
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
File: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft (raw, json)
Hash identifier: t11ll5IEcJD3yq9YXHw5pV1oECdWnKFLYtn2qr0HH6k=
Subject key identifier: DB:DA:64:3B:04:EB:DB:48:88:83:BB:FC:C9:AF:16:44:65:75:E2:D9
Authority key identifier: 64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
Certificate issuer: /CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Certificate serial: 01965D5F8C613ECFC64B1C26F6263910CAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
Manifest number: A9
Signing time: Tue 22 Apr 2025 12:01:04 +0000
Manifest this update: Tue 22 Apr 2025 12:01:04 +0000
Manifest next update: Wed 23 Apr 2025 12:01:04 +0000
Files and hashes: 1: ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl (hash: 3mqRvb+ZjBC19WFfqRIpaGz8XuRIDVhuNC4vJAt1Qi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:8c:61:3e:cf:c6:4b:1c:26:f6:26:39:10:ca:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6491a9a155658555b608b5eb95b2b5155e2f43a7
Validity
Not Before: Apr 22 12:01:04 2025 GMT
Not After : Apr 23 12:01:04 2025 GMT
Subject: CN=dbda643b04ebdb488883bbfcc9af16446575e2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ee:9f:47:c5:87:9c:d4:e6:23:f3:58:17:10:
3a:fc:b5:c6:d2:d7:8b:ae:f8:51:33:bd:2d:bc:c8:
6d:ce:5c:08:5c:91:00:c4:31:01:76:a2:ea:ab:a5:
53:80:79:74:bd:80:f9:27:77:a5:74:b0:11:37:72:
86:0b:87:1a:9e:89:b5:0d:99:f0:0d:0e:d8:d5:f8:
5c:31:1f:3e:e0:58:04:e3:23:e6:2f:44:4c:8e:b4:
9c:4b:d6:84:4e:50:2e:00:ce:15:e5:c0:3c:56:49:
81:61:ba:cc:de:2a:dc:d3:ad:b8:72:16:0c:d8:37:
83:44:86:b4:83:bc:1d:8a:9b:16:69:f4:fa:28:d3:
ea:68:35:b6:2b:24:50:1c:cf:43:36:09:14:00:7b:
dc:ac:45:03:38:16:26:f8:8e:58:8f:30:f6:34:c7:
b5:ae:46:5b:ff:25:d7:0d:c4:b0:e5:c5:bd:b3:f1:
79:a1:c1:93:6f:7c:57:88:6c:f1:41:b2:46:51:ea:
78:c1:04:37:d7:f2:32:d7:08:25:39:e6:21:d8:90:
35:28:fe:a9:e4:ee:ce:ef:a2:2e:47:17:8b:bf:19:
ec:0b:32:06:2d:ee:3d:69:b1:ef:93:71:99:c9:34:
2f:35:6f:3f:49:e5:9c:d4:0f:1e:ff:c5:01:90:fe:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:64:3B:04:EB:DB:48:88:83:BB:FC:C9:AF:16:44:65:75:E2:D9
X509v3 Authority Key Identifier:
keyid:64:91:A9:A1:55:65:85:55:B6:08:B5:EB:95:B2:B5:15:5E:2F:43:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f60387-1432-407d-89bc-540b7d181882/1/ZJGpoVVlhVW2CLXrlbK1FV4vQ6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1d:7a:86:5e:86:4f:68:8b:d4:12:4c:a0:8b:2e:ed:a4:ca:
b4:60:31:93:84:97:9a:56:c6:50:e8:ea:d0:a9:0c:c6:f1:66:
f9:14:ad:f4:58:ec:81:90:f7:e9:10:0b:83:52:d8:16:29:93:
07:84:6d:40:01:4a:6e:9d:cc:f7:a2:95:85:2f:b9:d3:69:bf:
af:c1:d1:b2:5b:6c:a6:bc:bb:48:c9:cc:bb:22:31:c7:cd:e4:
a8:7d:f3:b2:6d:d9:b8:1a:e0:d9:df:53:ed:4e:e9:fd:b2:58:
58:d1:dd:41:ac:9e:1d:cb:c7:cf:a4:b5:04:59:84:65:b7:62:
f0:56:00:09:b7:eb:05:6e:50:53:28:ea:c0:f1:c6:c2:ff:81:
41:54:4e:11:8f:21:4b:14:64:53:aa:a1:a3:2f:d7:de:7e:17:
95:44:e5:28:46:d9:a1:ac:9a:1a:15:8d:35:5a:e1:95:17:54:
33:a1:02:51:16:d4:bd:d1:45:9a:45:74:29:15:3a:0d:5c:a1:
b2:61:fb:cc:91:d3:71:ce:4c:9e:fd:e4:01:c8:13:94:60:9a:
46:cd:5d:77:9f:77:c6:08:2d:7f:48:66:c4:9e:a0:d4:6b:aa:
e2:54:06:3c:34:8d:40:14:3e:55:4f:00:e3:bd:67:ee:dc:b5:
30:31:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:33:19 2025 by rpki-client