Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: 9AwW6Gx97uY5WuLLJMzcR4OBh3VlZ76gc7pvpa10sR8=
Subject key identifier: 25:77:D7:DC:F3:C7:FE:C9:01:A5:04:84:B9:A0:DD:84:19:09:78:49
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 01964D46F021AC728F2C900B85E3AB13D1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 02F3
Signing time: Sat 19 Apr 2025 09:00:16 +0000
Manifest this update: Sat 19 Apr 2025 09:00:16 +0000
Manifest next update: Sun 20 Apr 2025 09:00:16 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: fzg4S8XNVa0D1o6mrNyJx0e3AL8YXx3poH2m86k/RFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:f0:21:ac:72:8f:2c:90:0b:85:e3:ab:13:d1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Apr 19 09:00:16 2025 GMT
Not After : Apr 20 09:00:16 2025 GMT
Subject: CN=2577d7dcf3c7fec901a50484b9a0dd8419097849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:98:76:d0:d3:e8:7d:33:9f:30:82:d9:f0:
1a:6f:a5:51:14:8f:39:e6:45:aa:bc:53:a9:14:f9:
ac:d0:51:69:a5:31:42:5c:f6:e3:9e:d8:3f:69:6a:
3a:41:7f:a2:f6:3c:70:c7:2e:96:6a:4b:9e:4b:45:
2c:dc:c7:7e:44:bd:30:3a:d3:fc:36:11:2c:58:76:
c8:f2:9f:90:0c:e2:56:b2:7e:39:b5:fc:1b:74:92:
de:80:9f:2c:8a:64:4b:e4:00:b4:6d:12:ce:83:a8:
94:02:fe:27:cb:5f:ce:76:ba:53:c1:e1:e2:63:c9:
17:ff:a6:8f:96:55:b5:72:0d:ee:a0:d0:37:50:f9:
8e:44:3e:13:8f:e6:cb:54:77:3f:c7:53:40:3a:2c:
14:68:b0:e4:8a:1d:94:77:bc:88:c9:e4:fc:cc:24:
da:b1:b6:a4:87:57:26:22:ed:9f:9c:c8:6a:85:ad:
50:fc:b1:a4:e6:82:34:d5:ea:6b:b5:22:ce:c4:4d:
c1:39:23:7e:63:f6:8c:15:60:38:61:ee:f8:0c:46:
a2:07:cf:92:66:fa:c3:3f:9c:b5:a4:11:9a:96:60:
e3:90:97:b5:66:43:51:15:0a:84:6b:bf:5c:14:5a:
ff:6f:60:51:b2:7c:5d:23:f7:04:b1:0e:90:ee:35:
18:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:D7:DC:F3:C7:FE:C9:01:A5:04:84:B9:A0:DD:84:19:09:78:49
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:89:3a:e8:7a:11:4c:a4:af:cf:2d:85:2e:84:63:e4:ab:
4e:41:4b:06:93:44:2d:e0:d3:6d:65:f9:cf:5f:d0:b6:99:a7:
5d:de:78:ee:15:8e:91:ff:88:4d:64:6f:99:19:c6:d0:64:7a:
b2:a8:5b:9f:33:86:cb:ab:13:d8:18:5e:ae:59:8a:85:24:87:
c8:ba:39:09:51:91:9c:dd:18:bf:99:d1:6f:09:af:7a:fc:91:
f0:ec:8a:06:01:47:92:92:54:2b:d0:0e:98:f4:8d:1b:46:f2:
cd:27:1e:65:04:52:d4:31:6b:77:3c:69:57:f7:4a:61:ca:4b:
86:4f:72:2f:4e:b7:b6:37:14:5d:27:35:0d:bf:d6:f0:c0:1c:
0c:c2:57:bd:c0:c6:36:12:10:89:d2:3b:86:ac:f0:2b:32:a7:
d4:4a:d2:e9:ce:af:30:a8:aa:24:8a:1f:7d:90:c5:55:e5:83:
d6:b9:13:c6:9b:88:a2:a0:79:eb:24:8b:b6:ff:5c:2f:19:4c:
76:cd:ea:83:c6:95:b3:51:5e:e3:e8:8c:84:6d:55:ad:93:77:
b6:04:78:c9:dd:d6:dc:bc:59:7d:b4:f4:ee:12:d7:4f:75:8e:
5f:36:96:b0:4d:f2:22:64:cc:89:92:43:e4:d2:59:af:82:35:
49:8c:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:11:50 2025 by rpki-client