Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: WeUU+4+KJ5hLnUQMOikE/ZrZux4E/VvlohNXpLAodOE=
Subject key identifier: B8:14:82:4E:BC:96:A3:B6:7A:6C:8E:AA:B4:F6:28:68:79:5A:48:0F
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 01967567BCF52CF0885E7192B10AF7F83696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0BE6
Signing time: Sun 27 Apr 2025 04:00:54 +0000
Manifest this update: Sun 27 Apr 2025 04:00:54 +0000
Manifest next update: Mon 28 Apr 2025 04:00:54 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: efjiYe5ZDWsOjx9frSFtVZsnkx7ZnTqx3jbVS4tdTE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:bc:f5:2c:f0:88:5e:71:92:b1:0a:f7:f8:36:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Apr 27 04:00:54 2025 GMT
Not After : Apr 28 04:00:54 2025 GMT
Subject: CN=b814824ebc96a3b67a6c8eaab4f62868795a480f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:1a:e0:62:d5:35:11:6d:a2:c8:cb:94:1b:
af:5e:0b:c1:b7:e3:bb:1f:d3:24:38:88:8a:99:c1:
d1:11:e5:c0:0e:56:c4:df:10:a7:70:f9:38:58:34:
14:a2:4b:83:f0:89:94:6c:de:ae:c8:42:c8:4d:8a:
4a:7f:a6:d6:fa:5e:75:52:84:43:8f:4d:16:79:7a:
80:93:73:4d:70:5f:3c:25:50:83:64:34:43:13:5a:
5d:30:c1:8b:9a:ea:7f:9a:57:20:ca:6f:54:ad:9d:
1c:1a:c2:dd:4d:5e:94:16:b6:e3:a1:8f:f5:da:0a:
7d:7f:cf:3a:65:95:d1:c4:0a:00:3c:22:ed:db:ca:
44:3a:22:6a:b9:62:37:48:6f:5b:95:f4:4e:2f:60:
88:66:c0:4a:4b:5e:61:45:a5:01:e9:10:28:8b:e3:
ce:92:26:6d:7c:0a:94:21:4d:d6:f3:76:e3:3e:38:
5a:b1:36:14:87:47:b4:8c:65:5a:96:b4:83:b8:0d:
e4:77:40:f8:db:7e:6a:e8:f0:43:67:89:8f:7f:a1:
52:58:f3:21:98:13:07:57:6d:73:67:01:d9:9b:27:
b7:b7:6c:64:8a:9f:15:31:c1:b3:d1:97:d0:2e:47:
76:ab:23:17:5a:fd:41:3b:e9:03:32:6d:6c:31:1f:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:14:82:4E:BC:96:A3:B6:7A:6C:8E:AA:B4:F6:28:68:79:5A:48:0F
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:86:2e:29:8c:73:4c:eb:44:db:5d:79:3a:77:b8:c2:2e:35:
be:6d:13:39:51:97:14:68:3c:16:99:74:97:a0:72:a8:6e:ed:
46:29:1e:ae:1d:55:aa:27:e9:6d:45:79:eb:56:39:60:b0:70:
9c:95:f0:55:14:7d:cc:f5:3a:ed:90:35:e1:e6:2d:b7:a9:61:
37:36:89:a5:ea:60:b6:d7:39:0d:1c:d7:d3:02:99:da:36:5a:
70:bb:66:4e:2a:76:0e:4d:b3:bc:90:70:38:f3:30:87:05:20:
8a:f9:fa:3c:10:3c:bb:01:ea:ac:2e:e1:3a:a7:e0:01:f9:a8:
3a:26:28:10:c1:5f:da:11:84:21:5b:8f:ac:4d:1c:e8:5d:bf:
5c:4c:61:4b:87:e2:63:11:5a:75:b1:6b:f9:ee:d0:4e:cb:1b:
59:ea:a5:bf:7d:f5:6b:59:69:e4:08:19:ab:20:d6:76:b9:f5:
00:2e:4e:b9:82:1c:72:ff:16:84:6c:53:99:ce:6a:aa:b3:11:
44:08:33:99:87:60:65:9e:0e:fe:b0:a6:e0:79:03:fd:23:f5:
4e:5c:19:67:e3:8b:1c:02:39:8e:17:d2:89:c4:b5:07:49:c8:
44:53:98:56:0d:c1:30:2c:39:13:d7:15:3a:e7:75:45:83:41:
b8:e5:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:12 2025 by rpki-client