Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File: KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier: spOo8tEKCBE36Ef2DO/kohu0y7qXDGeI3wvwuS33u64=
Subject key identifier: 4C:71:62:DE:43:BE:80:EE:DB:BC:F9:DA:01:7E:D5:80:43:18:13:DF
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer: /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial: 0196794410F333EEC38668F93CCD5B86C518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number: 08CB
Signing time: Sun 27 Apr 2025 22:00:25 +0000
Manifest this update: Sun 27 Apr 2025 22:00:25 +0000
Manifest next update: Mon 28 Apr 2025 22:00:25 +0000
Files and hashes: 1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: 3wB6uuPVt1NNiOpQ6lZDkm0gqCDF2wuQMyfr9qPmmGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:10:f3:33:ee:c3:86:68:f9:3c:cd:5b:86:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Validity
Not Before: Apr 27 22:00:25 2025 GMT
Not After : Apr 28 22:00:25 2025 GMT
Subject: CN=4c7162de43be80eedbbcf9da017ed580431813df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:a9:b2:93:60:57:d5:fe:58:87:17:95:f5:
f3:9e:7d:9f:6f:b5:13:4b:d8:52:3f:2e:cd:58:b0:
47:4c:fb:be:24:fb:2b:5a:5c:28:96:d8:ff:59:e6:
ad:e6:15:e1:0e:10:6f:83:3b:ca:dd:cd:6c:be:94:
8a:db:27:21:77:08:cc:d8:6f:04:a1:e4:58:75:10:
58:05:fd:75:53:fb:da:aa:4b:46:01:9c:3a:50:4b:
1a:2f:e6:82:e7:61:5a:ed:35:c5:16:db:69:0e:83:
21:76:b5:8c:95:8c:c3:74:7e:8e:d1:c4:b9:bc:0f:
8d:a5:94:52:4d:d8:3c:12:d7:1d:b1:09:99:af:43:
29:7d:fb:25:8b:9c:3f:20:56:49:60:77:f3:62:ae:
e1:72:46:d3:06:0e:ff:67:a2:0c:e6:2b:a2:ca:8a:
3b:29:09:6c:be:30:94:0f:fb:37:01:fc:4c:89:6d:
e2:cb:a2:27:9d:44:3a:03:1b:ee:eb:e4:a2:fd:30:
74:d8:1f:e4:5a:4c:16:fd:31:a4:6b:14:aa:b4:9e:
93:b0:20:69:73:68:f8:01:20:9d:44:27:2a:b3:51:
c3:a8:c7:77:40:f3:8c:f2:f0:1b:9e:15:79:b4:1a:
b8:2b:26:d7:94:30:f0:16:09:9f:71:8e:88:3d:c5:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:62:DE:43:BE:80:EE:DB:BC:F9:DA:01:7E:D5:80:43:18:13:DF
X509v3 Authority Key Identifier:
keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:65:3f:72:94:a9:4c:80:ed:e1:b0:d5:97:91:2a:05:42:4e:
af:51:e1:92:9a:73:39:95:87:f6:f0:43:30:68:00:38:7d:df:
49:a2:d8:d3:ca:08:d7:9a:01:57:82:32:09:b1:4d:95:0a:5a:
17:1e:ab:b8:b3:36:03:85:d1:1b:c5:51:a2:1f:bc:59:4c:7b:
41:81:f2:8f:0f:50:a3:1d:45:da:a0:8d:fe:1b:c1:35:ad:d6:
88:c3:27:2b:22:2d:66:30:b8:45:3d:4c:14:25:b1:ac:51:99:
38:19:36:25:fa:bf:b5:7e:e0:bb:21:ed:a6:59:35:43:bc:28:
e2:47:6b:14:37:f4:b4:dd:9d:b3:e1:2f:38:72:5b:51:17:8f:
56:8e:f1:d5:76:92:ab:09:49:20:02:2e:9c:9f:b7:7e:8c:90:
0a:02:f5:a6:84:e9:50:0e:21:b2:e4:4f:31:0b:b0:b3:0f:6d:
c9:18:a6:3d:87:64:0d:bf:61:e5:8c:4a:2d:19:7f:e0:ce:b6:
72:20:44:65:21:0a:e8:8c:89:fb:f9:4d:6d:34:99:a1:f9:77:
b9:39:17:d8:f8:e4:1b:4f:8a:f9:81:35:77:ce:42:0a:0e:70:
70:03:6a:e9:b9:ba:b6:91:2b:0b:7b:19:ae:51:05:e5:f8:a7:
41:60:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:19 2025 by rpki-client