Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
File: z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft (raw, json)
Hash identifier: uRqnJTAyRCUiJqnHEFxtmYURYnuAWjDeQed8JCCfFs8=
Subject key identifier: 96:93:42:2E:1F:83:DD:0B:B5:A6:D9:93:D0:71:1E:76:91:06:A2:C5
Authority key identifier: CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
Certificate issuer: /CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Certificate serial: 0196CB05DFFB01951A0306286329BE582AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
Manifest number: 1544
Signing time: Tue 13 May 2025 19:01:21 +0000
Manifest this update: Tue 13 May 2025 19:01:21 +0000
Manifest next update: Wed 14 May 2025 19:01:21 +0000
Files and hashes: 1: z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl (hash: zHHGNxrV/ed83t4lyTeAfHNSRYS3LrBK6cA1RkHgIN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:df:fb:01:95:1a:03:06:28:63:29:be:58:2a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Validity
Not Before: May 13 19:01:21 2025 GMT
Not After : May 14 19:01:21 2025 GMT
Subject: CN=9693422e1f83dd0bb5a6d993d0711e769106a2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:6b:19:25:e1:d5:9d:b0:a3:7b:12:87:7a:
bd:bc:fd:3d:49:d7:a1:64:a9:b5:42:2d:b8:4d:32:
70:b2:17:d3:6e:f8:84:91:70:91:30:f1:df:ad:d3:
23:11:08:d9:3b:34:84:8f:44:72:7d:20:2e:43:da:
fd:5f:94:5b:0c:0a:45:3f:b2:5c:38:64:5d:a0:89:
20:ff:51:4f:9b:39:82:aa:49:32:a1:0e:a6:e1:98:
f6:15:e2:78:82:9b:9b:12:58:48:b2:5a:1a:b3:26:
1d:8d:cf:0a:cd:4a:38:6e:22:16:98:e7:3e:6e:b8:
90:9b:8a:7e:08:40:f3:d4:68:2d:83:fb:7a:db:18:
79:6a:67:02:21:53:d9:08:77:db:a6:ed:f8:90:de:
01:c5:d4:43:fe:12:63:e4:99:51:eb:86:4a:1c:3d:
8a:ea:31:14:0a:1f:9b:45:3e:79:1b:5e:0d:11:1c:
19:58:93:e2:d4:26:9a:32:ea:67:ef:34:22:ad:d4:
37:9a:7a:08:34:89:41:2d:0a:85:89:b0:5f:54:31:
99:e4:92:ce:fd:4a:5a:80:c7:e2:a3:7b:22:fd:9a:
a8:73:8b:a3:39:c1:10:db:0d:89:de:57:8f:cf:99:
17:28:22:5f:76:c3:e7:30:b9:6d:7c:fc:c4:66:be:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:42:2E:1F:83:DD:0B:B5:A6:D9:93:D0:71:1E:76:91:06:A2:C5
X509v3 Authority Key Identifier:
keyid:CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:51:4a:b3:ee:9e:4e:b6:14:8a:e2:c1:5a:cb:7b:af:98:99:
bd:04:17:2a:c3:4f:d9:5a:db:23:f5:1d:fe:3e:0f:95:a6:b2:
e4:b1:10:c1:02:29:8c:65:82:cb:83:3d:8e:15:b5:38:63:e6:
20:0b:86:e7:39:c1:58:0a:ff:c7:14:d4:39:3e:d5:61:1d:ae:
31:7c:08:71:ff:93:5a:ce:4a:a8:73:b5:d1:8d:df:ab:c1:30:
04:5e:99:92:0f:9a:03:58:a3:17:14:72:2b:67:ba:6d:f4:ab:
da:a2:7e:f4:84:70:c0:c6:ab:51:98:18:e7:08:a4:81:dd:0f:
06:f6:e3:59:d1:b1:28:d8:f8:fa:4c:5b:a9:17:7b:64:60:bb:
84:51:1e:2a:75:64:f0:cb:ef:82:09:ca:d0:68:1d:de:f2:61:
d7:1c:68:36:81:07:09:42:57:28:f0:fe:5e:06:95:8f:37:22:
de:82:5c:7c:fe:ea:83:f8:a1:02:e3:08:bd:0b:9d:70:c9:2d:
bb:2f:a8:70:76:94:73:ba:08:a2:9a:a6:1b:50:6a:a1:8f:6c:
3d:72:80:b9:3a:7a:93:66:d5:8c:1c:22:39:5a:3b:da:0d:2d:
7a:01:3c:1a:06:6c:25:0d:66:f0:ea:f1:e7:5d:03:47:29:90:
52:95:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:09:54 2025 by rpki-client