Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: MlceKZjZHAWLm7V197fNvPRtXSvnggkLwL2jUGfeD2c=
Subject key identifier: 51:10:1D:F9:BD:8F:79:FD:76:78:2C:FA:4D:0E:6B:15:A3:36:79:11
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 01965982280772AE6F86599C7C8DDE87A1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 18:00:24 +0000
Manifest this update: Mon 21 Apr 2025 18:00:24 +0000
Manifest next update: Tue 22 Apr 2025 18:00:24 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: WoggLSPPopNJrIgSZ1MCRu4clC2L4id6RgUSewKpKDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:28:07:72:ae:6f:86:59:9c:7c:8d:de:87:a1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: Apr 21 18:00:24 2025 GMT
Not After : Apr 22 18:00:24 2025 GMT
Subject: CN=51101df9bd8f79fd76782cfa4d0e6b15a3367911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:f7:3e:6f:a7:28:fc:cd:03:1a:4c:06:ef:
e6:22:af:11:46:e7:50:3b:0e:72:c6:96:63:cf:f9:
c3:03:8e:a2:40:f9:ec:c0:cf:b6:bc:05:5b:6b:47:
5a:37:1b:71:2e:e2:de:89:dc:a4:3c:51:20:e3:14:
90:a2:26:8c:20:57:44:e7:94:79:74:1d:85:77:fe:
a9:42:f6:d4:3f:f1:4a:77:1b:94:49:9e:2a:06:5d:
eb:61:7a:1d:9f:6f:aa:c5:44:4b:14:90:d4:23:26:
4f:43:a4:f8:31:a4:a2:be:d2:ad:06:94:8d:4e:37:
b4:86:08:10:d8:c4:8d:5f:41:33:a7:ff:c0:3c:f8:
33:0e:21:e1:49:a3:69:9d:19:4e:db:34:59:a5:50:
3c:a4:51:f7:bd:15:52:58:e6:6c:6d:76:2f:c6:16:
51:f4:3f:2b:a7:43:da:cf:95:b6:a8:10:f0:07:7d:
db:6b:36:8a:f7:35:10:fd:91:a2:44:e8:1d:fa:37:
cf:37:9f:73:12:82:d2:c5:1c:c2:2c:4a:fc:c9:32:
8e:44:7c:29:27:e9:b0:1c:98:e8:d3:36:90:ea:e5:
7f:01:f6:36:6c:60:a8:7e:fe:63:8b:14:10:3f:ae:
f2:e2:03:e2:68:7e:b9:16:6f:b5:d3:0e:83:cb:f5:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:10:1D:F9:BD:8F:79:FD:76:78:2C:FA:4D:0E:6B:15:A3:36:79:11
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ff:07:de:d8:f9:30:16:44:00:d5:ea:ab:fd:17:8a:b1:53:
af:47:d1:2f:c9:5a:39:fa:79:20:61:52:11:06:78:7d:31:41:
df:da:fd:e2:54:ec:ca:a0:28:0c:7a:88:4e:15:29:6a:40:83:
a8:97:3f:cb:9f:ef:25:73:3f:f0:dc:69:d1:e8:90:91:c6:ac:
b5:5a:2e:03:de:77:4d:77:75:a0:7c:84:c2:0c:3b:eb:e5:38:
0b:43:f4:a9:d5:7f:4a:e7:64:6f:ff:6c:e8:20:cd:62:ab:78:
31:72:3f:a0:ac:e4:a4:e3:a4:8f:f3:9c:b3:7a:c6:88:97:da:
3a:99:07:70:92:d9:91:b0:3e:2d:1b:35:a0:34:8b:8f:b9:95:
f4:94:fd:bf:8f:9e:e1:14:9a:70:58:1c:33:b4:47:57:ea:f1:
a9:2a:52:86:fe:0b:80:6c:fe:e1:4a:5f:4f:71:ff:97:a5:15:
79:b0:32:64:92:4e:55:2b:a7:0e:7b:7b:64:26:d6:20:0f:3f:
8b:dc:f1:13:5f:48:02:1e:06:65:69:c1:d2:61:7b:46:b1:9c:
a1:1e:55:f2:92:90:0f:e4:4d:51:be:3d:62:9b:dc:8d:36:a5:
9c:2d:80:71:bb:ce:43:fa:0f:2e:a0:8a:25:55:a7:a6:69:24:
b5:52:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:37:02 2025 by rpki-client