Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
File: ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft (raw, json)
Hash identifier: XKRkcn9j1ntiFwEBC8qUwfVJucPS10a70VV9Zn9xE4U=
Subject key identifier: 6B:89:A2:C9:3F:8F:2B:2B:05:23:8C:0D:06:97:04:8C:29:D5:E9:80
Authority key identifier: 65:D4:D9:22:28:6A:84:5F:46:1F:EF:1F:53:D3:20:CD:2E:EF:72:8A
Certificate issuer: /CN=65d4d922286a845f461fef1f53d320cd2eef728a
Certificate serial: 0196982A60AB4A489089E13CC627EDA206EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
Manifest number: 0EE9
Signing time: Sat 03 May 2025 22:00:36 +0000
Manifest this update: Sat 03 May 2025 22:00:36 +0000
Manifest next update: Sun 04 May 2025 22:00:36 +0000
Files and hashes: 1: ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl (hash: Q4JnCokn933bj4wUS7l7PA+xr8jZx3xZZt2bO94X8zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:2a:60:ab:4a:48:90:89:e1:3c:c6:27:ed:a2:06:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d4d922286a845f461fef1f53d320cd2eef728a
Validity
Not Before: May 3 22:00:36 2025 GMT
Not After : May 4 22:00:36 2025 GMT
Subject: CN=6b89a2c93f8f2b2b05238c0d0697048c29d5e980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:80:ab:71:f8:dc:6f:c8:47:b6:02:23:bf:
5f:42:42:63:0a:0d:99:b2:00:b1:37:2c:ff:f1:a9:
81:dc:48:80:ac:e6:5b:58:b9:f1:3a:ee:99:b2:56:
51:4e:86:24:bb:c8:54:42:7d:97:77:21:fe:7f:4c:
dd:77:73:ff:0a:44:cb:83:e7:b8:c2:fd:06:77:e5:
99:18:d6:d7:29:a0:db:d6:a0:9c:0e:33:7a:8c:d6:
dc:73:1c:0d:cd:6e:ed:b4:f8:33:c0:4c:69:6a:b7:
15:f4:9e:06:9a:b2:8b:e9:6d:87:85:c2:ab:e4:f6:
fc:1b:6f:15:ef:67:a5:5c:08:b8:e4:77:4e:92:7e:
2d:1d:1d:75:2d:6b:3a:24:1b:35:95:69:fc:46:29:
db:fa:ea:b8:0e:e3:ff:dc:09:59:97:41:44:34:43:
69:d4:9f:fa:47:60:70:75:15:82:24:20:c9:af:95:
a8:61:88:ee:ee:d3:07:b1:af:d3:4e:b7:6f:c6:58:
b3:c5:a0:f3:47:bd:fa:c4:1e:2d:78:de:a8:6e:ca:
56:7b:52:77:4e:83:39:50:15:00:26:5b:e6:5a:13:
c6:54:f3:a8:6d:88:66:6e:a0:46:91:a1:b7:3d:b2:
bb:79:51:fa:83:24:6a:76:bc:30:4d:ee:ff:f9:a2:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:A2:C9:3F:8F:2B:2B:05:23:8C:0D:06:97:04:8C:29:D5:E9:80
X509v3 Authority Key Identifier:
keyid:65:D4:D9:22:28:6A:84:5F:46:1F:EF:1F:53:D3:20:CD:2E:EF:72:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:16:d2:8e:f6:fe:dc:25:e8:57:bb:cd:21:67:80:28:49:a5:
1e:a1:b9:c0:f6:b5:ea:64:8d:b1:e4:ac:b3:70:e5:6a:0f:f2:
e7:a3:80:7e:78:d2:6a:a6:a5:5d:a2:7f:ef:68:cd:be:32:21:
74:20:7f:ab:08:87:4b:30:eb:c5:5a:93:61:4c:8c:d9:84:73:
00:eb:4b:c3:c9:40:be:0f:b3:18:5f:06:22:de:08:11:f2:a8:
b8:a7:c6:34:d3:2b:c8:34:c4:4a:49:0e:a4:0f:f3:43:ef:73:
d1:08:f4:84:ae:36:62:fb:46:d2:0e:db:b9:af:e8:b4:99:db:
62:a9:39:4b:15:9d:9e:32:5d:a8:a3:09:e3:a1:6b:cc:41:3d:
9e:71:ad:ca:ee:92:29:7e:1d:0c:e3:31:6e:16:42:3b:a7:2a:
3b:db:fc:cc:35:b1:39:13:92:0c:c8:86:57:64:35:ca:e8:d3:
8d:ba:c5:28:e4:11:88:79:e9:c9:b1:89:b3:cd:0e:16:7f:4b:
01:00:94:b3:c5:39:ad:f7:01:e8:7b:df:40:9d:6e:4b:3b:96:
a1:01:36:f2:8c:a5:9f:f8:7b:dd:ac:e3:8f:ad:f6:ff:46:e4:
96:82:f1:e9:74:32:b8:7c:fa:6f:93:92:c3:15:84:d6:98:88:
09:e0:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:23:40 2025 by rpki-client