
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier: pH28ymxzg63em6sh39WFpSut8vBTG0uM46dlYAlkdVc=
Subject key identifier: A9:3E:58:32:2D:B9:F2:63:A5:08:C3:33:76:48:3E:21:BF:5F:FC:4D
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial: 01969F3F6A52CA598A7D4E312F3EEBD740BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number: 0182
Signing time: Mon 05 May 2025 07:00:55 +0000
Manifest this update: Mon 05 May 2025 07:00:55 +0000
Manifest next update: Tue 06 May 2025 07:00:55 +0000
Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: DsErBTMqFFHHWcARejG737d5q4WCD7MOvrE1JMRtwvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:6a:52:ca:59:8a:7d:4e:31:2f:3e:eb:d7:40:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
Validity
Not Before: May 5 07:00:55 2025 GMT
Not After : May 6 07:00:55 2025 GMT
Subject: CN=a93e58322db9f263a508c33376483e21bf5ffc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:ec:5f:ba:a3:48:a5:d4:d0:1d:27:ff:fb:
31:0f:4d:89:f0:6d:27:67:1c:76:9a:9a:c6:e9:a3:
bf:c2:2a:82:92:1a:a9:eb:85:28:cc:a4:aa:6d:31:
ad:9a:c6:8b:e2:4d:52:7f:35:15:1a:6c:ab:f8:88:
67:31:72:aa:11:0b:78:d7:1a:63:b8:c4:36:9f:f9:
f3:ef:66:70:8c:08:9d:1d:51:e0:48:26:ac:81:69:
84:0e:61:dd:27:32:1e:37:b0:4c:92:0b:27:27:73:
f8:48:0d:5f:a5:43:66:bb:cd:50:60:09:0c:6b:92:
ec:48:bc:ac:b2:b9:69:89:6f:62:4a:e6:f4:15:ae:
86:d2:fe:a8:6b:ac:ae:0f:0d:26:f5:7c:40:24:b7:
8c:3c:a2:36:18:d6:4c:b3:17:aa:84:66:4f:06:79:
24:1b:94:5f:32:4d:20:22:ab:2f:48:3c:c0:8d:bd:
ea:49:37:25:48:f7:3d:a5:b9:0f:ab:82:5d:3a:23:
02:03:62:81:25:ba:4a:3f:09:08:44:f6:6e:39:87:
5a:cf:e9:51:d0:82:6f:20:28:d2:91:0c:77:cf:49:
a0:69:dd:87:8f:e8:ee:1c:4f:7d:4a:ba:08:c7:43:
74:b6:8a:78:08:e5:27:0f:02:0d:0a:1d:26:03:ad:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:58:32:2D:B9:F2:63:A5:08:C3:33:76:48:3E:21:BF:5F:FC:4D
X509v3 Authority Key Identifier:
keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ab:f2:10:94:ff:b9:9f:58:b8:4c:c7:6f:8c:2e:50:6e:4e:
86:14:58:23:b4:70:27:f0:0a:6a:76:34:1e:4a:fc:62:13:00:
64:7f:8b:27:f5:eb:bc:25:7f:cf:86:ff:c3:cd:03:1c:02:18:
9a:a0:c8:5a:52:a9:b1:65:30:49:71:e4:7d:ff:61:d9:e8:55:
a0:d0:57:38:3d:7e:dc:90:c2:74:f0:7f:c5:36:fe:cb:bb:dc:
19:09:81:3a:5e:b1:27:b1:e4:1a:f9:fa:11:11:17:68:35:07:
07:22:46:3d:48:a4:92:8b:88:c7:e2:4a:1f:9f:c3:8f:19:13:
54:32:2d:92:03:89:bb:62:55:93:e8:d9:f2:0c:dd:3c:84:8e:
f4:eb:ae:ef:f7:f9:8a:3a:64:a9:48:f8:11:49:1f:bd:36:a6:
56:19:af:e1:e1:a4:47:53:e8:69:cc:c4:3a:8b:ba:05:c5:4b:
24:db:9a:80:21:1f:6c:9d:98:3b:db:df:ec:f8:fe:b2:d1:59:
e8:67:25:00:d0:15:c8:e6:9d:18:c6:67:7c:6c:00:90:91:76:
3d:2a:d4:af:b5:1a:bc:9b:f4:bb:ca:85:7d:37:ab:5e:ef:bd:
cb:6d:27:04:95:3b:50:94:af:32:d4:c5:6b:15:7f:ad:f4:01:
0b:18:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:12:53 2025 by rpki-client