Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: T+D3uMJmIgpm0HZJ4z10hXSt2KVI9V5T/LuqEWpjnpI=
Subject key identifier: 4F:36:81:0D:A9:49:48:AD:B3:71:69:58:3F:63:B7:58:3C:F3:8C:22
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 01964CD940AF96433D43B7F75748FA7B3099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 07:00:28 +0000
Manifest this update: Sat 19 Apr 2025 07:00:28 +0000
Manifest next update: Sun 20 Apr 2025 07:00:28 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: w5/1/NyCaDvaZ7gCkGtwmFcvtqCUY0V/HCw4N0fW9qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:40:af:96:43:3d:43:b7:f7:57:48:fa:7b:30:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Apr 19 07:00:28 2025 GMT
Not After : Apr 20 07:00:28 2025 GMT
Subject: CN=4f36810da94948adb37169583f63b7583cf38c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1b:a9:e1:bb:72:25:28:bb:a7:23:8a:a5:ce:
e4:92:e7:be:94:6f:08:4e:10:ed:84:99:93:66:b5:
ae:c8:b8:1b:ed:f0:7e:d7:0f:67:8f:b0:c0:e4:fc:
7e:81:5b:60:ec:aa:81:fb:f5:6c:4f:a3:21:7e:69:
05:df:0e:2a:d6:12:0e:f9:04:dc:98:ae:24:6a:05:
04:c7:06:42:ca:92:54:b3:fa:b4:d2:a0:c2:b3:fc:
d5:5e:cf:db:55:03:e8:f6:5a:4b:fa:4a:f5:ad:5b:
e8:2f:3e:96:01:8d:cf:02:db:89:af:99:a2:28:34:
35:ae:be:d4:62:2e:a3:0e:33:c1:46:37:10:c4:80:
a0:4c:06:1a:b8:96:79:b6:f3:23:a5:c4:f9:27:5e:
55:bc:ad:77:c2:85:5a:de:a8:49:cf:4e:68:e0:91:
93:9a:31:03:44:84:9d:ca:da:62:61:5a:59:30:6f:
37:83:5b:cc:22:9b:30:cc:b3:ac:fa:dc:7b:b6:91:
dd:92:cf:8e:da:d3:a1:3e:57:ef:b7:0a:b2:1b:8b:
6c:61:fe:df:2c:1e:31:5e:02:54:3a:38:1a:4b:eb:
2e:af:98:9e:9f:9f:9a:33:7f:21:40:9b:29:a8:3d:
68:e3:ba:73:83:85:09:1b:d4:58:e5:f8:95:fb:fc:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:36:81:0D:A9:49:48:AD:B3:71:69:58:3F:63:B7:58:3C:F3:8C:22
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:07:b8:8f:2d:d8:5a:32:d4:72:19:6f:42:f5:62:a6:65:b2:
a3:22:2b:c2:a3:71:56:5e:0b:25:93:07:6b:c2:7a:db:fc:7f:
89:75:58:79:dd:e8:46:61:74:bf:37:1a:eb:27:e2:ff:0b:19:
c7:64:a9:42:c5:17:51:15:7b:ad:d5:76:ad:34:e7:33:13:b6:
4f:c4:cc:74:c7:d7:83:5b:e6:b1:91:cc:4c:4f:64:0b:db:9e:
5d:90:60:c1:cc:c0:08:f7:56:72:da:17:10:95:2b:5f:9e:72:
57:21:52:a3:ba:ca:3b:d8:6d:26:26:ce:6a:b8:7d:43:54:95:
43:60:77:72:96:99:02:d1:19:27:97:22:70:94:c1:59:07:79:
92:42:68:36:b4:a0:4a:6a:82:19:15:e0:fe:f5:5c:20:80:6d:
cd:66:9c:79:1b:45:dd:7b:17:7f:8f:78:8a:09:ee:bb:af:5a:
86:b4:3e:43:97:45:48:cf:85:89:fb:e7:4b:38:67:de:de:5f:
55:9d:53:d8:85:0c:5b:25:37:5d:79:af:a7:49:60:b1:b0:91:
35:f1:6e:fe:11:60:a7:fc:a3:2b:27:50:20:0a:5e:4c:84:21:
b5:9f:e3:51:ec:e5:a0:6a:4a:14:84:05:b6:31:78:d5:88:bc:
b5:6d:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:13:52 2025 by rpki-client