Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: +6m09RQHh3vIknJSnTOmdC1kPooju6ouuHI38hyNyd8=
Subject key identifier: DF:58:4A:29:2C:2D:0C:BA:65:CC:F5:15:D5:E2:DA:35:53:D5:EB:2C
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 01968E82DC1B67F013858D18526644BC4904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 0438
Signing time: Fri 02 May 2025 01:01:02 +0000
Manifest this update: Fri 02 May 2025 01:01:02 +0000
Manifest next update: Sat 03 May 2025 01:01:02 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: wSXj59Vgl7MQuCMlSPxk/bHVmPjhuvqAbah5XKfgeUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:dc:1b:67:f0:13:85:8d:18:52:66:44:bc:49:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: May 2 01:01:02 2025 GMT
Not After : May 3 01:01:02 2025 GMT
Subject: CN=df584a292c2d0cba65ccf515d5e2da3553d5eb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:33:25:6b:af:5f:96:22:3f:68:69:f9:e9:
95:38:6a:8d:7d:b3:83:ab:a8:ee:9b:24:fc:27:52:
e5:66:f4:f5:23:4e:2e:fe:86:8a:2d:b2:bb:3c:e3:
70:52:08:30:95:d2:eb:f8:3b:d5:ca:4b:4f:50:1e:
cd:f6:82:5b:57:46:76:5f:df:bf:24:7e:02:f2:18:
70:56:bd:eb:3e:ce:97:3a:10:95:95:7a:70:7a:9c:
30:44:04:10:9e:e7:d3:2f:8b:f6:87:be:f2:02:a3:
0b:77:db:51:9e:d1:ba:75:40:61:4d:86:05:98:97:
d4:c8:98:80:e4:ce:cd:47:30:32:b7:27:6b:26:e4:
a0:f7:32:7a:de:9d:47:74:80:a3:3f:4c:25:fa:6d:
0d:83:d3:63:e4:42:32:78:25:37:2b:fe:bd:b2:57:
be:c9:15:02:ac:08:6b:cd:04:22:fa:19:32:ee:54:
5d:db:e9:3a:0a:9f:95:b6:d8:6f:b1:ea:ee:45:dc:
52:63:c7:7c:02:fd:d7:d2:c0:2e:28:17:8c:9a:09:
6c:b0:18:a8:ff:90:b3:e5:36:05:f8:5f:f0:df:aa:
d1:71:78:04:2f:89:ea:63:28:41:dd:65:91:b0:f6:
84:6d:1b:c3:e7:21:7c:0e:9c:3a:07:0d:31:f3:a5:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:58:4A:29:2C:2D:0C:BA:65:CC:F5:15:D5:E2:DA:35:53:D5:EB:2C
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:17:40:6d:f0:02:c2:ca:95:31:63:5e:e3:c3:5e:aa:66:c9:
33:28:89:b5:e8:84:a6:a0:42:46:59:5c:de:74:2f:60:5b:f3:
39:af:71:d3:44:af:c1:26:1e:8b:d2:d4:9f:28:fe:ed:79:78:
2b:cd:4c:83:25:0a:ff:cb:17:54:6a:cb:7b:60:5d:4e:98:72:
15:54:a4:75:60:45:c7:1a:67:96:41:fc:14:c9:d5:c8:17:e9:
cf:21:e6:5c:d8:0e:95:74:3f:ec:e7:0c:5f:e1:8d:ae:3a:32:
8b:31:a4:f7:20:e2:eb:cd:e5:a9:4e:f7:d7:d1:e0:d9:ae:58:
72:66:bb:39:50:66:32:92:89:e4:ec:3f:4d:6f:11:39:d3:4e:
f6:47:cf:58:ed:45:a3:49:02:b2:16:f8:f7:20:45:98:56:df:
1b:38:64:e4:f0:8b:01:6f:44:5b:53:42:10:f3:59:af:61:1c:
1d:7b:d5:26:8e:be:90:89:1f:c9:83:d4:bb:d3:1a:e9:ca:07:
cd:ac:e2:60:8f:c5:63:22:4b:c2:9a:62:04:c1:37:03:fd:56:
5a:05:dc:a3:54:23:41:bd:d2:15:67:41:dd:05:d7:e2:8d:28:
f2:dd:47:5e:c8:2c:f5:01:96:cd:7e:23:07:ac:51:4d:94:d4:
8e:7c:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:34:04 2025 by rpki-client