Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: wNjpsTzhJHgyt9UB+SQn1MZ2JIqT46Bd/uqNTwDSL2U=
Subject key identifier: BD:D0:A1:1F:13:E4:45:C5:6F:46:3E:0B:33:EE:AD:8D:13:DD:FE:B8
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 019656134DAC52D533803CC7E3334D6E962D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 1283
Signing time: Mon 21 Apr 2025 02:00:27 +0000
Manifest this update: Mon 21 Apr 2025 02:00:27 +0000
Manifest next update: Tue 22 Apr 2025 02:00:27 +0000
Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: Jr4ZxCoyL8+p1zhQahqX0f9fTI0u9DWGy9Y+jQLypVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:4d:ac:52:d5:33:80:3c:c7:e3:33:4d:6e:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Apr 21 02:00:27 2025 GMT
Not After : Apr 22 02:00:27 2025 GMT
Subject: CN=bdd0a11f13e445c56f463e0b33eead8d13ddfeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cb:0c:dc:fb:ad:b4:d1:46:5b:8e:c1:a9:cb:
76:19:50:a1:e3:f9:0d:f3:1f:5b:f6:18:49:19:4f:
af:98:0c:fc:99:57:df:d2:2c:eb:9d:a8:1f:fd:50:
7b:d5:35:32:b4:71:c5:4d:a6:4d:91:c3:3c:10:06:
cc:1f:fd:f9:5c:08:16:eb:4b:b7:b3:ab:55:67:a5:
44:4a:b5:fe:2f:77:b6:7c:9c:4e:03:3b:e3:53:fd:
ce:ad:7c:ee:59:42:42:03:af:94:0c:d5:44:7e:74:
63:58:29:03:e9:5f:dc:5b:72:94:90:9b:5c:d2:eb:
13:4e:75:2e:59:b6:a8:4f:c2:74:18:ec:20:c9:44:
9c:9c:91:6f:7f:a6:09:08:03:42:d2:32:27:65:2a:
fc:e3:b8:d6:7f:96:11:06:c7:eb:e4:26:d6:ce:73:
4e:ec:88:a0:bf:0d:08:f4:8d:ac:d0:f8:aa:75:dc:
e1:02:95:cd:a3:ef:ab:4e:87:c4:9b:f2:6e:b2:89:
71:21:b2:d3:92:fa:da:4a:a0:bd:0f:a4:30:f8:c8:
e1:89:76:4d:6f:fa:d7:de:36:4d:a7:ef:6d:37:05:
2e:77:88:63:de:0e:14:09:3e:c6:5e:52:fc:8b:35:
88:30:63:6b:73:aa:52:0d:67:d7:fb:93:3f:2f:01:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D0:A1:1F:13:E4:45:C5:6F:46:3E:0B:33:EE:AD:8D:13:DD:FE:B8
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:da:95:a4:85:65:94:fc:d3:a2:20:8f:75:f3:45:8c:ed:96:
8e:d1:64:c5:9b:48:97:14:a3:43:f4:8b:6f:5e:02:96:3f:b2:
c4:d0:aa:fa:71:b8:15:e9:47:6c:c3:43:95:5c:d3:23:49:fb:
7a:72:26:59:e9:fd:d6:7d:3c:8a:07:03:99:67:08:05:c7:78:
0a:8a:c5:0d:9f:23:b9:26:5a:a8:93:5c:31:9f:81:26:c8:5a:
28:85:0b:2e:7a:b5:72:fc:c6:f4:0e:a8:2a:9b:78:27:49:ed:
e5:d9:a9:05:c0:a8:bf:70:a8:07:1d:7d:2a:fb:82:0c:4b:85:
bf:aa:8d:7c:68:0d:2b:51:f0:27:23:4b:e9:6c:6e:7d:1d:72:
f9:ff:b6:fe:f8:4c:f4:98:44:26:63:0f:22:f7:a8:59:5e:f6:
f4:cd:f2:e9:c0:6e:42:ca:23:21:8c:8b:49:e2:63:8c:60:f4:
d8:0d:3c:12:4f:77:1b:42:b9:e8:04:70:dc:55:f5:ae:e8:b1:
57:2e:c3:cb:dd:00:b8:52:41:f9:1b:c6:11:67:15:fb:31:d4:
94:90:d1:e6:06:12:0c:a4:a7:4b:a8:1f:d6:41:cb:07:a9:1d:
fe:10:c4:25:e7:97:a7:85:48:a6:16:00:2a:9c:14:21:8c:c4:
eb:9f:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:35:43 2025 by rpki-client