Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
File: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft (raw, json)
Hash identifier: iK/aQPWI1aBzQ3/N8/ZsoFeoQFPzSVYoGTVY8jsLtok=
Subject key identifier: C1:3E:FB:CA:87:DC:CF:2A:20:69:91:50:BC:42:4E:19:61:F1:1E:92
Authority key identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
Certificate issuer: /CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Certificate serial: 01965ACC0B6EE0D04CB72038F001AEB10DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
Manifest number: 027B
Signing time: Tue 22 Apr 2025 00:00:43 +0000
Manifest this update: Tue 22 Apr 2025 00:00:43 +0000
Manifest next update: Wed 23 Apr 2025 00:00:43 +0000
Files and hashes: 1: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl (hash: wZDJCzJwD2BvNkvmJ0njVNEc7B06px+LppBsOcDAqi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cc:0b:6e:e0:d0:4c:b7:20:38:f0:01:ae:b1:0d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Validity
Not Before: Apr 22 00:00:43 2025 GMT
Not After : Apr 23 00:00:43 2025 GMT
Subject: CN=c13efbca87dccf2a20699150bc424e1961f11e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:3e:37:7a:ad:e5:48:7a:67:5d:f0:35:07:
d1:e3:d4:ad:a1:a5:70:0e:2d:69:d7:66:bc:26:b5:
a1:02:be:ab:7d:05:17:94:3f:9f:db:21:b9:f1:40:
01:f7:2f:ce:1b:e6:ef:7b:9f:c8:6b:5d:d9:a0:e3:
a4:72:d6:de:95:77:13:39:8d:0b:62:6c:b0:55:2b:
ec:62:e6:dc:33:df:5a:16:09:28:16:33:c1:9e:39:
6e:44:f9:7b:58:a5:33:8a:26:b7:23:f4:6c:99:6e:
a5:9d:cf:f0:8f:ce:b7:33:a4:07:ab:03:97:26:e8:
3b:f3:2f:57:ae:89:27:2e:56:dd:a8:89:b5:81:8b:
0d:8f:22:4a:b9:c0:57:ca:f6:90:c6:80:cb:94:09:
f8:b8:35:bb:25:d8:90:82:62:a8:20:45:7d:da:47:
d8:be:92:2b:82:64:7a:92:3d:66:88:fa:e0:d7:30:
94:0d:f0:98:58:76:d7:ba:5f:bc:9d:84:52:e1:74:
2a:48:7a:94:05:74:90:42:c5:dd:a3:bc:47:b2:c2:
ac:ee:07:6d:87:6c:16:16:fb:70:65:4c:3a:ab:ef:
04:bb:ea:a9:af:38:e8:65:71:c8:71:78:5d:73:31:
9d:45:06:f5:b9:e1:d6:d3:ab:8d:65:72:38:70:0d:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:FB:CA:87:DC:CF:2A:20:69:91:50:BC:42:4E:19:61:F1:1E:92
X509v3 Authority Key Identifier:
keyid:CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:91:3b:eb:42:f7:43:f9:a7:cf:3c:c7:eb:b2:28:98:f7:1d:
99:b3:d1:f3:29:47:54:fe:4e:40:1e:7c:85:3d:61:b9:e6:89:
8a:99:62:c5:53:30:c2:e9:dd:2c:18:e2:6a:7e:8e:61:64:01:
99:f8:6f:97:fa:83:cb:3c:5b:e2:7d:42:8b:d3:e2:cd:ee:ff:
a4:15:b5:88:5c:e0:8c:84:2c:be:21:34:69:86:e1:48:4b:10:
e8:98:a2:78:ba:d1:61:e6:5f:68:0f:ce:f1:13:db:08:44:a5:
ac:b3:11:d0:e0:c7:33:5c:c0:d0:c7:16:33:4c:44:ab:10:d6:
c0:52:01:8d:24:52:94:35:3b:6f:3d:d4:99:b9:e2:ab:63:0d:
6d:5f:eb:6a:10:7e:70:c2:af:91:37:9f:f6:ac:9d:89:1b:a2:
42:de:69:59:55:ee:15:ac:cb:ce:7b:8a:35:59:c6:02:82:90:
42:77:d4:68:8d:4a:51:8e:85:00:a4:fd:5c:f8:05:9a:85:c5:
9c:34:b9:60:47:3f:1f:53:43:2d:8d:9a:7f:c6:19:7e:af:f5:
e1:10:38:34:bd:58:e6:02:ed:e7:62:22:83:03:c0:da:6a:17:
40:25:14:18:dc:7f:0e:c7:37:29:5a:9f:29:9e:48:1c:9f:bd:
3d:55:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:19:13 2025 by rpki-client