Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: 8qDt1NUsUU73PTukaPToMw0ECeCUI8aeGuxEpBDM1WE=
Subject key identifier: C6:96:24:93:55:2C:63:3B:A9:FC:61:E3:3F:FF:5D:B8:C1:4F:C5:C8
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 019677FBC4582BA41071EE044E48545C463C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 10C1
Signing time: Sun 27 Apr 2025 16:01:50 +0000
Manifest this update: Sun 27 Apr 2025 16:01:50 +0000
Manifest next update: Mon 28 Apr 2025 16:01:50 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: NLDMn2PYJblRbZDk1odVtytF1NC/XpihZQ5al3hn2tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:c4:58:2b:a4:10:71:ee:04:4e:48:54:5c:46:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Apr 27 16:01:50 2025 GMT
Not After : Apr 28 16:01:50 2025 GMT
Subject: CN=c6962493552c633ba9fc61e33fff5db8c14fc5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:26:18:ab:3e:62:66:c2:37:c4:8b:d6:e5:
77:99:27:71:8a:14:fa:8a:12:53:91:40:fc:48:dd:
f6:f1:96:1d:70:0c:de:ac:26:3d:c0:6f:11:94:54:
a2:dd:50:d9:e8:09:b8:2e:ba:24:a0:db:01:56:0d:
da:98:9a:5f:f6:3f:5b:a3:28:60:ab:06:57:d5:2c:
09:fc:80:5e:b4:c7:29:97:3a:f8:a3:ec:1d:79:51:
5d:4b:1c:7c:d9:c3:cb:5d:ee:d0:78:41:f7:31:eb:
09:ef:8b:fc:5d:42:4f:72:70:01:88:0c:5d:36:c0:
d5:39:e3:d5:31:50:ac:0a:50:c9:c1:04:4a:38:5e:
27:01:bc:15:5b:f6:1b:4c:f3:6e:69:46:6f:7f:54:
c8:da:82:5d:45:79:2d:8c:a5:eb:19:76:80:00:2e:
cf:af:f6:a7:64:05:82:74:97:dd:9c:cc:e5:b8:a9:
26:77:25:0e:2e:a7:34:9b:8b:11:12:1a:df:b4:e9:
c7:5d:d9:4f:da:58:7e:bc:df:ec:00:a5:ea:e7:70:
c1:ae:be:4e:61:d0:22:b3:6d:4a:f5:7d:b3:b2:13:
75:14:68:b2:2d:ff:1b:57:04:66:cc:1a:91:6a:b9:
fd:19:36:07:8c:3e:86:64:b8:22:3e:c9:ef:e2:82:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:96:24:93:55:2C:63:3B:A9:FC:61:E3:3F:FF:5D:B8:C1:4F:C5:C8
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:14:91:4d:b2:a7:3d:22:bd:c2:46:b7:29:13:4f:8e:c4:1e:
a1:d7:67:ac:37:51:e8:e8:a4:94:e1:88:04:72:4c:2d:11:44:
6e:92:38:c7:23:5f:16:b6:6e:35:58:da:6b:96:0f:d0:8c:33:
6c:7b:d2:e4:16:0f:1c:31:d1:55:06:cf:2f:ce:e3:7a:b0:03:
42:22:af:ea:61:ff:a6:6d:f7:0a:77:d1:a5:5b:ed:c0:83:02:
6e:a3:d9:46:24:22:63:f8:e0:10:d1:5e:67:e3:a2:d5:ff:fa:
f8:bb:c7:a2:6c:51:11:2d:87:d4:61:7f:c4:bc:29:44:cb:3e:
5b:fd:ac:be:bc:11:6b:6a:0c:f0:b5:d1:c9:9f:7b:59:df:df:
47:1a:b7:89:e6:e6:33:23:06:8e:6f:7a:d9:11:52:26:b2:30:
b4:18:c3:5e:14:0f:79:66:fb:2c:33:6b:cb:57:2e:77:a0:b4:
3e:39:5b:7f:e7:90:69:17:bb:ea:f2:7d:4b:28:bf:12:fb:6e:
3f:f3:56:3f:0e:15:6d:51:04:1a:85:c0:bb:eb:15:a7:03:76:
ea:0b:8b:d7:c9:a8:01:38:46:42:00:fc:f4:25:26:a5:e5:eb:
91:69:37:65:4c:17:4e:e6:84:dc:e4:d7:09:48:52:f6:92:6f:
ec:b7:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:28 2025 by rpki-client