Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: bPAG2n6yKdeOVwXOYB8MaltrbKrXtIhAAdKgaPaeeMQ=
Subject key identifier: 12:B6:BA:1B:6F:F2:20:D6:52:76:9A:D3:EA:68:AD:40:4F:5E:3E:5B
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 0196A4654DC81514EFBBD9D89FC0F3BE2E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0E7E
Signing time: Tue 06 May 2025 07:00:24 +0000
Manifest this update: Tue 06 May 2025 07:00:24 +0000
Manifest next update: Wed 07 May 2025 07:00:24 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: ef8MgPzxP2oksrYLwprnpRfUHkLrl81vB9lGLHqS7ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:4d:c8:15:14:ef:bb:d9:d8:9f:c0:f3:be:2e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: May 6 07:00:24 2025 GMT
Not After : May 7 07:00:24 2025 GMT
Subject: CN=12b6ba1b6ff220d652769ad3ea68ad404f5e3e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:71:43:c1:67:da:5a:57:73:cc:6b:9d:54:
49:fd:6d:02:3c:67:dd:7c:ac:56:d3:d1:bb:97:2d:
07:22:2f:a9:8c:6e:b3:93:1f:a3:0f:67:a3:fe:27:
2e:e7:df:ed:ad:c8:27:c9:70:2a:25:f3:07:ca:5b:
b8:67:c6:16:dc:b6:8e:1a:82:7b:e9:15:be:2d:09:
31:d0:3d:3a:e1:7b:8e:39:13:40:4c:13:04:b2:8d:
0f:1b:01:e2:7c:be:79:d8:c0:b7:fb:62:d6:f9:fb:
06:91:55:1f:cf:70:cc:cb:c3:5b:8d:95:a2:72:4a:
5f:57:55:64:33:26:8a:db:d8:8d:e1:56:05:ec:6a:
ed:a6:12:81:63:5f:76:f4:e4:ad:d6:64:e8:4b:9f:
28:a6:f2:b2:0a:30:d2:ec:72:78:21:f9:ab:9b:3e:
b4:60:fb:1b:a9:b8:01:8c:81:bd:1b:5e:be:e7:91:
8b:44:31:63:3a:38:98:c1:5d:47:31:cb:0f:4e:c0:
d9:fb:f6:0d:17:d7:bd:b3:6d:a2:f9:00:4f:6f:51:
fb:cb:e5:10:15:ed:ba:65:79:7e:94:d0:03:87:46:
71:78:03:e4:fb:42:62:09:a1:7e:60:c6:06:49:0c:
f7:e3:b6:25:92:39:f7:ef:2d:1b:6b:77:f0:7e:a3:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B6:BA:1B:6F:F2:20:D6:52:76:9A:D3:EA:68:AD:40:4F:5E:3E:5B
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b0:d2:2b:90:d7:2e:92:bf:7d:0e:6e:a6:fe:26:f1:30:d1:
bc:4c:d3:9e:a1:52:64:db:6f:da:4c:d9:f7:73:db:a8:96:55:
3d:0d:3e:06:e5:8d:b1:73:80:51:a0:89:78:1c:b8:e3:7e:94:
e1:b7:73:6e:86:6e:0d:75:c8:0b:ad:d9:5b:5a:55:c5:04:06:
46:1f:fe:ee:1f:67:a6:e8:4b:60:8d:db:74:a3:7c:05:5a:ea:
76:d6:58:1d:31:ee:87:0a:a5:16:a5:76:ae:5d:93:e4:1a:2b:
ab:a1:02:90:68:bd:08:b1:81:25:3b:21:e6:d2:e8:6b:0c:db:
94:95:25:df:aa:a1:ea:99:02:a2:00:d6:7f:8e:94:63:d8:3f:
79:a0:b2:83:e2:b3:6b:f5:73:e2:d2:f9:23:77:aa:39:48:92:
3d:49:df:b9:15:3e:96:e3:56:69:2f:1d:97:f5:37:32:3d:af:
f4:cc:ae:10:04:53:16:32:7e:e3:22:47:37:19:83:e8:94:a4:
5d:d2:e6:2e:dc:70:5c:d6:f8:93:8e:1b:ea:82:74:72:29:91:
a3:9d:36:b5:65:8b:bd:0e:db:eb:0e:7b:ce:f7:cd:d7:65:96:
64:d0:d2:b2:c4:65:d2:de:d3:81:fa:19:c8:00:f8:69:2f:ad:
fc:66:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:58:27 2025 by rpki-client