Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier: j/DeQUPIrR1QS5BpgmK6/z6294NCJxLQOFelr7RJgmg=
Subject key identifier: 2E:BA:F6:A8:0E:EC:99:84:ED:E3:FD:DB:69:31:B1:BA:1C:BF:4C:45
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial: 0196C239B6F3C8FE9480118DC655E14B4926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number: 0C70
Signing time: Mon 12 May 2025 02:01:24 +0000
Manifest this update: Mon 12 May 2025 02:01:24 +0000
Manifest next update: Tue 13 May 2025 02:01:24 +0000
Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: If3S01+E9ACwRIM/Arvrkoh2ftUUCL80IrxOXDqeU/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:b6:f3:c8:fe:94:80:11:8d:c6:55:e1:4b:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Validity
Not Before: May 12 02:01:24 2025 GMT
Not After : May 13 02:01:24 2025 GMT
Subject: CN=2ebaf6a80eec9984ede3fddb6931b1ba1cbf4c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:e6:31:92:ac:32:0c:f3:19:e2:ff:f0:17:
06:1f:52:f9:ff:0c:62:11:01:2a:ce:af:5d:93:b3:
bb:47:92:f1:b1:17:83:94:dd:e3:4a:0b:d6:69:09:
a0:43:2d:ed:59:2e:4b:c7:e6:34:a7:96:a7:32:9b:
b3:0a:e2:ff:66:8a:70:8a:cc:0b:34:74:aa:5b:3b:
53:95:0d:62:9f:e6:15:19:5a:6b:df:a8:5f:42:a0:
ae:70:2d:d6:d1:34:13:5a:e4:c8:f2:e4:22:b0:d2:
33:7a:55:f5:46:b4:a1:34:e1:b9:07:95:4d:e6:82:
bb:b4:a0:f4:06:2a:eb:64:59:0e:c2:ac:9d:13:ca:
ba:7a:e0:2f:09:f1:7c:e0:1e:f4:70:df:d3:f9:81:
86:23:8d:b4:d0:50:72:f3:d4:32:d8:55:bd:ed:2a:
da:4a:b8:4f:34:ac:79:55:c3:fd:b3:29:81:40:df:
8e:37:98:12:c7:1d:18:d6:47:bd:36:0a:5b:90:ae:
47:3c:d3:59:6f:a0:55:36:6d:9d:1d:76:c0:b9:df:
08:61:65:88:0e:22:9b:3f:c3:94:37:7b:19:b5:0b:
2f:44:19:61:10:2a:3f:f4:d9:b5:54:bf:74:9a:68:
3e:88:5c:d3:85:68:d4:0b:32:a5:c5:df:79:76:4a:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BA:F6:A8:0E:EC:99:84:ED:E3:FD:DB:69:31:B1:BA:1C:BF:4C:45
X509v3 Authority Key Identifier:
keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:03:d5:60:2f:61:51:8f:49:ac:17:bc:70:a2:44:a1:47:87:
4c:73:76:99:87:b2:b1:6f:1c:c4:99:69:fa:56:c6:59:ef:a0:
12:98:ec:03:32:46:1f:51:76:67:e6:61:8c:0e:ec:45:91:56:
fb:fa:81:79:0f:5d:6e:39:77:83:d0:60:8d:50:21:4b:aa:53:
28:e9:b5:78:d8:e3:b3:32:be:4e:d8:e6:39:52:35:d9:9a:c9:
83:25:56:44:29:4f:d5:f3:50:18:4b:db:93:d3:7d:70:e7:de:
b3:a5:b0:fd:c4:23:1a:87:e2:4b:52:59:1f:94:e4:13:32:04:
62:9f:c1:cc:4d:c5:a1:36:28:b6:0d:c9:06:00:04:c0:ad:47:
08:5b:fc:ea:dd:2f:9d:61:f0:9c:fc:52:1b:cf:df:57:1f:2d:
67:a5:d3:a8:5e:45:c4:27:b7:db:bc:9e:88:c9:c7:a7:ab:6b:
f8:c1:3b:74:de:6d:c9:09:0b:27:b9:f4:4f:8a:87:53:79:fa:
d4:07:32:f1:95:5a:b2:73:29:e8:11:d6:2a:13:0a:91:bc:13:
31:1f:35:98:c6:5b:ef:ef:ce:8b:a5:9b:6a:2e:de:3a:c2:9d:
be:ed:57:48:d3:af:ff:24:39:fc:89:9a:2d:46:62:84:92:b1:
4a:2f:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:45:06 2025 by rpki-client