Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: O1fYKghYCPo4Bdgo1XX8tG6ZXywc0Juy7sv1ywC2OAU=
Subject key identifier: 4E:3F:2C:85:D9:48:7B:A6:67:88:F8:00:61:76:60:2D:79:3A:88:55
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 0196BDEEF6C47F4298DC7AD3FF43F3154959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 14ED
Signing time: Sun 11 May 2025 06:01:16 +0000
Manifest this update: Sun 11 May 2025 06:01:16 +0000
Manifest next update: Mon 12 May 2025 06:01:16 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: gH+F/m1w6nrbcHkEJjqXqHtMaRQ/wy+rbdAvJOeFHJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:f6:c4:7f:42:98:dc:7a:d3:ff:43:f3:15:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: May 11 06:01:16 2025 GMT
Not After : May 12 06:01:16 2025 GMT
Subject: CN=4e3f2c85d9487ba66788f8006176602d793a8855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:b8:9f:bd:1d:e0:62:d9:49:f8:d6:ee:7e:
58:fc:95:8b:20:ca:ef:2f:39:9f:0b:ab:2e:f8:89:
c7:29:43:06:ae:bd:0a:20:b3:b9:38:64:8e:2c:b5:
89:85:81:0f:6c:c9:5c:57:2d:dc:0d:6a:2e:16:e2:
05:9f:92:24:eb:48:1e:0d:b3:82:53:02:fe:60:5a:
fc:44:9a:b3:1d:82:f0:64:3f:12:8f:f0:2a:ad:97:
d7:8b:7a:71:7c:3f:9b:27:75:8e:f9:2b:d7:7f:fa:
b7:d1:72:04:9a:71:fd:7f:2c:c2:a7:ad:f6:b8:f2:
49:9e:07:93:dd:e6:82:ce:8a:97:5f:f1:20:b1:57:
dc:11:47:ab:c0:54:02:af:80:b0:d5:80:0c:2a:78:
e5:98:61:7d:60:74:fc:d5:50:53:81:14:5a:3f:74:
b2:e4:b3:9d:89:a2:fa:4e:e4:4f:ac:df:ef:e2:fc:
c0:b7:eb:50:f6:5d:01:34:95:4c:a1:86:d7:a1:de:
d2:9c:51:d3:f8:c0:c5:6e:4b:ab:30:f5:8f:3c:6b:
bf:87:e5:4e:8b:a0:e6:23:72:7a:8d:fe:f0:e9:8b:
c5:c8:2a:86:4b:38:c0:9b:35:f7:5b:ed:e2:d6:d8:
08:58:b5:20:fd:59:d0:0a:48:43:fd:4a:2f:c0:08:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:2C:85:D9:48:7B:A6:67:88:F8:00:61:76:60:2D:79:3A:88:55
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:c2:49:31:57:12:ff:34:99:80:b2:07:de:2a:3c:e6:ec:
aa:f4:0e:a3:98:41:ec:5d:64:bc:72:62:61:d6:60:1b:76:48:
9d:78:20:ed:d0:a0:eb:a2:fb:3c:43:d0:57:9b:98:0f:3d:fa:
f9:0e:14:8e:4a:e3:cb:6e:05:88:97:cc:46:6c:9c:1b:18:37:
3e:ed:42:ca:cf:57:ca:68:20:ba:a0:09:c4:4b:cb:1f:84:76:
e0:61:aa:6a:e0:55:ae:36:4b:ee:8d:e0:05:fb:36:a7:66:a4:
d2:85:13:0a:d8:2c:ad:03:d6:04:49:5d:36:05:ef:2c:bf:fb:
c9:a8:36:99:ea:9a:3a:98:f7:d8:fb:34:06:2c:d9:81:ba:c2:
9e:69:ad:59:c3:15:fa:e0:26:15:56:0a:81:a3:3b:86:a2:13:
2e:83:cb:13:b4:b5:02:58:f0:64:4b:ad:a9:bf:32:44:77:db:
02:c6:fd:9b:0f:6f:c2:5c:c0:8c:05:af:eb:be:b7:2b:49:a9:
ed:cb:c8:41:48:1a:e2:c2:4d:44:78:59:e4:88:68:ab:a5:59:
2f:8e:15:60:61:66:88:19:e1:2d:bb:02:b0:4a:09:6a:52:37:
a6:e3:b5:e9:5e:bd:39:56:bc:75:e7:b1:10:73:21:7d:0f:d4:
4d:8b:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:19:45 2025 by rpki-client