Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File: KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier: cuqxqrFu46GproKOC1L2llL0RqN7U5/N4nmdWBCkz2A=
Subject key identifier: E2:98:0A:6B:18:38:4C:CE:85:84:8B:81:36:C2:EC:8E:9C:A9:DF:78
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer: /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial: 01965492E5093D5EC318E8EA52EFE86CB62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number: 08B8
Signing time: Sun 20 Apr 2025 19:00:35 +0000
Manifest this update: Sun 20 Apr 2025 19:00:35 +0000
Manifest next update: Mon 21 Apr 2025 19:00:35 +0000
Files and hashes: 1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: 2OePyiHJ87inNWTeBqRI0xuOR+6+4xg5j8u1eviMIDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:e5:09:3d:5e:c3:18:e8:ea:52:ef:e8:6c:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Validity
Not Before: Apr 20 19:00:35 2025 GMT
Not After : Apr 21 19:00:35 2025 GMT
Subject: CN=e2980a6b18384cce85848b8136c2ec8e9ca9df78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:f5:49:ee:eb:f9:cd:e6:72:ac:ce:81:42:
c6:1a:de:75:07:ef:dc:70:d5:91:c1:1a:fd:7d:f7:
e9:5c:e7:3e:7c:54:15:b6:7c:fc:cf:2d:0c:08:06:
61:4e:27:f3:1d:91:32:59:cb:fe:cd:d6:74:f7:28:
82:0c:6b:c7:79:36:16:71:bb:1d:c7:55:08:15:eb:
ba:73:85:51:37:2c:ae:31:50:ab:99:a9:f6:ac:51:
e7:ba:81:14:6d:85:a8:3e:19:21:14:49:e8:78:9e:
a9:5e:4a:74:94:eb:e2:95:9d:d6:a8:5c:91:ee:5c:
2b:4e:1d:12:da:52:7d:8c:a8:ba:3c:b1:1e:bd:98:
c2:bd:03:5b:14:3b:2b:7c:c2:bf:a4:8a:01:f2:cf:
a4:4e:e6:4a:db:13:2a:29:e4:7a:da:26:79:f7:79:
06:2e:ce:a5:82:50:65:6a:47:56:1f:e2:6e:ce:65:
d1:e6:47:e5:6b:bf:d5:bf:cf:11:0f:b4:4f:2d:f5:
fd:b3:ad:79:f1:d7:e2:6d:be:37:ac:08:78:f2:2e:
87:e6:e7:e0:9f:0d:f7:f2:91:83:a3:6b:3d:9a:ad:
fa:a4:a2:f1:d4:1d:6f:10:ae:cd:80:81:b8:4a:52:
91:d3:a3:27:e6:81:73:26:ae:92:0d:ec:c2:3b:62:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:0A:6B:18:38:4C:CE:85:84:8B:81:36:C2:EC:8E:9C:A9:DF:78
X509v3 Authority Key Identifier:
keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d5:03:0f:55:db:56:d4:5b:e7:00:a4:b0:e5:07:6b:9c:aa:
c0:b5:2b:6a:76:d9:6f:7c:0b:10:0b:b4:c6:98:46:0b:71:0f:
a4:09:4d:e1:79:fa:e3:a1:87:2d:14:37:7f:a1:0a:ca:46:66:
7f:4b:b3:f1:94:d7:8f:4b:7c:6c:9b:a1:64:f4:3f:55:a3:6e:
b5:49:30:86:6e:ab:64:c8:0f:1f:04:28:51:5c:8a:71:84:43:
29:02:64:c5:02:2c:86:13:c5:8b:16:c6:51:de:63:0f:91:7f:
2e:36:5f:90:d0:eb:e6:82:fb:23:79:4a:20:e2:68:f5:b0:9e:
85:ff:73:b3:dd:b6:7d:4e:92:fe:f7:38:e7:a5:60:b8:fe:ca:
36:00:5b:3e:65:1c:61:2c:87:db:79:b3:04:8a:1f:de:da:9d:
64:44:52:3b:bd:e9:f8:6d:f8:40:1d:f3:2d:3d:3b:72:4c:b6:
bd:25:fc:99:b2:41:20:f3:fa:d0:3f:13:9e:35:8a:aa:b4:b9:
cc:a1:82:e2:fb:b5:ee:e8:fa:31:ae:c6:66:1d:b6:b0:d5:0d:
ca:82:1e:00:5c:2e:ce:c3:7b:5e:14:6e:c8:d8:b9:8c:97:8c:
9d:71:c1:13:70:cd:64:24:3b:6e:e1:f0:59:26:e3:aa:8b:a2:
72:ca:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:39:48 2025 by rpki-client