Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: wL0VQLSlmX9Eo5UJIW916UpdWtB2obKZsXL3qNci5ao=
Subject key identifier: 47:5C:BD:EB:2D:B8:4F:B2:F3:06:AF:3B:BC:2D:D6:D0:01:30:21:31
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 01967ED87ED6CEF097B6CE4F57B9BEB65996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 0475
Signing time: Tue 29 Apr 2025 00:00:39 +0000
Manifest this update: Tue 29 Apr 2025 00:00:39 +0000
Manifest next update: Wed 30 Apr 2025 00:00:39 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: vAHnZYGCCFMY/aj+ZnaLFZz3PCjFY6UmbQ1vf3FZnuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:7e:d6:ce:f0:97:b6:ce:4f:57:b9:be:b6:59:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: Apr 29 00:00:39 2025 GMT
Not After : Apr 30 00:00:39 2025 GMT
Subject: CN=475cbdeb2db84fb2f306af3bbc2dd6d001302131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:d5:02:1d:9c:f6:e1:21:ed:f3:c3:78:69:
eb:5c:7f:42:f9:f8:cc:cb:6c:1f:56:03:51:f9:a3:
70:d5:45:6f:0a:e2:e2:e1:83:c1:8d:35:f9:18:4d:
29:d1:46:4d:bc:0f:fe:64:17:97:fb:d5:f7:a0:1e:
1e:be:04:62:30:83:f6:af:28:18:36:2e:58:9d:31:
0f:76:7d:82:4f:ab:01:ca:d0:5b:62:af:2b:bc:55:
bb:68:24:e2:4f:45:01:11:20:bb:70:a4:86:2d:7f:
71:7b:dd:62:6a:b8:97:e2:5c:cd:b7:64:9b:6b:c1:
fb:96:46:14:69:a6:c4:71:69:f4:38:c4:d5:59:93:
a6:25:fa:d5:87:a5:35:6a:3f:ad:ea:73:be:ee:67:
a3:59:9e:48:74:4c:48:67:6a:2e:f2:41:85:e3:e9:
a0:36:1e:c6:60:2d:fa:20:4d:06:2a:ce:bd:65:f7:
c8:ce:7e:12:57:fb:c8:79:64:94:f0:30:01:4e:2a:
2a:e4:9e:71:6f:12:6a:d9:e0:52:1d:ab:e8:ad:03:
55:d5:ee:d8:c1:cd:e6:71:d2:b7:bc:26:57:2b:c9:
24:aa:6f:de:08:42:1f:3a:96:a5:81:41:e5:ee:d4:
3b:93:87:54:4b:d1:d1:0f:cd:4c:4c:d7:08:f0:1d:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5C:BD:EB:2D:B8:4F:B2:F3:06:AF:3B:BC:2D:D6:D0:01:30:21:31
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:24:2e:71:c9:c7:7d:b1:79:36:10:f0:ff:4c:1b:ed:77:ed:
90:88:99:0f:a0:b1:61:ea:3c:be:f1:c5:4d:15:36:be:c5:40:
2c:11:f1:8f:71:85:c9:7c:c1:c9:68:5a:51:61:f3:30:01:b0:
63:22:f8:c1:19:ac:44:ee:80:49:20:e7:a2:e0:d6:66:23:48:
4d:d0:9c:4c:2c:ca:f1:4f:a2:37:86:c0:a2:b8:8f:86:ee:65:
6d:f6:8a:ff:68:94:2a:b9:9a:14:fb:7f:b3:33:3b:ea:34:ff:
fa:5e:e4:d6:62:a9:92:9b:61:41:2e:65:bd:99:aa:67:17:ae:
f0:d5:f7:68:68:65:06:e5:a8:31:f2:cf:b0:1b:21:c2:0a:4f:
c7:a0:2f:17:0c:ba:93:6e:63:20:39:da:f0:47:dd:20:10:da:
86:20:b8:03:7b:7d:a8:16:a1:69:32:44:2f:fa:05:61:c0:0e:
e8:a4:fd:b6:2c:6c:39:65:cd:b6:31:61:2d:51:1b:c1:18:d7:
91:3d:ac:ba:0f:14:58:a6:75:4e:fa:d1:41:7f:c6:47:18:d7:
95:72:65:b1:09:3b:0e:a9:5f:ee:13:c7:89:c2:1c:99:f4:73:
56:1f:30:9b:a4:39:03:41:ba:4b:81:da:c9:00:0f:b9:12:bd:
73:d4:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:44:45 2025 by rpki-client