Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: hARifl1N1av3s7EfNDnkk5IsJAKRPl4w+0Z4UxQqxfY=
Subject key identifier: D9:B2:01:20:FE:62:FC:30:8E:6E:40:05:5A:AE:9B:06:24:6F:6A:BA
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 0196C2A67599B5DC4C40227C4499EA0D7E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 0FE4
Signing time: Mon 12 May 2025 04:00:11 +0000
Manifest this update: Mon 12 May 2025 04:00:11 +0000
Manifest next update: Tue 13 May 2025 04:00:11 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: ogVPm0KnjpeOriFTl+d2VFgYfJ6FJCI6M38JYhGm+cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:75:99:b5:dc:4c:40:22:7c:44:99:ea:0d:7e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: May 12 04:00:11 2025 GMT
Not After : May 13 04:00:11 2025 GMT
Subject: CN=d9b20120fe62fc308e6e40055aae9b06246f6aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f3:bb:d2:9e:e3:b0:aa:0d:b5:e7:8c:87:ca:
b8:87:aa:fe:94:56:d3:13:b7:8b:95:ee:89:68:53:
c1:51:20:3a:9e:a8:7c:46:3a:fb:0a:21:55:85:83:
42:f2:ab:23:2e:19:7f:64:bc:9f:3d:a5:24:9b:06:
85:ee:e9:ad:b1:46:ef:55:46:f9:b8:94:da:b2:3e:
9c:f6:52:94:12:db:5f:a9:40:61:4d:32:2f:e0:94:
41:4e:a9:6f:ed:90:76:fa:48:88:41:47:2c:04:30:
3c:eb:51:7c:64:6c:91:42:ac:a5:86:02:78:bc:d0:
be:43:9b:ad:cd:df:e2:af:63:34:96:5c:a7:c9:2a:
46:0b:6a:40:09:3b:d4:4d:29:db:96:d9:9a:96:85:
93:37:58:38:17:66:73:51:c1:5d:35:c6:1a:1d:d8:
9c:61:f6:2f:85:fb:50:d7:28:47:56:a7:c1:b2:22:
1c:e7:7c:df:28:a3:06:1b:51:8d:58:47:0b:19:94:
98:f2:83:0e:8d:b6:44:07:3c:05:0a:db:63:9e:b2:
5a:ba:5b:46:e1:67:e4:67:f9:2c:2f:82:80:0f:28:
3a:0e:42:4b:5b:04:af:d2:31:f4:45:73:34:2e:f3:
48:f5:24:8f:3c:e4:fe:af:53:30:89:ef:f3:d4:88:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B2:01:20:FE:62:FC:30:8E:6E:40:05:5A:AE:9B:06:24:6F:6A:BA
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5a:49:ce:2a:c8:e0:dd:a8:7a:c3:3f:5f:4f:2d:12:86:f7:
c1:d4:a3:a5:2e:aa:4c:72:40:ea:de:66:a3:d8:b1:6c:66:a2:
4a:2c:3b:63:8a:53:95:82:e6:e9:24:ff:b0:89:b6:0a:f3:77:
95:b1:ad:91:20:06:06:a9:ab:20:40:be:e3:a1:63:8f:a3:9b:
67:5e:f6:75:c8:8b:eb:e9:18:45:4c:83:69:f9:d4:f7:fa:18:
21:a7:d5:b4:f9:c3:60:8a:b9:48:56:64:8d:e0:83:e1:37:2e:
e3:0b:ff:16:aa:59:cc:65:60:9f:d2:48:82:6b:92:da:f8:10:
48:da:db:d1:aa:48:5c:85:ff:90:10:f9:09:78:58:a7:0b:37:
d8:bc:81:e1:33:ac:0c:de:fc:9f:53:42:53:b9:10:5b:09:b0:
a8:b7:d8:2b:a0:04:5b:49:d8:29:b8:cb:f0:18:7e:67:e2:ec:
87:9c:13:81:30:1f:cb:00:96:bf:81:30:25:ad:19:04:68:80:
08:df:c4:80:e0:cd:6b:a2:32:c1:83:5b:35:eb:28:07:ba:34:
94:6c:cc:fa:fe:c5:63:3a:2c:25:74:36:25:19:17:61:83:ee:
bb:ee:8c:6b:8e:73:91:30:89:75:1f:2c:95:03:bf:a6:12:7b:
8d:13:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:59:31 2025 by rpki-client