Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: DoW2buDNMozXT/oZ9pBI2YTKpcvkF8Q+ufzsUajuvO4=
Subject key identifier: E1:43:FF:1E:73:1B:93:AC:C3:FD:C5:B3:CC:A3:8D:CF:44:33:AB:35
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 01967F0F67ACBFFCBDDD276E294C8CAB388B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 1510
Signing time: Tue 29 Apr 2025 01:00:38 +0000
Manifest this update: Tue 29 Apr 2025 01:00:38 +0000
Manifest next update: Wed 30 Apr 2025 01:00:38 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: qk5YgkQL8TZNV7VCxDnNgI4/fK2s3t5z0wMS0H1vJC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:67:ac:bf:fc:bd:dd:27:6e:29:4c:8c:ab:38:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Apr 29 01:00:38 2025 GMT
Not After : Apr 30 01:00:38 2025 GMT
Subject: CN=e143ff1e731b93acc3fdc5b3cca38dcf4433ab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:b5:5c:56:21:14:64:0f:14:f6:61:c0:17:
2d:4b:28:de:9c:9d:7a:35:f6:d4:1b:32:12:3f:04:
75:f4:cd:5b:19:e5:2f:fc:51:74:62:df:0d:94:28:
a5:dc:ed:e9:69:a6:b5:2a:1a:67:4c:65:3c:ce:8e:
fc:9f:f6:6e:74:8b:e5:df:0e:d9:6b:80:7a:de:d4:
4b:40:72:f3:12:0d:58:02:2f:cf:d3:26:79:5e:5f:
c1:a1:48:57:04:66:cd:68:f3:4e:c0:05:71:63:c0:
7d:dd:bd:9c:2c:e2:89:9d:b7:ca:0b:41:9e:78:c3:
6d:1f:6a:24:0d:2c:4b:c7:a4:3a:bc:e2:77:0e:ca:
e5:30:1b:1f:ae:de:b8:6c:8d:f6:4e:82:7d:b2:d7:
bb:b4:2f:0d:f4:7a:c8:18:4e:39:71:68:df:da:fd:
34:12:d6:f0:c6:fa:24:a7:91:68:75:d8:c1:4a:d0:
23:4d:e5:c8:d1:5f:4e:d4:bf:02:76:1a:12:35:29:
aa:e3:c6:11:d6:e2:50:0a:cf:ed:8b:c5:7d:7b:6a:
8d:77:bd:ca:c5:f3:47:bc:1f:1b:f4:19:66:89:04:
f4:70:5f:6d:41:e4:17:f3:c3:33:0c:c0:95:a8:c1:
06:47:6f:ea:b2:48:ff:d3:7b:bf:73:26:76:c3:af:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:FF:1E:73:1B:93:AC:C3:FD:C5:B3:CC:A3:8D:CF:44:33:AB:35
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:93:6a:31:db:3d:5b:ce:8a:8d:55:17:68:68:f6:42:2f:30:
43:38:a6:fe:e4:78:87:7b:b1:58:da:07:e5:85:59:55:8e:2d:
78:8e:89:ab:fd:3c:f2:85:88:ec:fa:b3:57:77:c2:5b:1f:f4:
23:61:32:24:85:68:c6:08:e8:7f:93:51:04:c3:cd:1a:56:0a:
e1:82:d0:ef:00:b6:02:ee:c0:f9:a9:52:52:72:8f:75:8f:98:
d6:ef:c5:7a:53:14:0b:9f:0e:61:b0:50:98:24:f0:ae:1f:ed:
6b:96:8f:fe:5f:09:fc:6e:c3:a3:63:d5:7b:31:17:3b:3d:50:
5f:17:f4:a2:32:0f:53:6b:dd:85:18:1c:f8:57:74:69:4b:8d:
ff:cd:40:10:dc:24:80:40:1d:4f:08:4b:f5:b0:ae:b9:37:10:
9c:b1:16:b0:4b:9b:32:01:3e:aa:a0:16:a7:d2:ac:8d:89:b2:
a5:4e:48:dd:ad:a3:2f:dc:c5:e1:e6:ee:0e:cc:ad:25:56:b1:
df:b0:43:db:3d:65:a2:6b:a1:e0:05:55:c8:4d:a2:40:90:a9:
8b:f8:9c:2a:fe:80:ce:5f:5e:19:d3:b3:c5:d9:f6:f0:f1:b4:
e3:42:d4:02:3b:0c:94:58:7b:3b:ad:2c:a4:37:0c:a3:14:0a:
54:e8:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:07:55 2025 by rpki-client