Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: MCcImxb5gl4ImAxCq3XakUXBqRPJ+RWe1JTTHUjo41k=
Subject key identifier: 0F:2E:05:9F:CA:78:E6:C8:F3:4C:65:68:B0:F3:0B:D1:17:F7:73:9D
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 01958F9869827ECAB879158E777D84084343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0B07
Signing time: Thu 13 Mar 2025 13:01:25 +0000
Manifest this update: Thu 13 Mar 2025 13:01:25 +0000
Manifest next update: Fri 14 Mar 2025 13:01:25 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: iBtamzaHedUjSymEQI8rqU+MA4IbVVz/VzSE4hx/PDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:69:82:7e:ca:b8:79:15:8e:77:7d:84:08:43:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Mar 13 13:01:25 2025 GMT
Not After : Mar 14 13:01:25 2025 GMT
Subject: CN=0f2e059fca78e6c8f34c6568b0f30bd117f7739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:5b:69:54:18:06:ef:0d:f5:de:3a:eb:00:
93:ce:50:6c:a0:7b:a8:ec:6c:29:cb:84:13:57:4b:
04:ff:a5:88:bb:a7:21:fc:ec:85:ee:d4:1a:aa:9d:
cc:57:7b:c9:b8:9f:d1:5a:9b:44:b3:48:b7:50:a7:
98:7a:8f:ce:11:ec:5a:45:ea:af:ee:63:ef:99:50:
a1:be:6f:e2:53:23:8a:89:61:fe:c2:35:5f:65:3d:
23:21:c9:59:68:60:2e:89:17:15:bd:0d:01:43:4b:
a4:ae:94:1e:27:ab:d3:4c:c3:36:d3:2b:95:5e:68:
b3:f1:64:b4:65:2b:59:19:e7:32:32:df:75:18:1a:
84:5e:79:2e:d9:65:f1:f9:f9:c1:9f:e8:66:d0:2a:
56:03:ff:e7:64:52:f0:1f:27:24:86:d3:e4:d6:56:
3b:65:90:5e:ba:f1:28:5e:5a:e2:f8:4e:d1:75:58:
ba:21:0f:67:bf:8c:54:52:0a:d9:3f:5a:3a:a4:cd:
8b:8b:15:e3:6c:6f:09:28:53:ee:f1:36:3c:d0:14:
fc:0b:94:09:9d:29:47:2a:a9:00:ae:e4:06:c7:64:
49:18:c4:7d:93:e7:88:ce:c3:82:ee:d2:52:b3:a7:
9c:57:0e:7b:13:e8:e2:20:67:27:df:04:32:c5:80:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:05:9F:CA:78:E6:C8:F3:4C:65:68:B0:F3:0B:D1:17:F7:73:9D
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:da:8b:12:77:e8:ed:f0:5b:92:35:ee:8f:86:b0:fb:db:f2:
67:44:81:de:a7:85:cd:3e:3e:0a:95:fe:64:1e:ec:68:23:15:
4f:10:4a:d1:48:39:3f:f8:e4:1f:77:d3:32:98:e3:dc:dd:02:
5e:d7:3b:c5:8b:68:df:a9:31:85:dd:3c:63:6d:34:66:65:f0:
25:b4:0b:5c:40:75:8f:55:b9:23:af:92:ea:70:6c:d2:d3:b3:
7a:c4:7d:a7:cd:89:32:56:6d:54:7b:40:fe:8b:b4:47:ce:bf:
c5:57:bd:61:ec:0e:9a:10:9b:cc:58:de:37:5f:9c:98:92:89:
07:5e:cc:47:3e:46:a8:08:51:20:db:54:63:74:ba:40:0c:2a:
30:ab:d1:4c:dd:58:21:bd:15:5f:de:f8:65:ef:06:d6:08:e9:
c5:12:7e:ae:54:66:e6:54:4a:73:75:8a:24:f7:ce:09:e9:bf:
35:99:2a:a8:53:9a:f1:f9:c1:8b:1b:0d:51:30:83:8e:48:66:
9a:96:b1:c5:9d:4e:62:7e:d5:f2:df:6b:fe:d9:df:3f:e8:ee:
20:8d:fa:e5:a0:aa:be:9a:47:1c:dc:91:1a:9c:1c:dc:96:42:
a0:d3:40:cd:07:68:10:49:33:b2:7d:37:95:05:68:51:04:cf:
0f:63:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:04 2025 by rpki-client