Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
File: ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json)
Hash identifier: 3NYhuZEYpARcE7dcFsNZuQnJHXcO6guhP2UPerRxupk=
Subject key identifier: BF:95:1F:AF:13:06:37:AC:D3:2A:DE:49:B8:E9:C4:E7:13:AF:21:F7
Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Certificate issuer: /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Certificate serial: 019656813392C3AEDFD9B4795A315748D4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
Manifest number: 042A
Signing time: Mon 21 Apr 2025 04:00:29 +0000
Manifest this update: Mon 21 Apr 2025 04:00:29 +0000
Manifest next update: Tue 22 Apr 2025 04:00:29 +0000
Files and hashes: 1: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: IKk/U36dG//h5qeEtGMI00wqUd7rtRnlfpU3DGwrB2Y=)
2: qoEqQd-KonLGkAm_wguz4NaqHfs.roa (hash: E6NKTVGy2K4uHsRTO20RHuS+xHYcScb4tSIex+a8NyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:33:92:c3:ae:df:d9:b4:79:5a:31:57:48:d4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Validity
Not Before: Apr 21 04:00:29 2025 GMT
Not After : Apr 22 04:00:29 2025 GMT
Subject: CN=bf951faf130637acd32ade49b8e9c4e713af21f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:55:a6:38:15:46:b0:69:37:3c:65:ec:56:
7a:79:68:89:f0:38:8c:c4:d2:e2:38:3c:53:43:ba:
6e:0d:dc:68:bc:de:b3:c4:7e:06:75:d3:8c:a8:bb:
6b:95:b0:50:43:d7:e6:2a:53:24:21:a7:3c:39:f4:
9f:27:dc:0e:a8:63:36:00:ed:e1:3e:25:92:4a:cc:
ba:be:e2:86:24:48:f0:31:7b:b7:32:36:51:77:91:
08:57:6f:6c:31:c3:2f:c7:e3:50:c6:0c:82:c2:52:
34:e1:c9:4f:ce:d4:84:2a:87:22:8c:15:77:eb:07:
f6:7f:07:a3:f4:8d:79:fb:7f:a0:3e:1b:57:ab:58:
4d:f4:80:b1:d3:0f:9f:92:b1:3c:0c:bd:7c:e9:7e:
59:b8:ae:d2:ca:5b:bc:f8:bb:14:96:86:4e:75:b4:
e0:3c:65:33:a5:56:03:11:a7:f5:d5:24:8b:26:37:
3b:68:8a:b9:20:a1:61:fd:85:aa:21:03:30:00:0d:
d3:ca:4f:96:38:f4:c1:08:0d:7c:f8:be:b7:42:2a:
40:d0:b6:9f:c4:de:ed:c3:94:61:ff:ff:8e:c3:1a:
75:04:a2:52:ee:f3:c0:23:3e:d1:7d:a0:d3:bf:84:
6c:29:44:a5:79:a3:03:6f:68:26:85:3c:78:a2:c0:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:1F:AF:13:06:37:AC:D3:2A:DE:49:B8:E9:C4:E7:13:AF:21:F7
X509v3 Authority Key Identifier:
keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:81:a3:6d:36:c4:e2:74:6a:8c:46:6c:66:dd:1b:98:db:6c:
cc:f3:d1:25:f3:a5:3e:b8:c6:4f:66:c5:35:61:89:bd:99:fd:
89:93:40:7b:57:8b:41:29:bd:77:7a:32:84:ed:8b:5a:c0:2f:
31:82:d8:4b:be:26:8d:88:14:08:07:45:d9:6f:0c:d6:00:27:
d8:7a:a5:97:12:8f:53:cd:51:78:70:b3:05:0e:2f:6b:ae:60:
0b:20:e3:ac:37:95:cc:87:bc:97:9b:7f:f4:62:14:23:02:dd:
2e:0a:bc:e3:98:86:89:1f:f0:c5:33:ed:a2:b6:00:91:2b:f6:
82:b8:63:87:9a:58:67:bf:6b:3b:ad:08:bf:62:1a:34:ea:83:
c0:18:3b:14:68:c8:13:33:dc:cb:4c:36:20:ed:bb:b0:b3:8c:
08:93:83:62:19:ab:ad:ca:d6:f4:90:c7:2f:19:cf:1d:9a:93:
80:b1:3d:fe:71:53:49:20:af:d9:c7:7a:03:bd:c7:b4:c7:40:
fa:66:dc:09:21:2e:fc:07:cf:85:eb:51:76:bc:ae:04:9d:76:
f3:37:63:18:9c:27:f5:dc:37:89:20:55:0e:25:67:9b:5f:3c:
74:d2:35:a1:26:cd:3b:42:59:60:64:65:26:e3:e0:08:18:66:
1f:ca:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:43 2025 by rpki-client