Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: 3y50vtFeuXJ4GZnz51/YILwJ4fOkzooIN/3Z3PmwnZk=
Subject key identifier: 4D:08:5C:D3:28:B7:E1:C5:7D:F4:51:A7:00:1C:52:AB:EC:D9:5B:3E
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 019646A039F371682D1270A588C157E1C817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0C39
Signing time: Fri 18 Apr 2025 02:00:27 +0000
Manifest this update: Fri 18 Apr 2025 02:00:27 +0000
Manifest next update: Sat 19 Apr 2025 02:00:27 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: AXoxd6CxeEpiw91HlCH1xCO0hsPreHbuwV39LegyoSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:39:f3:71:68:2d:12:70:a5:88:c1:57:e1:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Apr 18 02:00:27 2025 GMT
Not After : Apr 19 02:00:27 2025 GMT
Subject: CN=4d085cd328b7e1c57df451a7001c52abecd95b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:a2:03:72:de:50:0b:cf:df:65:9f:2f:43:
d1:24:5d:ea:50:e7:d1:2f:19:3e:75:7e:c3:74:7e:
09:00:ba:21:18:ca:ba:26:d8:dc:61:58:6a:59:69:
56:51:51:1c:98:fd:c4:4b:dc:c0:58:6f:18:de:17:
01:6f:9f:93:54:72:7c:b8:2e:3c:2c:b8:0f:c9:f9:
8d:29:a8:1e:54:61:24:08:c7:99:74:79:c3:09:5c:
ca:5d:e3:4c:74:4d:2f:6e:53:82:8c:d7:03:de:e3:
b2:4a:71:ba:6b:77:a5:db:29:b0:eb:82:d0:d4:4c:
93:fc:cd:8d:77:44:ba:57:87:26:be:b7:1c:39:22:
64:0a:c4:51:8c:04:9a:cb:84:f7:c3:eb:ad:a8:9f:
69:ae:a4:ec:03:bd:f9:45:1b:b5:3d:4b:f1:ce:ab:
0c:60:cf:20:ea:a3:d4:92:52:92:06:6e:56:f7:06:
84:b6:0a:df:5d:9d:6b:8c:8f:26:97:d3:65:e9:35:
93:bf:25:85:83:6a:e8:86:99:b1:79:cd:38:6b:04:
83:56:6f:81:7e:ac:ab:95:f6:cf:84:b9:3b:9f:59:
28:6f:97:7f:75:b9:33:c2:20:d4:ad:33:06:fc:96:
c2:9b:35:17:fa:83:90:f2:d3:18:2e:0e:97:a5:9b:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:08:5C:D3:28:B7:E1:C5:7D:F4:51:A7:00:1C:52:AB:EC:D9:5B:3E
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b2:c4:61:99:90:50:d8:0b:9c:e9:04:47:a9:18:e5:9f:1e:
55:50:a8:6a:22:34:55:ed:4c:c2:0e:07:7c:30:d8:de:bf:a5:
40:81:fe:9e:0f:86:fb:a6:4c:fc:ff:22:7c:4e:f4:c7:4c:5c:
3e:44:02:9f:70:a3:88:d0:a6:19:39:9d:7a:4c:80:e3:75:b1:
8a:86:ce:73:28:15:5f:99:d7:51:ba:bb:0b:68:24:0f:71:8c:
23:19:7a:30:4b:b4:e8:62:0f:fb:cd:b8:77:1f:b4:3c:e3:76:
a2:b6:f8:57:ea:1e:0e:d3:22:2d:45:e1:46:c6:80:7d:61:fd:
6d:e4:97:21:0b:b4:77:5a:15:b4:5b:ea:77:1a:b1:d4:19:aa:
c8:32:81:39:c4:c4:42:9d:e6:cc:cc:c3:a4:66:b0:61:43:16:
a3:86:e7:65:ce:82:15:08:eb:9e:83:da:b1:3b:b6:e8:05:db:
33:92:7e:5b:32:75:54:97:ff:e8:16:c6:91:47:5f:50:90:3d:
84:20:ae:27:bb:a6:7b:9c:08:4c:19:02:af:3b:c3:d2:76:82:
b2:16:33:df:37:89:01:79:35:57:c0:30:d1:34:c2:58:f9:d0:
be:36:63:4c:9e:c1:c4:29:29:aa:d5:3e:fd:8d:62:c1:ac:b7:
43:bb:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:03:14 2025 by rpki-client