Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
File: Z3NwPrTqs2ernekaKsQe4yAUAw8.mft (raw, json)
Hash identifier: 25ezWdNns+matzAztswpP/pmO/e6pkN/pWnUGmQEgh8=
Subject key identifier: 88:94:5A:3F:7C:48:A8:AB:48:B3:D7:9D:AA:AA:17:37:EB:4F:53:5E
Authority key identifier: 67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F
Certificate issuer: /CN=6773703eb4eab367ab9de91a2ac41ee32014030f
Certificate serial: 01965726BB0D421F182118519189DF5D191A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
Manifest number: 07C7
Signing time: Mon 21 Apr 2025 07:01:18 +0000
Manifest this update: Mon 21 Apr 2025 07:01:18 +0000
Manifest next update: Tue 22 Apr 2025 07:01:18 +0000
Files and hashes: 1: Z3NwPrTqs2ernekaKsQe4yAUAw8.crl (hash: vzBzuWTbZX7xK2s6QzFFL9ZZFbnChHk8LcrhRFmDv1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:bb:0d:42:1f:18:21:18:51:91:89:df:5d:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6773703eb4eab367ab9de91a2ac41ee32014030f
Validity
Not Before: Apr 21 07:01:18 2025 GMT
Not After : Apr 22 07:01:18 2025 GMT
Subject: CN=88945a3f7c48a8ab48b3d79daaaa1737eb4f535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:e4:b1:3d:57:67:17:f9:d9:35:78:59:9b:
a3:5b:82:9f:6a:17:00:48:b9:8e:81:8b:c3:46:23:
58:fc:99:09:e7:fe:b8:2b:4b:fa:0e:2e:96:56:20:
41:2f:d8:2d:74:a8:01:46:9e:ca:e9:88:d4:ae:4f:
e7:bf:8b:b2:1d:69:ce:f4:af:dc:e1:a6:05:a1:54:
5b:34:67:dc:d7:10:81:a8:55:e9:e5:07:7b:59:b8:
6e:52:a3:b2:a6:18:0b:0c:37:54:8e:0f:11:c0:36:
87:55:dd:da:09:5f:aa:fe:e5:5b:a9:e2:fa:2f:0a:
4b:11:c3:6c:1c:1d:e2:81:8a:11:bb:fb:11:9d:47:
73:a3:00:b4:af:58:8d:43:0e:f6:8e:1b:c7:f2:aa:
47:e1:c7:bd:4f:ac:dd:d9:11:97:60:b9:52:6e:b8:
ce:85:30:ea:b7:88:e2:ad:5e:d6:75:b9:dd:32:98:
b3:3c:d1:99:54:74:fb:e7:15:dc:05:05:d3:bb:bb:
4c:bc:bc:c5:a5:bd:d1:15:fa:03:f3:52:af:5a:ab:
73:c9:53:c5:64:08:ac:1a:17:11:4a:69:01:1b:a0:
d4:ab:6c:ed:7b:2e:dc:bc:2e:47:01:50:80:b6:d6:
15:a0:3f:6b:53:ce:75:ee:c2:04:50:be:76:07:b0:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:5A:3F:7C:48:A8:AB:48:B3:D7:9D:AA:AA:17:37:EB:4F:53:5E
X509v3 Authority Key Identifier:
keyid:67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:57:3f:f0:15:78:8e:16:31:4b:7e:b3:44:f4:30:85:ac:26:
11:23:4a:db:35:0a:22:04:1b:f3:e7:e6:8b:c8:4b:12:b6:51:
6f:51:20:8b:5f:ea:fb:c3:29:5e:b7:dc:af:9b:06:3a:d0:f9:
b1:1b:78:cd:c1:79:7e:50:6c:ae:10:4b:13:03:b9:6f:ea:03:
6e:b6:43:db:89:cf:31:b1:a6:5b:e3:f3:c9:8f:25:16:33:e6:
a5:df:05:23:4c:31:28:09:d0:cf:af:8b:d4:d1:cc:31:5d:85:
d5:11:5e:e8:28:65:94:25:be:a6:a9:42:d1:c2:0f:17:2a:b2:
6a:26:8e:ad:55:3f:7c:80:5d:ff:db:6d:35:6f:31:56:23:9f:
89:92:f1:bc:d8:a0:a2:67:61:30:18:43:46:b5:a6:78:51:cb:
be:04:c3:9e:49:3d:a5:53:e4:24:bb:e4:8b:7d:52:9c:d9:b0:
d4:3f:5b:6e:7f:98:67:a6:e7:e2:f0:a2:43:71:07:09:1f:a5:
be:45:21:1e:44:81:9d:eb:25:b6:a5:22:2b:99:f5:02:2c:7c:
0a:25:18:47:0c:80:9f:8f:58:ad:21:d1:83:c5:f2:53:08:d9:
38:bc:b9:66:23:cd:53:6f:bf:26:08:e3:9c:10:4a:85:1e:41:
1d:51:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:19 2025 by rpki-client