Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: ZsSdPVnp9O7Ae5auwpN+3jX5qgNrINo//t3C00dSnQE=
Subject key identifier: E4:9B:93:CE:17:4F:BB:CE:BE:84:B2:72:66:21:31:6D:75:8B:8B:B6
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 0196CEE2710C391DA711161DEC19D14F3DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 0ECA
Signing time: Wed 14 May 2025 13:01:08 +0000
Manifest this update: Wed 14 May 2025 13:01:08 +0000
Manifest next update: Thu 15 May 2025 13:01:08 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: DwFOOw21/cS50vmk7ljo+FcCYHF1ivq/NB5PAOcFfB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:71:0c:39:1d:a7:11:16:1d:ec:19:d1:4f:3d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: May 14 13:01:08 2025 GMT
Not After : May 15 13:01:08 2025 GMT
Subject: CN=e49b93ce174fbbcebe84b2726621316d758b8bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:2d:c3:2e:e6:54:9f:6a:5a:38:ee:20:a3:
c2:f3:f6:46:ae:b6:29:07:a5:df:ba:8f:c6:ee:da:
f4:ed:d0:4d:8b:87:6a:f9:3d:83:a9:fc:8b:70:a2:
0b:59:9a:77:f2:ef:5c:28:55:b3:56:39:c9:4f:0a:
a3:71:41:fa:a8:6b:ab:d8:34:c3:ea:ee:5c:4b:68:
a1:ae:10:07:37:a5:75:f5:f9:76:b9:c3:17:fe:10:
25:eb:df:15:4c:03:18:f1:6d:1b:d9:61:36:96:d8:
64:fe:98:a9:7f:e7:41:67:c2:4c:76:b6:ad:fd:30:
46:99:14:0e:48:2c:4a:3b:52:6e:d5:db:0a:f1:5f:
cb:1f:7f:8c:3a:cd:f0:f8:d1:a1:36:79:19:b9:4e:
6f:f0:dc:db:4e:c7:9f:2b:44:bc:12:9f:80:6d:6b:
e6:d4:9d:92:97:27:5f:8f:5a:64:e2:2a:68:83:e9:
98:40:cc:42:9f:b7:f2:1f:1b:23:e7:8e:01:45:1e:
32:4a:7a:99:92:49:57:2a:83:00:ce:3d:7f:2b:62:
d3:71:27:6f:6c:f5:e6:06:9f:4e:f6:10:b9:91:46:
27:38:6c:27:37:e8:e7:80:26:f3:fb:0c:20:3b:26:
ef:43:a3:40:f7:6d:26:9d:ff:4d:27:ae:dd:a9:2d:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:93:CE:17:4F:BB:CE:BE:84:B2:72:66:21:31:6D:75:8B:8B:B6
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b3:f7:41:fa:4b:54:b7:20:b3:04:cd:bd:ae:2b:91:05:9c:
1a:a8:ac:fa:a7:5b:f8:c9:ec:86:a7:25:74:0c:b6:40:26:a1:
66:21:1c:e5:f5:42:79:07:b8:af:66:58:e9:be:ed:13:8d:14:
87:8c:54:ec:17:f7:74:50:2b:a3:45:09:4f:d6:7b:c2:a4:7c:
5d:d2:85:60:a5:37:40:ad:3d:6a:36:aa:95:e4:97:87:c1:3d:
25:73:fc:05:cd:2b:83:b0:69:1e:d2:64:47:f0:09:02:a1:86:
16:4a:a8:58:37:8d:3e:c5:3a:60:ba:ff:4d:9b:3d:27:8f:b8:
4f:85:94:f0:1c:13:cc:f3:8e:82:d5:a7:72:aa:37:39:e9:e1:
43:9a:9b:9b:a7:de:f8:07:71:7a:ff:d3:e7:c9:86:38:42:11:
10:74:ec:99:e5:64:22:e9:21:cd:e2:a5:e3:67:f1:47:86:26:
9a:74:16:da:92:71:f7:00:d6:35:54:3d:71:09:f2:f8:8b:c2:
44:03:a1:95:fd:38:9b:fa:0e:11:9d:87:7a:cd:05:c0:74:ef:
17:f3:22:cf:bb:5a:6b:6a:9b:16:d9:b2:dc:d3:d8:5e:af:29:
e6:14:c8:a5:68:3a:17:f1:2b:12:39:8c:82:27:2e:73:db:3c:
49:61:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:40:53 2025 by rpki-client