Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: jaNp6RZsTYEJTXwiCRMiVC3J8Tw2TqK0sSsOGQclNy4=
Subject key identifier: 44:23:D6:46:67:36:F5:66:9D:18:4A:5F:F1:B6:54:41:84:C2:2D:07
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 0196760C2EFFA05B3B9DD41DBBDF636C9677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 064E
Signing time: Sun 27 Apr 2025 07:00:31 +0000
Manifest this update: Sun 27 Apr 2025 07:00:31 +0000
Manifest next update: Mon 28 Apr 2025 07:00:31 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: jw9Ezx8/XJ1zxYqKt2BaitcTgPQLBqRpM82ijaAHZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:2e:ff:a0:5b:3b:9d:d4:1d:bb:df:63:6c:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Apr 27 07:00:31 2025 GMT
Not After : Apr 28 07:00:31 2025 GMT
Subject: CN=4423d6466736f5669d184a5ff1b6544184c22d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:43:50:2d:7a:b7:79:24:cb:50:c5:2f:9f:
e1:dc:d6:59:a3:d1:83:57:a7:14:96:a2:9d:3e:ce:
c7:df:e2:55:be:6b:da:82:e3:c1:75:fa:f8:c3:1a:
fc:c2:e8:13:e3:aa:05:af:c2:d1:7c:0b:67:02:1c:
ac:14:43:65:15:24:73:c7:86:37:3d:5a:6b:ec:c7:
cf:bb:d1:16:48:03:77:80:30:4b:63:bf:53:eb:6f:
3d:4c:0b:c0:26:64:73:13:bd:0c:d4:1b:d5:80:54:
c7:48:14:f1:b6:73:3c:f1:ca:47:98:1f:7b:89:8e:
52:54:f1:43:96:96:0f:62:44:99:5c:27:35:46:ec:
25:35:45:e0:04:aa:cf:5f:a6:54:5d:a6:ad:ed:14:
de:be:9d:5d:87:6e:1a:f0:89:15:44:49:fc:02:d5:
63:60:a4:34:ee:de:a4:1c:0d:d2:22:ff:ff:ed:c1:
1d:37:e9:10:13:66:1e:75:80:0c:09:7c:7b:e4:46:
4f:ff:18:e8:76:f8:f0:bc:7e:b6:74:bf:8d:0a:88:
ee:27:10:fa:b0:7a:9c:e0:01:dc:2e:54:5e:b7:0e:
12:2a:10:27:bb:ac:b2:f2:57:4f:9e:f7:3d:85:a5:
44:6c:cd:a0:4a:b3:97:92:53:65:9a:bf:00:29:98:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:23:D6:46:67:36:F5:66:9D:18:4A:5F:F1:B6:54:41:84:C2:2D:07
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:eb:5d:23:85:40:65:d1:9f:8f:12:f0:8f:8a:24:c1:d1:a5:
03:af:d4:b7:76:6f:08:fe:70:3c:dc:2d:e6:37:c3:7b:46:cd:
79:94:4c:f0:1a:46:3c:1c:c1:68:aa:3c:ca:9f:63:96:72:73:
f8:d2:e7:7d:25:2a:65:c8:d3:d2:ec:9a:bb:48:e3:15:50:62:
ce:10:96:84:40:3b:db:fd:ed:de:45:e5:9f:ec:15:43:7f:69:
95:f0:c6:21:35:64:d9:9c:bb:df:38:b3:a5:9f:a1:60:03:f2:
a0:86:ca:de:c2:1b:6e:6c:a5:cb:73:31:2a:b3:75:e1:6f:e0:
7c:29:da:35:df:d4:1a:bd:08:53:e6:a1:5e:5e:1c:d1:f0:58:
17:da:21:4c:07:3a:bb:a4:b6:ad:a0:8c:88:07:06:21:47:e8:
11:4d:5a:27:d9:3f:fe:8c:db:10:bf:67:3c:ae:e1:d2:7e:47:
64:09:47:10:67:ce:83:69:65:a2:d2:ec:da:d6:bc:af:90:24:
1b:af:9f:7c:76:35:28:46:09:97:91:12:ed:49:02:52:34:0d:
04:fc:29:d0:bf:24:c0:cb:f2:21:a3:15:50:09:11:9e:b2:70:
5a:fe:4e:b6:f2:d8:ef:d3:d8:7d:42:c1:c3:59:88:78:31:1f:
ad:f7:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:46 2025 by rpki-client