Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: eRsJzoWQHc//k3LVQVjqsf5KlQXql0iRx0TMleNxBUU=
Subject key identifier: 50:C3:F0:09:FC:AE:72:D9:11:E1:18:E6:73:34:E9:85:29:EE:E2:B3
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 01964142E26E9EE942B616EAA09FAE7E5DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0B63
Signing time: Thu 17 Apr 2025 01:00:24 +0000
Manifest this update: Thu 17 Apr 2025 01:00:24 +0000
Manifest next update: Fri 18 Apr 2025 01:00:24 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: plLobV+Yl79f5HiiPgjjGHkRKCBL8jGcFT88QoznXcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:42:e2:6e:9e:e9:42:b6:16:ea:a0:9f:ae:7e:5d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Apr 17 01:00:24 2025 GMT
Not After : Apr 18 01:00:24 2025 GMT
Subject: CN=50c3f009fcae72d911e118e67334e98529eee2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:db:13:0d:74:b8:e2:1e:d9:2d:ae:5e:7b:
d1:14:81:4b:db:85:13:cb:9f:15:22:fa:23:7d:95:
49:72:61:d7:fa:b5:f4:95:33:35:e4:eb:03:80:1e:
94:29:72:23:0b:35:c8:02:01:dc:a6:c9:04:c3:cc:
4a:25:b1:4a:c2:17:b5:52:0f:a6:00:6d:25:c0:7a:
f4:4c:11:94:f3:cf:bf:46:9e:9b:40:d3:54:3d:7e:
e2:7e:63:18:c5:85:01:41:7f:fa:5c:60:16:27:9b:
b1:c9:f3:0f:0c:15:b5:4e:dc:41:42:50:96:14:0d:
94:5f:63:05:8c:4f:78:47:e7:81:7d:f0:b3:50:b2:
fc:a0:c2:b6:1b:70:c7:bc:c1:92:8e:22:d1:18:98:
46:e7:83:8b:1a:6a:52:3f:c4:9f:07:38:9b:b4:9d:
75:d6:c6:82:f1:10:6c:fd:55:ba:01:6d:1a:8c:29:
91:29:68:6c:47:7c:9f:56:82:c4:1a:77:d3:44:f7:
34:1f:76:a4:d7:08:38:da:72:ea:2a:0a:c8:5c:46:
68:3d:fe:c4:f2:60:34:e2:88:f0:af:ad:40:af:ed:
71:8d:f2:23:c9:a1:df:11:8d:9f:5e:78:af:af:99:
07:4f:9f:8d:5b:24:f2:95:2c:f3:29:a8:e8:eb:0c:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C3:F0:09:FC:AE:72:D9:11:E1:18:E6:73:34:E9:85:29:EE:E2:B3
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:01:a6:92:17:8c:40:76:a6:c1:6d:ae:40:1d:39:37:0d:46:
b4:fa:04:2c:10:82:22:9c:ab:b3:cf:4e:c2:2c:7a:3b:b3:df:
f9:dc:45:09:e6:62:d8:c4:c4:42:32:64:bd:2f:57:c3:fd:44:
6a:f3:d1:f6:ca:c9:f2:af:ce:6b:04:0a:0b:c2:31:d5:a4:5a:
9a:cb:d2:20:b3:24:1f:c1:44:dc:b7:f9:51:41:1c:e1:44:9a:
2e:15:67:70:cd:7d:03:b0:81:b7:50:f0:5f:ec:1b:84:ed:ad:
19:2e:d1:b4:86:21:c7:ab:27:8f:74:ba:43:46:4a:45:1d:2f:
fc:a1:de:95:b4:5e:e5:66:43:ec:e2:4b:14:32:13:84:f9:a4:
81:f1:f1:b8:78:db:54:b3:eb:50:37:eb:4b:f6:be:d6:04:6e:
6c:a6:9a:aa:f9:f6:ee:c4:47:43:28:36:65:b5:98:ae:b5:94:
ae:91:8a:42:e1:4f:fa:38:60:23:fb:fd:13:66:8a:5c:8b:f8:
db:86:9b:5d:66:c9:e6:da:0e:dc:08:a2:e9:4d:e0:4a:42:b5:
3a:9d:a0:a6:c5:87:18:0d:49:36:29:be:d2:6e:4b:e4:53:cc:
b6:1e:93:3a:73:6f:52:06:a1:8b:50:ba:47:33:68:f5:95:c5:
8d:a8:b3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:26:32 2025 by rpki-client