Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: huk7yebADN9SRLiFJX9fZmq9NGlGNkU7fe3/34ZbWKw=
Subject key identifier: D4:49:22:88:19:AD:35:63:88:A9:E1:68:63:FD:83:AB:C7:3F:01:C5
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 0196A1D28E14CA002400FD074C63991DC19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0B95
Signing time: Mon 05 May 2025 19:00:52 +0000
Manifest this update: Mon 05 May 2025 19:00:52 +0000
Manifest next update: Tue 06 May 2025 19:00:52 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: ISVUb58Uhd3CdUbHMgEoKzZr17jA5GQglN4G9qVun/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:8e:14:ca:00:24:00:fd:07:4c:63:99:1d:c1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: May 5 19:00:52 2025 GMT
Not After : May 6 19:00:52 2025 GMT
Subject: CN=d449228819ad356388a9e16863fd83abc73f01c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:26:7f:97:94:52:69:09:61:4f:65:b6:35:
76:10:d4:47:be:24:21:33:e7:60:91:63:f9:5c:cf:
b6:de:f8:d1:40:bd:85:01:54:d0:0b:51:5a:32:d5:
57:fd:75:92:48:c4:e2:f8:cb:63:c7:a2:62:cc:5f:
e1:00:28:1b:66:7b:2d:65:2b:5d:4a:3e:b7:47:70:
b5:20:0e:d8:91:47:91:4d:90:f9:a9:c0:05:09:7c:
21:90:8f:f3:54:64:ac:7c:25:5a:4c:5b:21:45:85:
a8:3d:7a:1f:45:b9:29:ac:df:32:b2:70:29:96:a0:
dc:be:3e:4a:d3:b0:d3:3a:60:d2:58:16:8d:2e:c3:
ec:52:60:12:98:76:b2:18:b6:e0:f3:30:8b:3c:e6:
d7:c0:c4:ed:19:14:a2:77:4a:ba:3b:77:a9:c8:4b:
c5:59:9f:2c:fd:cb:43:33:88:69:0e:6a:c2:a0:2e:
62:ee:a1:b9:10:78:5f:8e:38:83:e1:16:82:19:f7:
c2:81:b4:4a:5a:f1:3e:73:3b:08:4b:ee:f1:77:2a:
46:7e:ea:2b:7d:e3:30:98:7c:af:4b:98:84:97:cb:
dc:1e:30:41:b8:64:64:f8:3f:00:5b:a7:4f:6a:36:
23:a8:ef:c8:0c:d3:22:f4:7d:c5:06:bb:fa:d6:b6:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:49:22:88:19:AD:35:63:88:A9:E1:68:63:FD:83:AB:C7:3F:01:C5
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:78:db:3c:96:d9:a6:2d:1f:51:b6:96:4e:4c:8f:f0:e4:b1:
43:b4:15:fd:36:7a:f3:d5:8e:84:de:99:15:7b:bb:ed:a3:5f:
72:12:f6:67:91:8b:61:01:e6:4c:57:82:16:44:4e:d2:36:c6:
21:75:7f:10:ac:18:e9:46:a2:1c:39:4e:cd:0c:09:77:c6:8f:
5e:35:e9:3c:22:10:0c:59:78:88:54:1c:68:b8:ad:ee:e4:94:
e9:bb:a2:da:61:93:e8:57:6e:50:04:d9:e2:49:02:b2:cb:43:
a4:cd:5f:2a:3b:7f:ef:f4:6d:57:f2:10:9c:89:80:9a:eb:dc:
b0:28:89:b9:c7:25:a9:53:74:32:dc:55:43:f7:30:d8:3a:1b:
13:77:47:a8:e1:c4:52:2a:43:c7:af:eb:40:39:8f:18:15:ad:
30:a2:b6:b8:f3:25:b5:b9:c4:2f:e4:63:4b:1e:80:22:02:59:
cc:58:01:65:9e:c1:19:76:d9:03:37:ca:a7:d3:60:6c:50:54:
7e:c5:32:a7:fa:ff:0f:21:66:23:04:82:9c:ca:27:ec:c8:5a:
12:9b:81:c0:8d:f5:e3:f3:55:20:33:1e:1f:45:12:40:c1:be:
f0:e6:cd:20:ea:68:41:79:f4:fe:45:89:0a:73:7f:93:0c:6b:
82:e1:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:15:52 2025 by rpki-client