Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: pEveTccI62heJFeh5TZLqFz3PQ6upNT8SKrD+Fehn+U=
Subject key identifier: 8F:D0:61:F8:3A:3F:86:31:17:74:24:6B:84:21:8D:C1:33:13:C6:7A
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 019680FDCCD96BAAF4701CE1050AD3FFC4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 07F1
Signing time: Tue 29 Apr 2025 10:00:38 +0000
Manifest this update: Tue 29 Apr 2025 10:00:38 +0000
Manifest next update: Wed 30 Apr 2025 10:00:38 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: NvUaxUfIBqdSweEYRWYLLT7TzglMivxJ5YL6Ge9W0kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:cc:d9:6b:aa:f4:70:1c:e1:05:0a:d3:ff:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Apr 29 10:00:38 2025 GMT
Not After : Apr 30 10:00:38 2025 GMT
Subject: CN=8fd061f83a3f86311774246b84218dc13313c67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:42:f0:4c:03:46:a0:86:91:a4:04:97:97:
c8:d8:15:a2:ea:62:ab:a0:00:68:05:6d:58:a9:3a:
0c:25:5d:60:ae:1a:5d:de:fb:ac:97:f5:c2:48:54:
53:5e:c3:60:ea:67:73:9c:63:69:95:8a:30:2b:77:
c1:6d:e2:a8:31:8b:8b:97:2b:cc:69:0a:38:5f:3c:
ea:f2:9b:48:e8:53:39:6d:46:33:79:9d:99:71:62:
cc:0f:c7:f5:d3:e7:b4:f1:0a:78:e7:d0:20:5e:e8:
5b:39:67:d0:0f:0b:c4:0f:66:84:f9:0c:4f:fa:d9:
3f:f4:ad:31:85:24:04:0f:d3:a5:50:79:6a:75:9d:
02:97:69:fc:17:74:62:6d:2f:51:5b:42:a6:b0:72:
c4:9e:dd:ea:66:9d:ef:31:73:f2:91:3a:d6:47:d0:
62:10:5d:5c:34:9f:90:af:97:be:c8:57:01:5a:62:
ec:89:79:e7:31:a9:93:9f:5b:8d:7e:9e:67:9d:c6:
19:ec:3a:b2:e4:0e:96:62:4b:11:76:9f:68:f8:fc:
23:61:fb:c9:fe:61:df:7a:1d:85:19:c0:e2:03:82:
42:e7:5f:60:cc:1b:a2:ea:10:de:dc:b0:ca:06:2a:
25:be:46:8f:00:c2:ae:f0:cb:d6:4d:56:63:20:44:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:61:F8:3A:3F:86:31:17:74:24:6B:84:21:8D:C1:33:13:C6:7A
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a7:c4:89:72:b7:91:aa:30:05:92:4f:27:5f:e5:6a:6b:06:
d1:f4:2b:bf:37:0b:a4:ee:9f:96:ea:e5:6f:46:24:de:62:b8:
06:64:7f:57:54:ad:c1:ee:68:59:7f:8e:72:ea:a8:49:8d:c3:
cf:59:1d:8c:ec:2e:19:a4:11:8e:86:fd:e5:3c:53:90:97:2c:
b5:2c:72:de:04:59:b7:e8:aa:be:51:0e:42:71:99:f8:56:02:
dd:eb:5c:84:ce:af:30:1e:a9:4f:06:65:18:e0:4d:de:44:89:
2d:84:7c:45:37:80:77:f3:08:03:05:e6:f2:b3:50:51:0b:c5:
ce:be:b2:49:1b:00:f5:21:22:d4:63:7e:8f:7b:79:91:9c:49:
85:9c:64:eb:87:9b:31:61:09:0f:ef:9a:06:f9:75:a6:31:4f:
81:dc:94:19:1e:c3:3f:a1:e9:a9:9e:dd:2e:8a:d5:2a:ed:46:
87:26:7e:c7:06:0a:b9:b5:2b:fb:a1:1d:90:bc:8f:b9:f7:cc:
99:4a:ba:82:f0:70:e5:ff:b6:d3:27:d1:0a:6e:40:df:73:9f:
36:67:76:34:0c:fe:19:d0:5c:64:da:77:f5:de:c9:31:b2:8e:
a7:04:77:da:ae:51:33:be:79:67:e2:f8:52:c0:f8:6c:9d:23:
6e:7d:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:15:03 2025 by rpki-client