Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: +sB05rSwYaHOK1igNkMdrjbEYx5QxThJbv9cuJ3OHeg=
Subject key identifier: 2A:24:B8:BE:CA:3E:E6:EE:7B:05:13:FF:95:BC:89:B4:DB:D0:E7:47
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 01967FB44518A44AD8F709A6BFF37DDB5C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 0CF3
Signing time: Tue 29 Apr 2025 04:00:42 +0000
Manifest this update: Tue 29 Apr 2025 04:00:42 +0000
Manifest next update: Wed 30 Apr 2025 04:00:42 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: +CvcUaI2544l5fMieISDmk/ZfaJuZ19MgGjwRPcKZyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:45:18:a4:4a:d8:f7:09:a6:bf:f3:7d:db:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Apr 29 04:00:42 2025 GMT
Not After : Apr 30 04:00:42 2025 GMT
Subject: CN=2a24b8beca3ee6ee7b0513ff95bc89b4dbd0e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:f2:75:34:0d:cd:96:16:0c:2e:ce:ef:c2:
b8:fa:49:e8:62:8f:c0:83:b5:22:b2:95:f1:5f:ae:
50:db:70:22:16:d4:71:38:42:ee:98:be:7f:bb:b0:
ae:36:fd:8e:ae:ed:15:dc:4d:ec:34:da:79:5f:e3:
1a:fe:0b:98:bb:e1:5a:5e:8a:f7:2e:57:be:c7:d2:
c6:ac:be:1a:79:ff:19:99:88:a7:a5:07:22:de:3d:
e8:93:66:4b:34:10:7f:04:6e:d3:0c:dd:eb:c3:16:
67:fb:75:10:85:0e:08:d6:92:8f:ec:11:c2:fb:59:
9f:3c:e4:03:d6:9c:65:89:5f:94:42:b2:b6:e5:4e:
55:e1:2f:4a:7b:73:a5:12:6f:10:59:95:6c:45:da:
c9:09:81:a6:09:a4:d6:22:03:d5:42:8f:0b:7c:34:
2b:02:f4:b7:b8:af:82:1b:5c:4a:1a:26:8b:35:fe:
52:ae:c2:a2:79:93:ed:5e:bf:18:2b:4c:4a:de:39:
0d:2a:fe:92:62:10:8c:cb:51:36:1d:9e:7f:1d:49:
7a:19:ad:0b:9a:72:f7:f4:f8:52:7e:47:e3:c4:7c:
43:e7:6e:ef:24:4d:07:8e:6b:c4:19:e9:6c:50:d6:
3a:7c:db:04:0e:65:d8:cf:ce:c1:09:09:2a:b4:43:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:24:B8:BE:CA:3E:E6:EE:7B:05:13:FF:95:BC:89:B4:DB:D0:E7:47
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:37:58:02:7b:6d:08:c3:a7:ce:cb:04:16:41:7e:4f:4c:04:
ac:e4:1b:a2:9c:d4:42:61:47:67:f0:40:a5:34:82:d3:f1:33:
22:51:7f:7d:9a:25:4f:56:32:98:1a:d5:f2:ea:8a:27:48:fb:
53:8c:9f:b3:af:7b:cd:59:dc:41:56:77:ae:82:2a:84:d0:53:
25:0d:5f:f9:d3:d6:11:9a:25:df:d6:cf:59:81:f7:d6:33:dc:
11:9b:c9:0a:41:b4:fd:5c:ce:02:9c:93:3e:07:15:9f:9f:d8:
b4:8e:cd:cf:57:94:7c:b2:bb:e7:d6:d0:09:25:56:19:dd:03:
dc:ca:5c:2c:20:54:bb:c3:a5:d0:a8:a8:fb:bb:e2:16:4e:c6:
8c:09:e0:2a:81:44:35:ab:4d:1c:29:35:b0:81:ac:78:67:f6:
d7:07:2f:59:1f:56:bc:bd:6a:f6:4a:b1:95:e3:c7:03:9f:d6:
f4:98:54:a6:37:59:f1:af:c0:75:52:6d:64:f6:ae:63:01:6c:
1e:3d:c9:07:e3:e9:5c:4b:5a:b4:7e:d6:42:e8:c6:db:9c:b9:
11:2f:4d:86:51:ae:7f:53:2d:37:9a:63:dc:a4:fa:f0:bb:5a:
1e:c5:1d:ab:ec:03:54:07:4f:e1:70:ea:6d:28:f8:46:bb:16:
5d:2f:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:49 2025 by rpki-client