0:73:f2:da:6d:fd:
dd:99:59:6e:a6:21:6a:47:f7:be:be:68:4e:86:5d:
23:ee:d5:75:7a:77:9a:dd:c6:00:f1:86:9c:95:d9:
5d:88:66:f0:90:f8:93:31:bb:ce:2d:ca:2a:cc:ae:
71:c9:7d:0d:8e:86:95:ed:19:03:36:21:8c:f8:19:
2c:82:21:05:73:4f:93:0c:66:63:c9:8a:b2:ac:db:
40:aa:98:4f:5f:00:23:51:bc:4c:2f:00:b0:4a:d9:
0a:f5:49:7d:3c:93:59:01:b9:3e:66:2c:32:16:9f:
05:55:c0:13:ee:d9:46:1c:dc:f1:21:ff:c0:bf:26:
9e:e0:31:12:99:13:ea:7b:c7:8a:66:b7:22:47:c7:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:4C:D8:07:6D:4B:04:EC:BB:44:23:99:F6:D2:43:C7:A0:37:77
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bc:4d:c1:28:71:ab:18:66:21:28:59:7a:eb:33:a9:61:c4:
35:b7:e9:95:d1:67:95:f2:03:99:4d:59:3d:72:b6:2d:19:94:
97:eb:42:16:28:58:d0:67:c2:fd:9e:80:9e:d6:7a:75:ff:88:
3a:17:18:1d:c4:7e:62:6b:aa:11:63:c9:41:74:5a:d9:73:8c:
68:c3:9a:65:2c:97:2d:ac:ff:e6:91:66:36:31:35:20:8d:80:
6b:8d:b2:76:03:ae:46:f6:fe:23:df:57:d5:52:7f:40:02:68:
b2:7c:5c:7f:fe:9f:47:e8:80:22:fa:0f:fd:cc:be:92:11:af:
77:15:ef:78:05:7e:f4:33:06:38:0c:8c:69:37:aa:a4:c8:64:
9c:69:f0:25:f9:0b:f1:60:c9:6a:ea:39:78:c7:03:cb:06:61:
cd:68:eb:0c:d2:69:86:8c:3e:d1:39:d5:6e:35:e7:c7:bc:a8:
f4:ac:7d:a2:40:44:36:97:3f:14:26:c4:56:0c:d6:f4:2c:10:
75:43:58:42:f3:9d:74:75:08:9c:82:b1:9e:94:6d:93:29:2e:
f3:ab:52:7a:5a:29:20:12:40:3c:0b:96:17:fa:af:03:63:58:
08:b2:15:e7:6d:52:ae:1d:e3:e9:df:55:09:f4:84:08:fc:92:
9f:38:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:39 2025 by rpki-client