
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json)
Hash identifier: UDut4IIQMCfxtMe+wFs0XqWxcBLmognyPD9RyGeE6yg=
Subject key identifier: 35:98:02:DF:26:A4:76:B7:14:58:36:1B:1E:BA:78:09:24:4D:E5:D0
Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Certificate serial: 01967AC50795750C0D993DB6BFF88E8CD5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
Manifest number: 09C6
Signing time: Mon 28 Apr 2025 05:00:54 +0000
Manifest this update: Mon 28 Apr 2025 05:00:54 +0000
Manifest next update: Tue 29 Apr 2025 05:00:54 +0000
Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: wp5nsMTOinIK1WagT3k2+CclNTaTm9Xc0YoxVyTGAiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:07:95:75:0c:0d:99:3d:b6:bf:f8:8e:8c:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c
Validity
Not Before: Apr 28 05:00:54 2025 GMT
Not After : Apr 29 05:00:54 2025 GMT
Subject: CN=359802df26a476b71458361b1eba7809244de5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:be:5f:08:53:60:80:66:e3:91:5a:69:57:1b:
f9:5b:0d:99:bd:ec:a4:3f:3f:9b:03:b3:c5:e7:4e:
d6:3e:aa:5d:41:23:9f:1a:65:f3:bd:3b:75:3e:cf:
8a:d6:29:0b:9a:53:36:8b:8e:c6:06:e5:bc:81:36:
74:84:f6:87:9d:3d:75:c0:b9:e1:82:e3:86:e9:7b:
09:c3:29:e6:cc:00:93:a6:a4:c3:82:81:a3:39:a3:
f0:5a:8e:cd:97:8e:bc:a7:da:e5:9b:1a:7a:68:a7:
0b:a6:7f:d5:64:56:dc:ed:41:fe:b5:4f:73:89:c6:
03:e4:46:a1:6c:0e:1f:31:1c:94:a8:fb:00:b1:74:
6d:d2:03:e0:7d:4f:c6:31:c3:d6:fb:e5:11:df:32:
c2:c8:dc:86:27:01:67:db:0f:60:b3:14:b3:c9:7a:
48:6a:ec:58:f6:4c:df:92:d8:9a:0a:83:11:5f:74:
3f:82:fb:68:d5:3f:54:ee:50:31:57:ff:0b:1e:c0:
37:37:27:d6:2a:e5:45:da:5d:a1:f5:3b:56:80:37:
34:4b:7e:fc:7d:56:8d:9d:7d:11:53:d7:2f:48:0d:
8a:ec:87:da:db:51:de:ad:fd:24:84:e9:3e:7d:92:
71:50:a2:1f:88:75:b3:1a:17:71:55:bb:60:a2:26:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:02:DF:26:A4:76:B7:14:58:36:1B:1E:BA:78:09:24:4D:E5:D0
X509v3 Authority Key Identifier:
keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:09:68:c8:74:d0:65:75:9d:b6:9d:66:ec:3c:e7:ee:44:fd:
71:81:36:d2:a8:4c:a7:16:35:f9:e0:7a:e9:36:2e:fc:9a:90:
bb:a8:67:d2:bf:26:30:ce:b9:ed:1d:25:29:01:d2:7a:9d:ee:
dd:77:41:cf:81:96:a1:cf:30:55:27:77:5a:e4:40:6c:0b:b0:
1e:9f:60:22:d9:c8:04:35:52:9f:60:d6:f6:1e:6f:6f:34:a3:
f3:06:46:61:14:bc:fd:2f:a3:94:48:ff:0d:34:24:c8:95:eb:
d1:05:78:a5:e0:d1:49:d1:f0:c5:b0:97:04:6d:dd:d1:f8:ca:
e7:3b:0c:1b:ca:05:e9:b6:10:60:d9:09:c6:45:90:0b:d7:de:
aa:58:bc:47:e0:2a:87:47:69:21:4b:f8:ba:75:e4:ca:77:70:
c7:80:74:22:df:89:35:c9:1d:fd:f9:eb:1c:47:13:c0:58:ef:
d9:78:0a:87:9d:a0:df:b0:e0:fe:e1:fa:83:f6:05:12:f4:a8:
68:b4:85:d9:59:6a:c4:22:6b:22:84:e0:a8:af:d6:61:a8:fd:
19:2b:e4:23:c1:02:18:cb:cc:83:1a:27:77:4e:98:56:70:cc:
c7:87:dd:45:01:e7:ca:7f:4a:c8:31:a8:fd:4b:02:b4:3c:cf:
93:72:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:01 2025 by rpki-client