Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: mjXtDBoLi2nhvyq6xc9/Zq5c+QKqL91Nu9cRmAn/R54=
Subject key identifier: 07:39:4B:EC:3B:29:71:61:57:22:77:D6:8C:7C:CB:84:E9:DC:B1:96
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 01965CF2349FFD9E767CB964ABC5321DB851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 0868
Signing time: Tue 22 Apr 2025 10:01:39 +0000
Manifest this update: Tue 22 Apr 2025 10:01:39 +0000
Manifest next update: Wed 23 Apr 2025 10:01:39 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: Nbgv4MeJVamUI1JZBdmOOfti62LEjzeDU0GXZ61hnz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:34:9f:fd:9e:76:7c:b9:64:ab:c5:32:1d:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Apr 22 10:01:39 2025 GMT
Not After : Apr 23 10:01:39 2025 GMT
Subject: CN=07394bec3b297161572277d68c7ccb84e9dcb196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:24:2d:95:90:69:29:51:cc:82:72:ae:7b:
d4:8d:42:91:c1:5f:9e:0a:e0:58:b7:86:3c:9e:ec:
a8:c7:76:52:81:9d:54:93:98:d7:67:18:a9:a3:e2:
1b:62:1b:ae:4f:d0:df:12:04:0c:92:34:8f:07:00:
76:03:33:88:16:62:80:00:c0:25:62:3a:65:12:d7:
46:0d:c1:27:03:6b:c3:ca:97:98:dd:c5:32:90:53:
e1:33:a9:3d:22:21:ce:a2:5f:89:4b:b3:ce:7a:47:
20:07:e1:22:f9:40:39:08:15:88:1f:4b:93:f4:7e:
5b:05:62:31:0d:39:b5:1a:6f:de:32:e4:c9:e9:bf:
cf:7b:df:ca:56:0c:a0:3a:3b:f2:07:32:04:0b:d7:
45:f2:1f:ad:e6:b1:8d:fb:f5:c7:25:d5:81:b6:1a:
9e:7e:e0:24:59:22:fa:eb:58:19:95:72:48:57:01:
4d:1a:4c:81:11:85:c5:86:b3:82:e0:7f:91:97:9a:
53:04:65:25:15:00:58:68:2c:44:08:cf:bc:11:1a:
54:6a:7d:cf:de:71:62:4c:67:3a:c6:55:3a:cd:e3:
22:c9:71:79:69:1f:3a:4a:a4:33:8e:26:3a:e3:6e:
b7:fa:4e:0e:d8:5c:51:03:18:6d:b8:4a:5e:25:f8:
0c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:4B:EC:3B:29:71:61:57:22:77:D6:8C:7C:CB:84:E9:DC:B1:96
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:15:fe:41:48:1a:60:ab:ac:3d:4b:73:e5:3f:da:60:30:76:
40:f0:a7:f1:81:d5:92:d9:9f:f5:ab:22:b8:c4:dd:fe:8d:25:
4d:14:34:85:1a:ac:fc:e8:b7:2d:af:13:11:0c:d5:1b:4e:0f:
ca:82:54:ea:a8:06:47:28:cf:a0:e0:e2:bb:f9:60:3c:71:4c:
a7:14:f9:83:5c:84:2d:1d:de:f6:2a:1e:2b:90:c2:c7:dc:0c:
c4:1f:f1:bc:ed:3f:d3:f8:66:36:24:36:72:95:1e:0e:08:13:
d7:71:34:d1:97:5e:12:bc:87:b6:ea:61:1a:ff:46:3a:43:f1:
da:ff:15:53:90:49:eb:8a:ee:01:73:7b:9b:39:88:50:fc:c0:
d2:e4:dc:37:bf:c1:84:09:dc:e3:e6:f9:47:1e:ed:31:15:3c:
3b:cd:0f:95:e8:1f:a0:6a:e8:13:06:08:2f:0f:46:d1:31:a9:
d8:11:7a:d3:07:4c:02:6a:2a:08:2f:10:d5:f9:12:1d:8a:9b:
8d:8a:4a:9d:cb:a1:83:fe:68:d0:41:33:99:1b:c4:79:86:79:
1d:76:fe:dd:2a:8d:26:2c:07:68:87:6c:e4:dc:81:b0:62:5c:
4a:2e:e4:de:37:27:81:e7:26:52:22:c2:80:09:70:a7:06:80:
08:25:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:25:10 2025 by rpki-client