Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: MRH+snFxVZbp4najRxIFIbaVVFwn/lhp8m1u5XVpbeE=
Subject key identifier: A6:FB:32:21:10:37:E7:6D:8F:72:89:12:1D:70:60:AA:CC:7B:AC:16
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 0196775598F056777308F98AF932CEA2B606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 132D
Signing time: Sun 27 Apr 2025 13:00:20 +0000
Manifest this update: Sun 27 Apr 2025 13:00:20 +0000
Manifest next update: Mon 28 Apr 2025 13:00:20 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: 1UrQ7xOUNCfsVziyc3pjgziv9I5Yr8iHt5soXLmhfvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:98:f0:56:77:73:08:f9:8a:f9:32:ce:a2:b6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Apr 27 13:00:20 2025 GMT
Not After : Apr 28 13:00:20 2025 GMT
Subject: CN=a6fb32211037e76d8f7289121d7060aacc7bac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:31:81:40:b1:4a:b7:1d:d1:c9:2c:2c:a9:
39:11:fb:37:e7:a0:44:13:b5:db:76:79:21:dc:4e:
6e:51:67:2c:ed:4e:23:7b:1b:84:66:58:33:e8:13:
65:e7:28:a1:2a:b9:18:67:b7:57:f5:2f:81:ea:45:
cb:cc:a4:9b:b8:38:7b:35:d6:80:75:7a:3b:5d:c5:
5d:04:8a:9a:97:e9:34:19:66:5e:df:17:d4:15:bf:
0c:44:7d:09:e6:f8:f8:20:11:e7:bc:3c:d5:a0:5b:
f2:da:01:a1:44:3a:84:6b:ae:3d:ee:a9:0d:bb:d1:
21:6c:50:33:63:87:c6:70:3d:cc:0d:f0:0b:d4:58:
9b:dd:fa:30:1c:32:85:84:10:a8:ae:c8:b3:27:40:
3c:07:96:f5:75:70:d1:9c:0b:15:d5:35:92:49:65:
4a:b1:b9:5d:69:73:55:5e:dd:f1:01:c2:68:2f:2f:
9a:a8:d1:b4:c4:1d:34:21:2b:44:5a:b2:24:8d:ac:
8a:0f:de:22:55:6f:9d:25:11:45:13:c5:91:aa:3d:
e8:47:0b:1e:5a:59:f2:47:0d:5d:4d:c6:a8:4c:77:
a1:4c:bf:de:ae:ba:74:ca:aa:6f:f9:ed:b3:0b:bf:
ed:4d:be:6a:de:a7:87:68:f4:97:2e:bf:f0:d0:bf:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FB:32:21:10:37:E7:6D:8F:72:89:12:1D:70:60:AA:CC:7B:AC:16
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:30:ea:a5:22:f0:68:bb:62:e3:6d:2b:65:8c:00:a2:6a:f3:
d0:91:0c:59:7f:36:30:db:a0:a7:3d:9e:f1:fd:d0:ee:6e:05:
d4:65:2e:bd:78:4e:c7:17:e0:c6:93:68:fe:0d:fa:1e:5e:12:
07:f9:45:90:44:f7:39:9e:38:51:eb:71:3f:df:cb:91:fa:46:
ef:eb:ad:80:1f:ad:6b:66:10:a6:07:b7:45:05:97:fe:a4:f6:
67:52:a9:a0:e0:80:22:98:d3:32:42:e4:41:ee:c2:57:a4:b3:
28:41:57:93:05:b5:0f:5f:a5:dd:1d:62:48:3e:65:94:2d:bd:
71:9a:5b:f1:66:04:5d:90:7f:fb:97:b8:1d:a0:7d:d8:cb:e5:
90:b3:80:cc:24:3a:69:7b:4c:24:88:65:f6:67:d0:a4:b5:6b:
a1:f4:27:33:1a:d2:19:7e:b1:82:eb:d4:8a:da:68:3c:40:6f:
39:24:79:9a:6f:e1:c2:7d:d3:17:7b:76:27:a2:5c:68:10:24:
e3:b9:a4:21:59:73:1f:7f:92:d7:b6:e8:f2:21:35:c9:14:ef:
88:69:63:84:c9:e5:8c:8f:35:52:e3:14:41:4c:a2:54:e9:ed:
3e:4e:cd:c9:00:91:d3:f1:11:e6:06:02:ea:3e:71:95:56:d6:
49:db:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:45:32 2025 by rpki-client