Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: wxDtdNoENp603xk9hwdH19VxPfGdulj6KNKBBb77tiI=
Subject key identifier: 42:FA:2D:77:22:05:8E:85:49:D0:A2:D4:54:51:08:DA:6F:C5:FD:0C
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 0196B9A3A25189691E8FCA73D88C40E6F201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 0D50
Signing time: Sat 10 May 2025 10:00:30 +0000
Manifest this update: Sat 10 May 2025 10:00:30 +0000
Manifest next update: Sun 11 May 2025 10:00:30 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: XyJ6dWrQ7YU5nI/YQrURE2cxHkH1sSGIeIeBzWb5rE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:a2:51:89:69:1e:8f:ca:73:d8:8c:40:e6:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: May 10 10:00:30 2025 GMT
Not After : May 11 10:00:30 2025 GMT
Subject: CN=42fa2d7722058e8549d0a2d4545108da6fc5fd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:d5:32:9a:27:6c:a9:6e:8b:fc:27:b5:ed:
ae:34:eb:a1:30:da:1b:91:7c:0d:3b:47:b8:d8:a1:
37:93:f7:96:a8:14:a1:6a:8c:7e:8a:8f:d1:7e:6e:
ed:63:23:76:ae:c3:ef:59:77:16:bb:58:2a:d1:d0:
92:c3:73:ee:2b:67:08:28:0e:44:65:43:2b:70:71:
d2:2a:48:fd:48:12:0a:9f:1c:ff:fd:1f:aa:1d:99:
de:47:b1:07:8e:3e:79:1f:8e:34:db:27:d4:0e:20:
ed:82:44:51:1a:c8:7a:8c:92:ae:1e:f3:49:70:40:
26:b4:9c:9e:a0:09:9d:46:e2:43:ab:1d:c8:e8:15:
61:bb:56:f0:33:6f:f8:03:57:2d:83:d5:6a:ad:40:
fc:bd:2c:b4:f0:73:a3:f7:38:a8:1c:6a:a0:08:a3:
eb:42:4b:93:bf:18:9d:06:04:00:16:7e:b2:39:ca:
5b:e8:54:2f:b0:35:66:d7:66:0c:46:69:7a:9b:df:
b5:4c:36:67:b8:56:12:79:5d:5c:0e:7c:74:bc:1a:
b8:a8:e7:8f:fc:eb:c0:fe:11:c9:7c:fb:26:14:97:
4b:4d:8f:e0:cb:9e:3d:9d:91:90:08:29:44:f0:28:
0a:2d:dd:58:9a:67:09:45:12:7b:3a:b0:7c:f8:6c:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FA:2D:77:22:05:8E:85:49:D0:A2:D4:54:51:08:DA:6F:C5:FD:0C
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a3:b9:74:ba:66:08:5f:ca:a5:54:2b:01:0c:f6:d4:8b:3b:
7f:77:15:fa:3b:a0:98:64:97:32:a2:9f:d7:e9:25:f9:70:92:
30:32:84:81:62:a1:e0:e3:06:ca:a0:93:16:5d:a5:97:d5:07:
72:ff:32:67:b9:65:b1:56:7d:aa:b6:96:2d:c7:97:e8:75:dd:
26:a7:6c:d7:23:c4:7e:77:06:86:6f:d9:33:4d:53:86:cf:0a:
14:be:22:59:df:9a:68:c2:c0:d7:1b:da:78:61:9b:05:9b:d2:
62:0e:77:aa:a4:c1:e9:29:be:4a:8d:82:b8:df:92:04:1f:c6:
a4:12:b7:e2:27:e9:cd:9f:f0:e9:70:e0:0f:44:15:a8:35:44:
47:6b:38:0b:07:02:4d:2c:f3:f8:df:6d:1b:95:f2:69:ed:06:
fb:48:3a:78:02:1a:b5:ce:4f:5c:9c:a5:ad:aa:48:36:2f:b2:
ee:1c:93:ee:94:cd:80:d1:e4:1c:02:93:de:3d:eb:7b:4d:a7:
06:99:1a:52:ea:f7:08:1a:97:f7:2d:a5:61:02:4c:94:4e:45:
97:1b:1a:58:9f:56:df:b6:a4:c5:3b:62:34:71:26:b0:23:10:
62:25:1e:10:35:fc:e4:1b:7a:b2:2f:dc:a4:03:4f:a0:5e:a2:
3c:69:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:00:51 2025 by rpki-client