Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: 9Rt7sFCbthURExi1r9X2mxIW3TX8pz9C14FsNCiDTIk=
Subject key identifier: 1A:D5:D2:4A:45:CA:D1:59:A1:79:20:EE:86:20:24:DF:10:A3:92:FA
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 01969FE43AE663E6E4722F7591D70E7501F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 143E
Signing time: Mon 05 May 2025 10:00:56 +0000
Manifest this update: Mon 05 May 2025 10:00:56 +0000
Manifest next update: Tue 06 May 2025 10:00:56 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: kbTRCYOBjO/UJeaxlpU03MBgILF3pC87ukfoPVj/3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:3a:e6:63:e6:e4:72:2f:75:91:d7:0e:75:01:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: May 5 10:00:56 2025 GMT
Not After : May 6 10:00:56 2025 GMT
Subject: CN=1ad5d24a45cad159a17920ee862024df10a392fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:46:bb:22:38:0f:14:42:8c:30:d6:09:d6:
f6:4d:58:6e:d7:5b:73:6e:00:c8:89:70:e1:96:92:
78:d6:80:38:76:5e:9b:17:79:88:ef:0d:05:c3:d0:
19:1f:36:85:5c:21:92:22:62:65:13:4f:4e:c5:6e:
7f:96:c2:7a:30:81:cc:4c:e3:33:74:87:a5:d1:be:
32:27:61:a9:a3:f5:db:65:5e:96:f8:b7:22:4f:8d:
d1:f8:22:ee:64:62:18:23:7f:ab:48:51:83:1e:78:
6d:30:d6:b0:d0:db:01:db:12:95:03:71:e0:fb:e5:
6b:58:21:14:ae:83:d4:b7:bd:c1:9e:2d:3d:53:bc:
06:06:8f:e0:10:4c:0b:85:6e:c6:97:69:0c:b6:29:
46:10:2a:48:2b:c7:c6:f1:51:88:d8:13:08:02:d3:
0b:d9:61:41:2c:7d:ea:59:20:44:de:e3:38:47:3e:
3e:fa:a5:81:54:ae:2b:15:ae:da:ba:61:c1:31:44:
d7:78:1f:34:9b:b0:8e:a0:fc:37:95:ec:b5:c2:ce:
10:d1:64:c6:95:d8:41:a2:d8:d8:05:46:50:3d:e5:
56:85:46:f5:29:2d:9d:14:1d:f6:9b:19:92:58:fa:
9d:ae:58:08:ae:96:7e:56:8d:bc:8b:99:11:6e:3f:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D5:D2:4A:45:CA:D1:59:A1:79:20:EE:86:20:24:DF:10:A3:92:FA
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:45:b5:29:6d:d1:3d:d8:8b:ca:07:bc:73:2d:29:bb:be:6b:
77:5a:90:33:81:62:b1:82:69:bd:8b:bf:14:de:7e:5a:ca:43:
70:8e:df:8b:26:04:a2:00:59:4e:36:4c:7c:26:2b:ff:49:a3:
30:e6:e2:5c:5a:eb:1a:13:f6:8d:f7:43:61:8a:ca:21:4e:0c:
08:1f:3a:d9:24:f4:6e:5c:37:99:72:52:9e:72:39:09:d9:f3:
1b:c3:fe:a8:e1:8b:0c:64:d5:18:66:50:56:79:05:b7:02:7e:
5d:a8:64:87:9b:d4:67:c0:c5:7a:1f:db:6e:b2:33:43:d7:b1:
63:58:f8:a2:5e:a5:7b:19:f9:a1:19:c9:12:49:ad:fd:47:4f:
5a:e5:4a:2f:e1:92:5b:1e:ca:60:04:ae:42:dd:95:2b:2e:4b:
58:07:ca:95:df:3e:9e:b9:55:bb:f3:50:99:cf:4d:61:62:ca:
c0:b5:7f:6f:7a:de:d1:b9:58:c2:21:4f:4a:85:3f:e1:c1:11:
d7:3e:f5:85:04:60:df:aa:9c:46:83:56:44:07:4b:01:04:d6:
88:da:ae:83:b3:c2:11:e7:23:d9:b2:fb:ef:86:0b:29:17:50:
84:26:d1:c3:c5:55:9c:4e:6e:70:68:e5:43:be:42:f7:44:b6:
ce:c1:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:23 2025 by rpki-client