Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: YDy62GxWzWvaXHSMtc7rAmaU91i16UPlkwxvjS+10ec=
Subject key identifier: 75:15:9F:95:63:E0:91:57:2E:84:73:CC:6F:43:18:C0:9D:60:7A:D0
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 0196B8234432F2E8BD4E28E42299A22A6200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 152D
Signing time: Sat 10 May 2025 03:00:41 +0000
Manifest this update: Sat 10 May 2025 03:00:41 +0000
Manifest next update: Sun 11 May 2025 03:00:41 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: LuwQo+3ls5NRFu16zNjhERvVniVOIzd4nOzUTyH58k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:44:32:f2:e8:bd:4e:28:e4:22:99:a2:2a:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: May 10 03:00:41 2025 GMT
Not After : May 11 03:00:41 2025 GMT
Subject: CN=75159f9563e091572e8473cc6f4318c09d607ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:2f:d1:08:85:e6:60:16:7c:c2:a1:b1:aa:
99:42:de:6d:6b:9a:cc:b4:95:fd:71:3e:0e:a7:7b:
23:b3:73:0e:ab:b8:5b:c7:10:9d:ad:56:d4:73:b9:
18:57:73:87:e5:fa:9d:de:b6:59:c8:b9:22:d0:8e:
f6:34:29:4c:43:80:38:e5:e2:11:bb:a0:b2:1d:dd:
58:b2:a7:a8:64:b2:ad:93:52:40:f6:6a:5c:39:7b:
95:be:24:37:80:4f:71:ae:63:91:16:23:69:e1:2f:
bc:99:b2:c9:9e:62:f8:1b:5d:9a:42:98:ed:10:27:
9c:da:f0:6b:2b:ab:29:22:b3:d5:06:f6:87:76:99:
93:9b:d2:95:c1:d9:50:a9:ce:dc:68:fe:0e:dd:6b:
bb:b6:55:bf:62:90:0b:07:a5:70:ed:0f:cf:4e:1d:
9b:7f:7d:14:a5:a3:54:c5:9f:1b:0b:2d:12:ba:c0:
bb:be:53:19:f9:4b:bd:75:17:68:0c:a3:c7:37:95:
c5:a8:c1:f1:3d:26:4b:54:b8:d6:55:6d:a0:45:c8:
74:c2:26:09:63:92:64:0a:1d:ba:19:8b:e3:f4:72:
7c:6d:de:e9:79:77:28:0c:ed:9b:b0:db:f8:5d:e3:
cf:6b:a7:b1:1f:66:49:5c:2a:aa:c0:ca:ca:6f:77:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:15:9F:95:63:E0:91:57:2E:84:73:CC:6F:43:18:C0:9D:60:7A:D0
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:40:f8:8a:bd:d5:9e:79:1d:b9:57:f2:f0:68:ff:d1:6c:a1:
27:7d:fa:de:84:7d:52:6b:72:1d:eb:b2:ed:28:95:da:4e:71:
c0:4d:ee:ba:b5:9c:61:eb:bb:26:25:22:47:9b:96:99:1d:e2:
38:53:34:d2:9f:1a:2d:01:86:7a:f2:41:92:51:c3:eb:4f:3a:
2c:b0:04:63:ad:59:0b:72:00:aa:e8:bc:bc:ae:b6:1d:89:38:
af:3a:01:d8:22:70:6b:2a:54:5c:f4:dd:6f:82:b9:d6:e3:b8:
71:0b:1c:33:7f:dd:09:1a:58:16:34:70:bb:72:7b:d5:a5:1f:
f3:4c:af:89:3e:e8:e2:ae:b0:33:03:2d:5a:43:57:87:cb:79:
e8:2b:a5:68:8f:36:0b:5c:85:31:48:d2:d7:53:52:98:ea:de:
99:3b:bc:de:3f:12:37:55:e1:8d:0c:3c:3c:7f:69:85:53:e0:
2a:2a:85:33:81:93:46:78:5b:dd:1a:b1:ac:5f:a8:b9:30:da:
92:2f:9f:8f:84:94:34:1a:d4:a1:cb:5e:6e:9e:68:fa:cb:ee:
d9:38:19:04:1a:39:1a:41:6f:ca:dd:6a:b7:9b:bb:db:bb:0f:
47:f0:63:ef:e5:4d:84:a1:85:d2:d1:93:7e:f5:cc:53:46:2b:
05:3c:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:42:37 2025 by rpki-client