Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: m2q2ViItkTaK8Pf0Ey+IcUh7P6HJVI8nFt9+/83948I=
Subject key identifier: 8C:A7:56:E5:53:50:4E:80:B0:A3:4A:B4:08:B4:E1:94:BB:C9:96:32
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 019653EE70714874EF28C4B557A1E9DB83FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 16:00:57 +0000
Manifest this update: Sun 20 Apr 2025 16:00:57 +0000
Manifest next update: Mon 21 Apr 2025 16:00:57 +0000
Files and hashes: 1: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: laLJWp4y9YQMRjShWtHhU+7Npjb3BAFZ1wINd/Mp6aU=)
2: eVvmAEAIedlVHCPd9SMP0Bncqxc.roa (hash: 4VuWPxpiNhIPFJNGqrNiqAkoBmgIxFNuRTiyh6Py9uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:70:71:48:74:ef:28:c4:b5:57:a1:e9:db:83:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Apr 20 16:00:57 2025 GMT
Not After : Apr 21 16:00:57 2025 GMT
Subject: CN=8ca756e553504e80b0a34ab408b4e194bbc99632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:e4:a9:cc:78:fa:e7:a8:03:6f:e1:ee:16:
05:29:e3:f8:ca:3f:54:38:c1:61:fd:00:35:d9:5c:
36:2c:d7:b8:34:29:27:6c:b1:12:e1:87:08:4e:f2:
97:c5:ff:ab:a8:51:67:f5:2c:4a:79:94:d7:dd:42:
31:e4:5d:83:3a:7b:c0:91:0f:9c:6d:9e:c8:10:a7:
09:f2:e9:54:48:ee:e5:27:65:c4:1c:f1:01:63:97:
27:47:35:03:4c:88:fb:d3:30:ab:a3:25:11:34:a4:
0c:4e:c0:75:19:a0:ed:e6:98:d5:76:e1:b2:9d:1e:
be:f7:c6:ff:85:ae:02:7c:07:09:ab:e8:45:3d:ab:
2e:17:31:5f:c6:5c:91:7c:5e:50:ad:9c:e0:f9:60:
55:81:00:54:b5:2f:4f:19:0b:58:ac:af:3b:23:aa:
a5:b7:e9:7c:48:52:07:54:e0:9f:90:76:70:52:38:
71:bb:dd:a0:51:47:85:d8:d1:10:bd:13:34:fe:67:
90:12:7e:93:3b:63:a0:94:11:5a:41:af:c3:9d:c3:
bb:7d:fc:96:3f:69:81:87:1f:2b:a4:d3:28:8a:43:
e1:51:0f:e6:18:bf:3f:cd:d7:fe:f0:f4:82:d7:90:
7e:e7:1f:6c:48:2e:f0:0a:43:b0:82:60:98:66:e0:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:56:E5:53:50:4E:80:B0:A3:4A:B4:08:B4:E1:94:BB:C9:96:32
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0c:29:23:d0:c0:bb:14:9c:04:7e:28:e9:5c:f9:ab:04:a5:
63:b3:6f:e4:12:36:ee:b4:20:cd:86:57:20:89:5c:71:32:32:
24:90:5a:ff:be:31:44:b6:53:5c:ab:d8:f0:b0:96:e6:2a:50:
c7:a7:8b:71:a0:48:22:9d:0e:2b:2b:3d:b6:9b:c3:2e:00:c4:
e3:6a:e5:ad:42:4f:fd:54:cc:ea:eb:ab:56:ed:d8:46:44:e0:
3f:b8:6a:61:a9:01:45:3d:7b:58:5d:d4:b1:36:77:f5:83:7a:
cd:2f:86:b2:c0:ab:0f:b6:76:40:14:a3:e0:71:99:e7:28:53:
21:38:e9:86:c0:0e:73:6e:0d:50:e5:d1:fc:9c:6d:92:8a:41:
a6:6a:62:0c:72:a3:95:80:ed:c9:be:23:a4:99:a4:98:23:29:
94:a5:d2:a5:81:eb:fe:1b:d4:62:c8:03:09:23:89:b4:2a:d2:
bb:c1:b8:3e:28:9c:ac:10:49:b9:67:30:c9:80:3c:90:b7:bd:
6e:3a:40:6a:52:45:c3:c5:35:3b:c2:c1:d2:c2:80:db:96:d4:
56:b1:17:2f:91:3c:d8:e3:a3:f0:51:42:d6:35:b1:0f:8b:aa:
e1:a2:ba:59:fe:79:1c:7d:d1:79:1b:c5:55:6d:40:69:40:99:
f7:23:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:27:36 2025 by rpki-client