Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: gvA6IaPxTQpseMPBU0cGTg+n3kuyZ9Yty1doQTuB6wU=
Subject key identifier: D2:23:0A:8D:AC:9D:C7:79:B7:80:8C:73:1C:FE:FB:D5:F1:94:35:9B
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 019698CF42EA1B5BE1DB9B5FB2B0E228F026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0EAE
Signing time: Sun 04 May 2025 01:00:41 +0000
Manifest this update: Sun 04 May 2025 01:00:41 +0000
Manifest next update: Mon 05 May 2025 01:00:41 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: TC3RJH/+3ckCibfjwwcC5ENFp8+gxcAA+p8PwdO++Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:cf:42:ea:1b:5b:e1:db:9b:5f:b2:b0:e2:28:f0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: May 4 01:00:41 2025 GMT
Not After : May 5 01:00:41 2025 GMT
Subject: CN=d2230a8dac9dc779b7808c731cfefbd5f194359b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:95:ca:5f:48:95:83:02:76:44:3d:2c:a0:
b0:bc:69:82:b7:c3:9f:ba:c1:be:f4:c7:83:b7:59:
43:80:04:0e:de:81:6c:18:e2:94:1b:d6:6b:ee:95:
c3:be:55:00:2a:f5:5d:e0:46:ae:85:0f:8d:c3:4c:
ca:26:b3:54:33:e0:75:8b:44:a0:6a:e6:d7:a0:c0:
c9:a4:6b:a2:f9:da:e0:b3:f3:96:e8:cb:e7:b8:32:
f3:ef:c5:52:4f:83:e6:d7:00:c8:25:bb:7e:75:0f:
3c:0c:0e:22:7b:10:d8:de:3a:63:92:e9:cd:f7:2c:
a5:c1:37:10:3f:df:3d:a2:72:9c:14:6d:3c:9b:f9:
b7:c2:b3:c0:26:02:fe:f3:58:fe:23:3f:b5:37:47:
9c:4e:1f:69:01:be:3b:bf:18:95:b8:ec:24:61:7a:
f1:e2:01:19:70:b5:fd:b2:65:d4:b4:ca:45:11:fd:
97:b2:b8:0a:cb:38:e0:c4:53:12:5f:e3:06:e0:96:
e2:a8:e9:32:f7:5c:6d:58:38:3b:08:bb:0e:5c:4d:
90:1c:05:e9:10:16:76:6a:ad:60:48:7c:16:57:4c:
55:db:1b:f7:37:a2:18:e9:ed:3c:ae:f2:c7:ff:70:
37:13:2f:5e:b2:f5:55:4b:4f:92:86:a9:33:45:77:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:0A:8D:AC:9D:C7:79:B7:80:8C:73:1C:FE:FB:D5:F1:94:35:9B
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:6a:b9:82:0d:25:b2:c4:15:aa:f8:55:cc:8c:c8:ea:1a:
2c:50:32:26:43:19:34:c3:5d:b2:4f:90:ba:cd:4b:15:13:17:
38:8d:6e:bf:c7:0e:ca:58:9a:f2:45:f3:6b:7b:b0:7f:40:11:
32:78:d0:a0:85:15:32:c6:75:8b:f3:be:df:08:09:df:99:d1:
73:62:94:ed:50:74:8d:ce:e4:0d:ef:1c:fc:08:75:12:69:d2:
2f:6b:5a:42:20:fe:3a:72:a1:b6:af:3e:af:57:be:4e:31:81:
34:90:e6:f8:38:63:0c:82:d5:8c:75:09:d1:16:d5:40:88:76:
65:2e:5e:70:ed:e0:50:48:9e:db:fb:f8:29:ca:ac:00:ce:d8:
6b:68:f6:03:29:bf:31:16:07:ad:79:f3:d2:e2:44:1d:38:f7:
4f:c3:cc:07:b4:9d:0a:e2:bd:af:c6:65:4a:d3:a0:9f:60:ad:
4e:17:30:bb:b2:80:ac:b5:f1:c4:52:7f:c4:8d:6a:2e:f1:31:
d3:db:57:d2:43:06:fe:36:f6:8b:8d:44:e3:d4:56:80:5a:01:
0e:71:a8:c7:bb:65:0c:c0:24:2a:bd:7d:3e:d8:51:d2:42:fe:
0f:f2:e2:e8:68:63:78:d6:27:c3:35:26:09:10:cb:f4:cd:29:
63:38:b8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:14:16 2025 by rpki-client