Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier: 0cjopgky14m/x8hcwyC8OdiCrKIzMxB/v8o55+MGp+8=
Subject key identifier: A4:51:DC:07:18:84:99:E3:6F:AA:CD:07:C0:66:41:C1:39:10:C2:5E
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial: 01967B69BE6E40671529856A8792152D92F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number: 0D32
Signing time: Mon 28 Apr 2025 08:00:49 +0000
Manifest this update: Mon 28 Apr 2025 08:00:49 +0000
Manifest next update: Tue 29 Apr 2025 08:00:49 +0000
Files and hashes: 1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: 0m/UaRJQHKqUHLDxFgcTtcD1Tt5AQ4/OSOlFjKarz9Q=)
2: 4gz_E19lt_WQtnrzaUTS2wLE9kU.roa (hash: EPYfgGTHeJ3gz/LYRQ9uBlJ8BFrAwAfRiJVJRAOGoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:be:6e:40:67:15:29:85:6a:87:92:15:2d:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
Validity
Not Before: Apr 28 08:00:49 2025 GMT
Not After : Apr 29 08:00:49 2025 GMT
Subject: CN=a451dc07188499e36faacd07c06641c13910c25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:0d:21:79:3d:26:ac:4f:17:59:63:2b:34:
f9:fc:31:bb:d4:f2:a2:c0:ad:e3:8f:08:e6:59:b7:
cd:ac:d3:73:1d:3b:b7:e5:ba:69:ee:bf:fe:69:92:
dc:e4:b8:7f:d7:0b:cc:cc:3c:78:db:30:3f:91:d6:
4b:0e:c7:e6:51:63:43:0d:6e:bb:7f:06:70:6a:ae:
8c:e3:81:08:49:15:b3:74:de:53:29:07:ce:38:82:
46:ed:f0:2b:93:fe:da:d5:37:da:4f:92:df:59:a6:
1d:5e:3d:58:aa:9e:e8:1a:a4:82:07:97:8c:51:11:
1b:3f:7f:83:4c:e7:3c:80:fc:96:95:78:2c:97:00:
4f:65:6c:6b:6f:54:97:31:9e:5b:1d:ff:b3:a4:0b:
4c:b5:09:ef:4a:70:32:4b:3b:aa:ae:a8:be:84:a7:
e0:85:5d:9d:6c:7f:4c:7a:17:48:4b:c3:2e:d0:13:
b4:26:3b:7f:ad:83:5d:7a:69:bc:dc:e8:63:64:60:
ec:01:48:d4:e2:af:69:2d:e1:b8:a3:f1:45:fb:c9:
be:69:a5:c9:3c:2a:f5:6c:e9:32:6e:00:d3:96:74:
c3:24:92:e7:31:e2:fb:ce:20:3b:42:d2:0b:0e:b8:
83:bd:6b:c6:3d:89:ad:e2:c8:93:97:5a:e6:cf:7b:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:51:DC:07:18:84:99:E3:6F:AA:CD:07:C0:66:41:C1:39:10:C2:5E
X509v3 Authority Key Identifier:
keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0a:54:8e:62:3d:4d:3f:91:6f:04:75:95:f9:0a:0e:d1:40:
6b:26:54:42:ce:68:a6:79:1e:a7:69:a8:47:21:fd:54:5b:ca:
3a:2c:51:e0:7f:e0:86:6b:bc:ae:61:b3:58:b6:e4:09:33:c9:
f1:4f:1a:12:56:89:5a:31:04:ab:b4:b7:52:26:0f:3d:4d:49:
28:2d:97:55:a7:21:f8:bd:f7:ba:76:fa:37:c8:12:b1:65:83:
b1:44:34:b3:7a:53:4d:6c:14:5a:d4:fd:90:d7:c4:37:b5:67:
1b:6b:55:10:53:1f:81:81:d5:92:07:45:ad:66:f5:99:7d:07:
8d:b1:79:d5:35:c2:36:78:70:50:f9:c2:e3:39:79:f6:54:68:
e2:c8:4c:3a:74:83:32:61:79:b7:84:28:97:99:d6:d3:63:73:
ee:cc:b7:93:a7:93:ed:5d:ee:f9:85:d6:e5:06:0b:a3:36:38:
60:77:2d:57:52:48:af:54:c6:c4:52:d3:bd:51:a6:ff:85:96:
d6:2c:aa:56:1e:93:89:c6:d5:92:97:f2:74:74:46:4d:86:91:
7b:58:8b:93:ed:1b:e2:33:d9:d4:c5:d6:7e:48:75:88:1d:18:
97:21:7e:15:04:c1:ed:46:b8:55:61:96:13:1e:c6:a3:6c:3b:
99:7c:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:05:12 2025 by rpki-client