Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft
File: Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft (raw, json)
Hash identifier: Uo+8mptqVUf/qKIZdkQGmiJuffGlOL/KOCpXc4exFoQ=
Subject key identifier: 27:47:FD:00:31:E1:0B:5F:17:F9:49:79:E1:D6:2E:82:2A:AB:88:8A
Authority key identifier: 67:AB:A9:AF:A3:7D:9B:CE:40:7F:E2:3C:79:19:89:2D:9D:9C:09:39
Certificate issuer: /CN=67aba9afa37d9bce407fe23c7919892d9d9c0939
Certificate serial: 01967BD7907921948FB37045874FE0BC46C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6upr6N9m85Af-I8eRmJLZ2cCTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft
Manifest number: 060B
Signing time: Mon 28 Apr 2025 10:00:46 +0000
Manifest this update: Mon 28 Apr 2025 10:00:46 +0000
Manifest next update: Tue 29 Apr 2025 10:00:46 +0000
Files and hashes: 1: Z6upr6N9m85Af-I8eRmJLZ2cCTk.crl (hash: LLYZnyJdAEN3YkJCnLRcLEmpWt0zoWyF1Kav4H+FObI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6upr6N9m85Af-I8eRmJLZ2cCTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:90:79:21:94:8f:b3:70:45:87:4f:e0:bc:46:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67aba9afa37d9bce407fe23c7919892d9d9c0939
Validity
Not Before: Apr 28 10:00:46 2025 GMT
Not After : Apr 29 10:00:46 2025 GMT
Subject: CN=2747fd0031e10b5f17f94979e1d62e822aab888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:71:55:a7:28:14:52:f6:02:c5:2b:04:3d:
bf:72:80:cd:3b:b5:24:c2:d0:57:68:2f:31:08:63:
00:a8:d6:b2:1b:12:8f:ec:77:12:91:00:7d:6d:67:
8c:61:5e:7c:28:4f:0a:d8:25:f9:b1:1e:e4:14:34:
c9:62:76:82:96:c9:8c:a5:2f:00:ab:2d:14:a1:e0:
29:b0:c8:57:a2:bd:87:ef:87:79:1f:1b:57:71:f9:
53:64:de:f6:bd:a5:ab:44:16:82:71:0b:54:0a:bb:
58:15:29:13:25:48:9d:07:54:6a:fd:d9:b6:5c:b7:
e9:fc:66:98:7a:de:50:3b:04:b2:15:29:4c:37:3d:
21:08:5d:b8:09:f4:05:8e:5b:07:66:fe:a7:6a:bc:
1e:5b:e7:16:8b:78:9f:f2:0c:14:c0:05:3d:02:40:
9e:67:ae:bd:73:e4:da:f4:db:a9:41:61:a2:87:16:
48:13:53:69:d1:e7:13:b6:26:b7:99:8e:3b:92:09:
f5:08:cb:5d:76:11:5d:52:6d:17:16:f7:63:b9:b9:
6a:fd:b9:3d:01:92:f9:88:02:e3:32:13:18:16:1f:
9c:bc:04:38:7e:10:1b:f7:77:ce:b3:1b:ca:25:6b:
70:a2:53:1b:c9:60:62:35:58:cb:52:92:87:bb:78:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:FD:00:31:E1:0B:5F:17:F9:49:79:E1:D6:2E:82:2A:AB:88:8A
X509v3 Authority Key Identifier:
keyid:67:AB:A9:AF:A3:7D:9B:CE:40:7F:E2:3C:79:19:89:2D:9D:9C:09:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6upr6N9m85Af-I8eRmJLZ2cCTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:53:90:c8:a5:eb:0e:5f:87:64:12:db:df:f1:0c:9b:6e:c7:
5a:ef:ae:f5:54:81:aa:b5:78:c6:99:e2:d6:9c:07:9b:a0:c7:
44:82:a2:43:ab:c0:35:63:a1:5c:21:10:28:88:3e:40:a6:45:
97:0a:1e:28:5e:fb:bc:4a:68:49:22:8c:91:64:b3:b9:11:31:
d7:ad:09:1f:90:75:31:70:fc:57:0d:e5:ec:f4:ee:f9:b1:8a:
ac:cf:f8:7a:76:ed:80:d7:e1:c7:f4:d4:3b:fa:bb:5b:fb:4b:
53:3b:de:a2:21:ab:5a:cd:94:dd:c4:c0:38:53:6a:89:4f:3f:
69:5c:2f:a7:6b:96:fb:09:d7:a1:72:75:96:a1:2c:91:96:dd:
92:c1:a3:49:7d:4f:17:ab:61:63:95:f7:30:47:eb:c7:85:3a:
66:77:12:e8:f3:66:ad:f5:4d:f0:95:df:81:3b:12:a0:86:a6:
ad:7b:d5:5e:83:04:89:01:fb:b3:9b:27:c3:f3:ab:ba:0e:7b:
76:dd:c1:dd:53:44:4e:d2:ad:c5:97:7d:63:0e:fb:dd:71:f8:
de:26:74:be:ed:e0:56:e0:2a:8e:1c:0a:5e:37:74:47:3e:dc:
4e:c4:b6:b1:f3:55:4b:45:b0:18:51:d6:d7:4b:ab:7b:42:89:
2c:e0:25:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:12:51 2025 by rpki-client