Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: cUxOL/0kwFP56YVJAh+j843WzndgBaiBYc6AmWaAObU=
Subject key identifier: F9:E4:C2:93:DC:E1:05:4A:03:B1:3E:2E:A4:6F:29:C3:CE:55:E1:69
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 01967755F75D8AE8EE30AD7483DB31EA77C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 1429
Signing time: Sun 27 Apr 2025 13:00:44 +0000
Manifest this update: Sun 27 Apr 2025 13:00:44 +0000
Manifest next update: Mon 28 Apr 2025 13:00:44 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: jHo6ShX++yU1NC/DySG5pFp+6/kmvRglvjTokx6iQfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:f7:5d:8a:e8:ee:30:ad:74:83:db:31:ea:77:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Apr 27 13:00:44 2025 GMT
Not After : Apr 28 13:00:44 2025 GMT
Subject: CN=f9e4c293dce1054a03b13e2ea46f29c3ce55e169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:40:91:70:68:5e:ad:f1:78:a3:71:13:55:
af:60:c8:13:32:37:35:22:54:19:74:b3:ed:0b:86:
ea:db:ce:99:f0:40:89:31:5d:7a:9f:9e:ab:b6:26:
9f:2c:06:d3:87:be:89:df:4c:f1:4c:6f:71:c9:4c:
27:85:58:51:d0:9f:73:eb:6b:d8:e4:a6:16:00:3b:
92:70:51:b1:15:90:09:90:c0:65:10:dc:33:48:6d:
2c:b0:92:d5:fa:cc:29:b5:a6:3f:7b:5b:b3:2a:fd:
f7:2f:e1:a1:ba:97:2c:b0:78:72:c5:e1:b1:38:1f:
34:b8:54:b8:58:b9:cd:21:04:2b:ca:80:ed:fe:f6:
f4:51:26:b4:1f:f2:92:d7:e9:8c:4e:8f:8c:49:03:
67:28:de:17:32:c9:b3:d2:d5:99:49:44:7e:3b:7f:
78:26:bd:22:6c:13:0b:3c:c5:ee:23:46:1f:90:00:
fa:97:2e:e1:e8:1b:9a:fe:2b:e6:6d:b7:33:1d:76:
89:0a:99:99:89:4e:4b:a4:ae:66:b4:1e:e6:82:29:
4c:c8:f5:a8:86:ab:bb:ff:67:67:b4:2c:d4:27:ce:
63:84:a5:f4:aa:2f:2a:f2:03:b5:f3:27:79:86:07:
45:26:bf:08:51:48:e5:a7:ab:5e:d5:8c:49:77:3d:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:C2:93:DC:E1:05:4A:03:B1:3E:2E:A4:6F:29:C3:CE:55:E1:69
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:11:52:85:18:43:1d:c7:95:d1:0f:16:e3:f4:c8:e3:7b:37:
46:8e:42:1c:c9:50:22:5e:74:7e:8a:61:0c:5b:2c:f2:61:cc:
2f:f4:35:3f:dd:bb:0d:bf:d4:13:f3:fc:b2:b9:b2:05:92:1f:
0f:ef:ff:f8:36:9f:a4:ad:79:4b:7e:0d:29:cf:34:0e:a1:63:
9e:fb:f9:90:f0:81:2d:25:78:62:5d:10:93:de:05:0e:55:cc:
47:ad:2b:97:26:0b:5f:54:ee:51:69:aa:2a:64:07:cd:37:10:
19:9e:5f:83:52:d8:d9:ff:7f:24:f7:dc:5b:38:46:19:f7:92:
ed:69:14:88:3d:9f:01:5c:eb:c6:17:1f:75:95:76:85:b8:32:
28:30:96:75:74:bf:7c:54:4d:b5:9e:18:75:b7:63:a5:a0:8b:
4b:a9:68:de:ed:a3:fa:0a:79:66:bf:ec:41:67:db:6f:d6:d1:
19:81:f8:d8:bf:cd:e6:9d:a2:a5:2f:62:93:42:06:12:10:c7:
21:8b:14:88:42:8a:1e:c0:35:ca:08:6c:cc:65:e8:5b:83:77:
70:6a:37:00:25:a8:5e:45:1d:b0:49:df:f5:c3:48:a7:df:ab:
70:0f:27:8b:fa:81:05:06:59:3b:b2:a5:59:bf:7a:c9:e4:8e:
76:9a:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:14:46 2025 by rpki-client