Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: aB+IbcH5LxksA564S7Kjs38C0QwCk1hT5+ftfHjRKok=
Subject key identifier: CD:42:2B:C1:C4:F4:A6:87:00:6F:9D:A8:98:CD:CC:A7:1B:B5:F1:31
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 0196AC8CFDB5B5186AFD0174C0BD11076702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 0CBD
Signing time: Wed 07 May 2025 21:00:43 +0000
Manifest this update: Wed 07 May 2025 21:00:43 +0000
Manifest next update: Thu 08 May 2025 21:00:43 +0000
Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: v3iyJQYiT8ervdBQWM4WRDSS417QZYDMZXYZJaRoHRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8c:fd:b5:b5:18:6a:fd:01:74:c0:bd:11:07:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: May 7 21:00:43 2025 GMT
Not After : May 8 21:00:43 2025 GMT
Subject: CN=cd422bc1c4f4a687006f9da898cdcca71bb5f131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:34:6d:ff:23:25:1f:7f:ea:ce:e8:0a:b3:
07:3e:3c:94:cd:36:29:ac:85:e0:48:b6:35:a1:fc:
da:ea:b9:e7:fc:c3:ce:3f:a0:83:e2:e1:ab:5b:6d:
bd:62:c4:90:97:22:ee:52:81:de:1e:6f:f8:ae:e1:
9e:5f:84:65:af:dd:63:70:a9:c9:d1:97:3d:a9:b8:
9d:52:4f:b0:ce:8f:9b:73:91:7c:cf:01:d2:bc:40:
19:9c:13:aa:35:4b:4d:c3:19:f0:40:ff:ed:97:5f:
28:16:d7:2a:1a:94:0f:58:4a:ce:c0:75:db:35:59:
da:42:21:78:48:05:a5:0e:d0:f7:2f:5c:d6:f4:af:
33:f2:32:02:77:1f:a9:73:9e:0d:1c:b9:14:62:89:
bc:b3:3d:5e:7d:30:bf:ec:42:78:8c:23:8a:23:87:
69:f7:27:e4:7c:b0:16:90:50:c0:a7:a9:19:50:64:
2a:7f:0a:a1:05:70:5a:c2:84:eb:9c:f4:5e:d3:d0:
d9:b3:dd:94:25:a5:0d:6e:ba:33:70:b8:ed:39:42:
42:47:db:57:ba:4a:4f:18:40:1a:d4:20:bc:e1:e8:
3c:29:d4:45:4b:bf:36:bb:c0:26:80:81:6b:29:9a:
e0:80:b1:b5:dd:fa:9b:54:26:3d:bc:68:c7:8c:57:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:42:2B:C1:C4:F4:A6:87:00:6F:9D:A8:98:CD:CC:A7:1B:B5:F1:31
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a6:e3:80:86:40:50:af:69:76:c6:5d:ff:0b:fa:ec:37:7e:
ca:b3:00:30:4b:db:63:6c:d0:c6:ed:1b:bd:45:15:ff:b0:98:
71:d1:e7:5f:f6:37:cc:9f:b4:3b:ac:6b:09:4c:98:ed:b7:e9:
ce:ae:82:2f:8d:f8:db:9b:7b:3f:1b:3d:0c:8c:4b:8c:cd:97:
f7:b4:9b:1b:8f:e6:8d:96:32:fa:dc:cb:eb:a6:59:3b:9d:8c:
3b:9f:eb:a8:db:db:bc:46:94:fd:a6:e6:99:ec:ad:2b:ad:9c:
9a:e7:db:25:07:39:2c:ba:67:a7:1d:c3:70:e2:a3:ac:1d:ea:
a0:9c:e3:f9:96:98:15:7f:36:b6:1c:2b:db:40:19:9f:f7:7f:
44:c7:1d:b7:dc:a9:cc:e9:93:ed:48:dd:e4:5e:20:51:86:07:
8f:80:e1:ac:25:30:85:aa:1e:4c:e3:a5:a2:ea:db:84:b2:3c:
0e:a4:43:49:c3:9d:95:0f:c6:ce:ce:ac:d5:61:9d:6a:21:bf:
ea:7d:71:71:92:8a:9c:10:a5:77:3f:c3:ca:ee:82:1d:1a:c4:
cf:ee:38:d4:75:63:9d:62:0e:56:11:7a:a0:c9:77:31:9d:33:
94:04:5f:13:e5:99:6d:0a:3c:62:3a:fa:a6:38:b3:2e:c1:7d:
88:f2:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:23:29 2025 by rpki-client