Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
File: zkyVbVLdh2NjwhME-cAl8H1fJjE.mft (raw, json)
Hash identifier: kiA5btGQOMPPIl2o9tkzJpt4MRnFyc+MuG3575qWHlI=
Subject key identifier: 8B:3C:E9:C3:2A:7E:AB:7F:B2:E4:E8:78:D4:B3:32:83:C2:A5:EC:79
Authority key identifier: CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
Certificate issuer: /CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Certificate serial: 0196A277325C3A9604826AB838CA65A9A759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
Manifest number: 049F
Signing time: Mon 05 May 2025 22:00:42 +0000
Manifest this update: Mon 05 May 2025 22:00:42 +0000
Manifest next update: Tue 06 May 2025 22:00:42 +0000
Files and hashes: 1: zkyVbVLdh2NjwhME-cAl8H1fJjE.crl (hash: OZoAO5mgodADJRJWbZVMoGRP/ZiqwUzLDWP0e+bjxm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:32:5c:3a:96:04:82:6a:b8:38:ca:65:a9:a7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Validity
Not Before: May 5 22:00:42 2025 GMT
Not After : May 6 22:00:42 2025 GMT
Subject: CN=8b3ce9c32a7eab7fb2e4e878d4b33283c2a5ec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:b4:18:8a:20:0d:12:ff:5c:e6:13:2f:9f:
a7:1b:2b:f7:f8:65:ac:90:db:64:b9:11:0d:7e:2f:
2d:df:52:74:c4:70:ba:8a:5a:5a:17:d7:69:24:d5:
7e:c4:16:ff:0f:9c:3f:22:ab:ac:ca:fc:0d:f9:db:
23:a7:36:c9:81:63:ab:af:00:2d:da:95:a0:fc:c7:
10:a8:24:46:a8:b0:93:9b:4e:b4:31:0c:fb:58:f7:
7b:8b:e7:b3:9f:50:81:29:5c:e2:77:b9:db:cf:4d:
62:54:70:28:ca:bd:67:9c:fc:ca:5c:ba:51:4e:ab:
64:45:a6:5a:4f:0c:a9:9a:1a:3d:ac:77:8e:24:ec:
f9:38:3a:75:8d:5c:a9:15:a3:60:44:29:90:a8:e1:
72:71:83:20:68:41:f6:b9:21:45:49:4f:41:69:3f:
a4:52:cf:83:10:9b:b9:f9:59:7c:7f:04:96:ea:5b:
3d:22:71:e9:b3:ba:af:4f:e6:56:35:a7:c4:8a:dd:
9d:e5:13:aa:08:d3:87:82:2f:a1:b9:49:51:de:ee:
73:0a:8a:a5:c6:84:f9:ba:b2:94:68:db:c7:bf:d3:
e2:65:7e:0c:4f:16:6e:f0:89:ac:ac:f8:22:b9:f0:
26:82:cf:56:da:78:84:81:14:23:ce:5c:5b:1b:7d:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3C:E9:C3:2A:7E:AB:7F:B2:E4:E8:78:D4:B3:32:83:C2:A5:EC:79
X509v3 Authority Key Identifier:
keyid:CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:fa:fb:39:b8:a6:37:6c:1d:60:17:10:67:35:fc:7a:4b:
1c:e7:60:58:8c:35:a6:9d:93:ea:d3:96:9d:57:40:a6:46:ae:
ac:8a:20:c7:27:f9:35:dd:51:57:0e:07:54:f9:14:db:f2:1c:
90:79:ab:54:38:da:91:1f:3d:a6:c3:1a:32:bb:98:45:ca:9c:
3f:f7:d0:ed:26:7b:bf:d9:be:db:2f:b5:d0:f5:41:75:22:dc:
54:7b:6c:18:fa:66:86:75:e8:93:6f:95:c2:2c:9f:7a:69:dd:
9c:9c:f0:6b:63:be:fd:2f:98:d7:bb:ec:6d:87:5e:ae:d8:3b:
1e:c5:e4:75:c5:45:53:45:69:0c:3e:cf:97:8d:15:6c:ed:dd:
53:ad:fe:95:01:75:ce:c7:1f:8b:86:e1:a1:c6:0a:92:ae:18:
6d:7f:1f:c0:2f:0a:48:89:ad:6a:2f:b3:d0:f3:fd:cb:af:c5:
58:70:4d:23:81:af:0f:5f:dd:97:9d:55:35:ab:f8:23:83:cb:
38:49:00:7e:c7:9e:25:a3:bb:5a:3c:29:0b:e3:ad:4d:cd:85:
a2:63:c4:e1:2b:6c:fb:66:80:4a:6b:49:9b:61:63:f6:98:68:
fc:7b:7d:c4:8a:2c:75:ea:a1:af:d7:34:be:52:cb:ba:2c:85:
4f:f9:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:21:35 2025 by rpki-client