Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
File: ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft (raw, json)
Hash identifier: 43lVa3jwdLG7fbcEC9oXnvtVCy1+4gzWky36HaubptI=
Subject key identifier: 72:81:6A:4E:8A:0B:42:DB:10:38:F0:61:33:A0:F2:67:8D:A0:90:F8
Authority key identifier: 64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
Certificate issuer: /CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Certificate serial: 0196534A1A6FE0B24B19F39D83658B22D001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
Manifest number: 148B
Signing time: Sun 20 Apr 2025 13:01:27 +0000
Manifest this update: Sun 20 Apr 2025 13:01:27 +0000
Manifest next update: Mon 21 Apr 2025 13:01:27 +0000
Files and hashes: 1: ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl (hash: 7E1eNxmKz7aKAB2tN+1ov/xG5jPRF91CvJgVi955XE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:1a:6f:e0:b2:4b:19:f3:9d:83:65:8b:22:d0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Validity
Not Before: Apr 20 13:01:27 2025 GMT
Not After : Apr 21 13:01:27 2025 GMT
Subject: CN=72816a4e8a0b42db1038f06133a0f2678da090f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:35:8f:a8:8a:8b:5b:9d:f6:96:10:27:70:
ee:3d:73:48:f4:13:5e:87:82:d7:5a:11:ca:bc:20:
b8:9a:0f:66:9a:04:04:1f:81:a8:93:a0:63:d8:bd:
9f:4a:78:72:93:84:8d:7a:dd:03:b2:55:99:db:5d:
d7:95:18:b0:60:b4:4e:5b:8f:98:1c:86:98:39:c7:
f8:38:08:06:7e:9a:b4:8c:66:d8:58:43:3d:8f:ef:
69:d0:92:6d:46:4a:a3:29:3f:fa:f2:a6:05:a2:58:
86:0f:5a:1f:09:44:bc:e2:43:fc:27:9b:f3:d5:ec:
4a:e4:dc:9d:ef:6b:3c:e9:4d:8a:86:7a:09:5d:d2:
cc:99:36:ef:42:11:e5:40:0a:8b:8d:b1:0f:35:74:
2b:b4:31:85:0a:ee:15:9d:69:a6:e6:2a:6a:e2:39:
97:4e:f4:10:eb:1b:90:a7:6f:e1:fd:fe:93:09:6a:
bb:d7:d9:40:7a:ec:9b:a7:f9:98:e2:2f:fb:c6:3c:
aa:8b:02:bb:e4:ea:38:c6:05:9a:91:0f:3a:cc:7f:
30:b7:bd:a9:54:36:b5:87:99:ce:88:9b:9f:80:78:
a4:1e:62:0b:65:8b:28:de:75:ef:be:aa:29:4c:51:
03:d8:c1:b8:8b:af:2c:3d:21:d8:cd:00:70:b4:df:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:81:6A:4E:8A:0B:42:DB:10:38:F0:61:33:A0:F2:67:8D:A0:90:F8
X509v3 Authority Key Identifier:
keyid:64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:94:e3:96:a2:d1:1c:4f:4d:d5:28:c5:4d:46:66:53:1b:9b:
0e:d9:b1:d3:15:13:3c:9b:7e:96:89:63:e4:86:09:85:96:a7:
ce:0c:1e:0e:a6:3c:39:d5:a0:2a:ff:b2:92:6b:ff:a7:53:68:
16:0e:60:43:c7:5e:36:2e:84:33:67:d4:77:12:e9:47:dd:09:
43:a3:23:a8:af:0d:b4:55:ef:a6:fa:8e:bd:8f:80:99:ef:21:
cd:fe:0b:cb:73:54:d3:2c:37:ba:f4:72:93:bf:63:fc:2d:a0:
31:5f:52:18:9b:40:70:9e:02:4a:ce:f3:b8:e1:43:bf:26:17:
82:d1:7c:d6:95:1c:b6:eb:6e:26:e9:8a:9e:5f:ba:81:3f:3a:
2c:b4:e7:7b:27:e5:fd:66:ba:6a:3a:e0:5c:b3:84:08:39:20:
4e:66:15:b5:6b:03:37:ed:20:21:22:1d:cc:2b:71:24:b4:1f:
d4:b6:48:3c:4a:e5:5a:2d:8c:a5:87:d2:85:23:23:bc:4f:ff:
15:8a:24:54:5c:b6:4c:e7:66:44:88:5e:0d:86:41:ef:9b:89:
9f:0c:73:76:ae:ac:f9:46:65:35:41:0c:30:b5:c5:ee:1f:18:
29:93:cb:41:85:7a:ec:50:33:ad:2e:2c:83:5b:e0:bc:ae:23:
48:b9:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:47 2025 by rpki-client