Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: hS3VGvf4eMjxuyp/3xdX1PNMlaHrLKdUSujqDJu43eg=
Subject key identifier: EA:C1:40:63:2E:9D:56:C2:63:3D:23:D0:C6:62:93:E4:CC:13:C5:FC
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 0196C917001D6A221FE9BE1F6755EEB7FF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 10:00:49 +0000
Manifest this update: Tue 13 May 2025 10:00:49 +0000
Manifest next update: Wed 14 May 2025 10:00:49 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: tPdaAB6kqMaH1xTntOJAwe2MOLXctGm50hBYSx5GpRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:00:1d:6a:22:1f:e9:be:1f:67:55:ee:b7:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: May 13 10:00:49 2025 GMT
Not After : May 14 10:00:49 2025 GMT
Subject: CN=eac140632e9d56c2633d23d0c66293e4cc13c5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:5b:6d:a4:88:bb:60:a2:63:d6:3e:e8:40:
6b:30:5b:1a:24:c5:7f:98:61:17:34:bf:e0:d9:c6:
b7:bf:6a:f0:c2:19:4c:82:69:7a:37:5e:d8:76:d7:
3e:0f:69:34:14:d0:ed:b6:fd:04:6c:93:ad:72:e8:
d1:ee:e4:50:fb:39:39:c6:df:8c:f6:2c:b0:98:0b:
c8:6e:9f:44:8a:9c:ae:3e:82:66:a9:d7:24:63:2b:
b3:b9:55:87:dc:e5:d1:a0:30:eb:59:ea:6b:1b:fb:
14:ab:8b:09:36:7f:ef:c8:0c:6a:de:22:35:a9:1d:
9f:1c:28:1a:e6:61:62:32:81:cc:31:84:9a:dd:c6:
ab:ca:c8:28:a9:ad:44:7c:c1:82:cb:2b:7f:b5:cc:
a1:cc:0b:e9:eb:e2:c4:4c:84:a0:bb:a7:d3:59:42:
d4:95:1c:9e:b8:05:d6:11:2a:42:05:1e:a6:2f:09:
05:5c:c7:76:ab:79:1b:e5:b0:2b:27:db:01:11:a3:
13:96:a0:a2:9b:4a:8c:b4:14:2b:fb:3d:7d:4e:0a:
08:c0:29:cb:e8:cb:ec:a4:36:dc:bf:b5:c5:64:3a:
24:47:52:e8:98:fb:e7:48:48:24:bf:92:b7:b9:8c:
70:c1:09:66:5e:e3:16:31:21:9d:6f:66:ba:e9:1b:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C1:40:63:2E:9D:56:C2:63:3D:23:D0:C6:62:93:E4:CC:13:C5:FC
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:21:79:fb:77:68:44:63:a2:b0:50:58:04:b7:a7:87:d8:2a:
6c:79:59:cb:2c:9f:f1:a2:5a:b1:d8:86:bd:b0:b8:7c:33:c5:
f9:23:28:ec:3b:f6:4c:d0:02:07:0e:ea:0b:18:3d:d3:f4:0c:
13:fb:c4:38:5b:35:ac:63:74:44:ae:04:d2:b4:38:7e:eb:b6:
4c:43:f2:02:06:a7:bd:f7:f8:3d:6b:29:11:8a:4d:9d:a7:7f:
3b:66:89:5f:5c:b5:79:9c:f0:e9:fc:d6:e4:81:5d:4a:0b:54:
b9:38:b5:c5:cd:47:7e:b3:0b:46:76:d9:f4:eb:96:cc:ad:e9:
2d:0c:59:a8:6c:d7:e3:b0:94:c1:3d:58:d9:be:56:69:d1:8b:
7b:c6:34:93:7b:2a:d1:30:3f:18:2b:84:8c:7a:c5:94:0a:a1:
d0:07:2b:0c:d5:d4:73:9d:cb:e8:26:a2:bf:5b:14:f5:6e:4c:
eb:a2:91:75:98:86:aa:36:e7:33:d9:3c:a0:bd:c3:b4:ac:9c:
a3:4f:d1:51:2c:f6:73:9a:7e:4c:47:97:c1:e4:f4:6d:75:50:
2e:4c:62:52:0f:4c:c8:74:b5:11:e4:4b:72:2f:14:08:dd:b4:
35:bd:d0:cd:f6:ae:53:2a:88:b1:3c:17:3e:cd:b9:c7:76:f6:
4e:03:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:35:07 2025 by rpki-client