Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: MzwAAxBPscfE1hrqcO14gAtK9n8dGx9gD3OAPd8cx50=
Subject key identifier: AB:99:B5:70:63:2A:29:13:80:44:F9:D3:12:92:1D:D1:6F:3D:DE:A5
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019678685BBFD33E277965F73918C598571D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 18:00:27 +0000
Manifest this update: Sun 27 Apr 2025 18:00:27 +0000
Manifest next update: Mon 28 Apr 2025 18:00:27 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: CRvvGPzSzWEZ6oly5bMG4ZSexeJ5kNmt3LfzjiDWz/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:5b:bf:d3:3e:27:79:65:f7:39:18:c5:98:57:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Apr 27 18:00:27 2025 GMT
Not After : Apr 28 18:00:27 2025 GMT
Subject: CN=ab99b570632a29138044f9d312921dd16f3ddea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:bf:a8:6f:0f:46:94:e5:19:df:37:7b:ba:
b0:a8:5f:a8:dc:dd:0b:bd:dd:33:6d:31:9b:1a:4a:
60:ee:43:dd:9f:a1:d8:c4:ce:1a:49:23:93:a0:5b:
eb:4c:7b:2a:4f:6e:b6:60:0e:f0:24:43:ef:48:c9:
92:08:fd:bd:52:90:9d:d8:c6:db:68:c5:69:ca:49:
1c:5e:b1:4f:8c:b8:30:74:fa:e4:73:9a:39:f0:f5:
b3:3f:ad:c5:fd:a0:0e:25:98:1e:4e:e2:11:b9:93:
74:ec:c8:73:10:aa:18:7d:6a:e2:9a:e8:f9:6a:b0:
6d:c0:8c:01:74:75:ac:93:20:89:cf:b1:dd:5a:c2:
f2:40:55:b4:5a:e1:1e:5d:64:c8:08:b0:f6:26:ff:
43:fc:2a:3d:11:ee:b2:6b:1d:fe:fa:11:56:d1:44:
28:2c:e4:c0:45:9a:ba:c8:50:f9:a1:49:ec:b2:8b:
c2:51:32:b2:2d:1c:97:36:b6:68:d2:c3:0b:df:38:
54:f5:33:f7:06:80:88:9d:6d:cf:8b:11:6a:15:3d:
85:4c:c3:3a:1a:40:9e:00:09:87:13:13:f7:07:ae:
53:5c:49:9a:54:5c:c0:d5:59:57:fb:e4:32:db:9d:
c2:07:81:8d:9c:58:bc:5c:94:dd:d6:31:3d:0a:75:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:99:B5:70:63:2A:29:13:80:44:F9:D3:12:92:1D:D1:6F:3D:DE:A5
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f6:35:a0:75:78:ea:a7:99:64:6f:90:7e:3b:fd:5b:2d:33:
26:49:e0:f6:99:a6:4c:c7:b1:3a:a1:b1:61:1c:3e:e4:5e:19:
15:4c:c5:04:01:f0:3e:06:74:80:44:e7:ce:f0:e1:65:b9:cb:
8b:16:47:ee:13:81:4f:7d:56:39:c2:b8:61:1a:f5:ec:d4:7b:
98:03:a8:35:e1:87:94:fd:dd:f8:bd:56:c5:26:7d:af:16:e1:
1a:a0:b8:14:e5:07:69:14:0f:40:b1:e5:30:d5:6c:51:d1:45:
5e:6e:88:f6:5f:26:6d:fa:a6:70:a0:c9:f9:d8:77:ec:91:48:
c3:d3:1d:ee:43:de:ec:00:7e:6b:95:fe:1a:e2:26:95:ec:2a:
9c:eb:f3:6a:81:6f:93:cb:fb:a2:8e:46:25:ea:b0:96:f5:04:
52:ff:e7:c0:42:8c:e6:62:93:36:ab:2f:66:f4:06:32:a0:c5:
97:69:b7:90:0a:59:b3:88:00:ef:b0:f3:46:d6:6c:82:56:db:
cd:b4:8e:a5:82:79:4c:4b:c2:89:ed:08:6a:d8:05:78:d1:f8:
8d:62:9f:a6:24:3a:07:74:11:fb:a7:20:f9:e7:23:c8:fb:d9:
f0:85:00:5e:e6:0e:89:2a:e4:f0:6e:11:b1:d9:60:da:24:33:
df:46:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:12:30 2025 by rpki-client