Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: B2BdNLoP/zdSiiWL1vgi6iDF4j5YxlpHFmTS22dMLqc=
Subject key identifier: 8B:73:15:CB:15:B4:28:DB:8E:F0:5B:56:08:67:D0:9D:A6:75:C6:D0
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 0196586FD393A1A66632C30ACE175E3EF9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0BD7
Signing time: Mon 21 Apr 2025 13:00:45 +0000
Manifest this update: Mon 21 Apr 2025 13:00:45 +0000
Manifest next update: Tue 22 Apr 2025 13:00:45 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: yUNB7Ib1K2leNpsMoAq4YV5LxirjmJjZWMuf+eDOrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:d3:93:a1:a6:66:32:c3:0a:ce:17:5e:3e:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Apr 21 13:00:45 2025 GMT
Not After : Apr 22 13:00:45 2025 GMT
Subject: CN=8b7315cb15b428db8ef05b560867d09da675c6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:32:81:46:fc:08:bb:b3:94:88:36:80:38:
03:d2:9e:b9:ab:ba:7d:a6:b9:11:96:ba:44:5b:6d:
4b:48:ff:32:a8:4d:74:37:30:d0:ab:dd:58:6a:55:
da:0b:c2:a4:cb:f9:57:8d:92:12:f0:49:2b:16:e6:
b2:af:f0:93:4c:c3:ba:c8:4b:7c:f6:2d:11:ba:a0:
6c:0b:23:cd:ec:00:67:23:24:b1:21:63:e0:a7:25:
d2:53:1b:2f:ba:5d:ea:67:be:95:a6:a1:ed:40:94:
b4:74:50:02:6b:af:bc:ea:0f:39:2a:58:de:58:ba:
9a:ef:99:1f:4f:f3:55:57:9f:ed:bc:38:86:d7:bd:
a2:b8:4b:8f:9c:1b:e9:47:0a:91:43:20:17:ee:75:
96:bb:46:a5:14:ae:bc:67:4b:db:02:b3:17:02:3c:
a5:8a:c3:dc:9e:c2:d2:ad:67:2c:79:3e:1d:a1:5d:
c6:13:f7:0b:d1:1f:29:27:62:6a:fd:0c:23:84:7e:
0a:dd:54:23:6f:3f:37:7a:77:0e:f4:92:81:e3:da:
7e:46:9c:ed:95:00:f9:a8:c7:59:90:5f:3b:f1:96:
65:75:30:fd:0c:37:f7:34:22:f8:c8:0c:3a:be:34:
6b:c1:05:d6:46:70:09:9b:60:cc:3c:d1:8b:2e:62:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:15:CB:15:B4:28:DB:8E:F0:5B:56:08:67:D0:9D:A6:75:C6:D0
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4e:03:c0:35:e0:94:16:49:0e:e1:3a:65:0d:90:bf:e6:36:
40:60:08:8a:dc:6b:e0:75:15:fb:38:2c:ba:c4:bd:20:76:64:
8c:ea:2a:fd:bb:c6:bc:8c:3d:f8:83:33:6e:ea:57:51:7a:8b:
21:91:f8:de:31:ed:43:95:e7:ba:a5:11:dd:36:1d:27:78:16:
4a:31:6c:62:8e:f1:f9:a3:5b:ea:30:ea:35:f7:ea:51:e6:2e:
16:25:8f:83:6b:a3:77:d0:82:33:63:dd:60:fa:4b:3b:e6:72:
5b:f5:25:d3:47:71:53:d6:10:78:40:e1:1c:e2:4d:b3:c7:2f:
32:ca:50:e9:d8:3e:bd:ea:d7:6b:5b:98:96:6e:01:b1:12:0a:
30:ce:b6:fe:02:7e:f1:e0:45:a9:99:b5:c6:4c:e8:a5:8b:f8:
78:75:d1:8a:5a:94:fa:1c:bf:7c:43:b1:26:91:13:85:dc:ef:
07:17:5e:e3:1f:b3:0e:2f:04:bf:48:e7:a5:a9:51:bf:db:cc:
73:7b:8c:32:c6:9e:32:c7:07:49:e6:be:53:67:09:ce:68:82:
94:40:6d:c0:a4:b4:60:8d:cb:f7:16:0b:eb:dc:8e:d9:d7:c2:
f9:9b:7a:96:f1:11:03:1a:dc:c1:80:f1:60:28:93:cc:05:33:
2f:5f:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:18 2025 by rpki-client