
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: T3ZN1dwyjXGKLutrJN+0DDI5srRGwjNxCoSrHPwmyfE=
Subject key identifier: 8B:E6:BF:E3:49:DE:7B:FA:F2:57:6D:8C:3A:1B:B2:E7:B8:E6:12:BD
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 019691841B1E789113AAA949E01F349228BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 04C7
Signing time: Fri 02 May 2025 15:01:15 +0000
Manifest this update: Fri 02 May 2025 15:01:15 +0000
Manifest next update: Sat 03 May 2025 15:01:15 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: eHDOd9iApo9PYUF+a2xuUllmgPv764ysesCQ/nr3K3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:84:1b:1e:78:91:13:aa:a9:49:e0:1f:34:92:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: May 2 15:01:15 2025 GMT
Not After : May 3 15:01:15 2025 GMT
Subject: CN=8be6bfe349de7bfaf2576d8c3a1bb2e7b8e612bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:60:68:f3:ac:67:c9:62:a9:d7:6f:b5:ad:
93:29:47:48:fc:89:0e:d7:c5:78:b3:88:9b:cf:38:
81:ff:44:d4:76:1a:65:af:14:b7:f8:88:cc:ec:9a:
bb:c9:af:80:75:77:8a:fa:e3:13:db:21:6d:99:d3:
b0:0f:13:48:63:ce:7f:7c:90:9a:ac:63:f1:c5:9f:
41:82:e9:8f:e7:81:e6:92:f3:99:75:18:18:db:b1:
15:62:f0:42:53:3a:bf:f9:9a:25:6d:64:f7:6f:0c:
0e:f7:40:8a:a1:45:26:e1:d5:c3:23:cb:0f:65:32:
f7:bc:46:8e:db:81:57:53:53:06:91:7e:0b:60:7b:
50:f9:2b:e7:e1:b7:28:52:4f:4b:a9:de:e2:75:51:
71:cf:c4:69:33:3c:e8:5f:c0:18:4b:5c:e4:5d:8f:
29:7f:6b:94:26:e2:3e:6e:08:5d:05:d6:4d:73:95:
70:01:c9:b7:04:71:bf:c1:ac:50:b8:5d:cb:36:5d:
c8:b8:f1:c8:cb:0c:cb:cb:e0:06:45:4e:53:e8:e4:
e6:5a:a2:26:68:60:38:31:0c:43:1e:c2:fd:4f:ef:
a7:d9:93:13:b8:f8:2b:c9:13:a5:8a:ca:bc:c7:e1:
cc:d4:38:fd:9e:c5:0d:0a:c8:f9:19:4b:52:3e:6b:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:BF:E3:49:DE:7B:FA:F2:57:6D:8C:3A:1B:B2:E7:B8:E6:12:BD
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bd:57:c0:81:4e:00:ae:c6:d7:94:5e:52:33:a5:4e:db:2b:
e0:f4:ac:23:00:c0:af:12:3d:a7:e8:3f:c5:3e:a9:09:94:cf:
61:31:c6:24:cb:bc:8c:27:f8:aa:9f:a4:d8:a2:73:16:1c:61:
d9:ea:8a:80:7a:fe:65:7c:c8:8a:f8:45:7c:74:a8:50:9d:fd:
9c:ce:81:47:c3:2a:db:0f:43:f1:32:51:2f:09:a0:c7:35:3a:
8e:b0:3b:44:14:27:af:23:7c:a1:af:10:bb:b8:43:11:d1:11:
4b:03:10:ce:b8:7a:08:38:98:88:b0:0a:7f:a1:e2:83:0c:87:
5b:e7:05:2c:42:22:3e:10:94:5e:04:94:33:a7:b7:6c:4e:9d:
36:50:bd:3d:10:a6:6e:d3:ce:1f:a9:56:e4:e5:11:c5:d1:d2:
f0:d2:eb:0b:54:5c:52:74:42:41:a8:ca:16:26:2e:e6:61:cb:
8c:48:10:bd:5b:68:1e:ec:32:cd:4c:ae:bc:bb:57:97:a0:14:
90:3c:af:11:79:b1:0f:40:77:c5:7b:5d:e5:63:52:ea:d8:e7:
83:01:2a:f9:a7:5c:70:98:6c:e0:cc:25:fc:01:30:63:33:f2:
cf:31:d7:b8:d3:46:d4:3d:d6:f9:63:6d:f9:f0:31:b8:ab:ab:
79:c8:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:12:31 2025 by rpki-client