Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
File: ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft (raw, json)
Hash identifier: QbYI3ZPAUBsLWcAX/hmuYuaK3467IsrvHhbv7xPMat8=
Subject key identifier: 89:FA:ED:2F:AA:84:DF:0E:7F:3F:5F:5C:76:95:D9:91:FE:0B:8A:E3
Authority key identifier: 64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
Certificate issuer: /CN=64ff41a24fc48271b992327a2dae5a433bded050
Certificate serial: 01965F1689156F48F79888DB5B21E522421C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 20:00:34 +0000
Manifest this update: Tue 22 Apr 2025 20:00:34 +0000
Manifest next update: Wed 23 Apr 2025 20:00:34 +0000
Files and hashes: 1: ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl (hash: P10S7K0CyWIe+JPw+//i1iHApC1k8is7r+sS2iloSQ4=)
2: hQBjTq5KMkIiJgnQG8IwJwMqWkc.roa (hash: 2H6xUWWibA2OIWVz4dbFvNnKSleGcdT636P9g8q1NEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:89:15:6f:48:f7:98:88:db:5b:21:e5:22:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ff41a24fc48271b992327a2dae5a433bded050
Validity
Not Before: Apr 22 20:00:34 2025 GMT
Not After : Apr 23 20:00:34 2025 GMT
Subject: CN=89faed2faa84df0e7f3f5f5c7695d991fe0b8ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:99:da:21:78:b2:fe:76:bd:f8:e1:c1:d4:
56:7c:97:22:64:cb:c1:1c:ce:28:68:9a:cf:2a:89:
35:3e:23:48:fa:84:60:49:3d:75:56:59:ba:89:fc:
ed:a8:d7:2a:55:7f:1f:c9:08:a8:b1:b1:3d:87:a5:
78:91:12:8f:9e:42:44:7a:49:56:76:d7:31:2a:f8:
53:e2:cd:88:49:d6:a9:43:5b:6b:4f:4a:4c:db:18:
e2:af:2e:0a:a0:a6:8b:03:0d:12:09:d3:76:b2:2e:
92:76:5b:c8:51:c2:f2:0a:20:b6:f3:a4:37:2e:44:
5e:a2:d6:e9:d7:82:1b:5f:69:90:44:e8:d9:5e:ae:
74:8e:6e:e2:59:63:86:99:42:62:ce:b0:02:6d:2e:
a8:51:80:1f:e1:66:f8:15:ae:f0:86:57:e0:ad:cd:
7a:82:1b:d4:0e:4c:37:19:3c:cd:23:11:fc:61:ac:
b1:16:72:96:cb:2d:42:f7:39:6a:06:d0:eb:95:a6:
ff:3c:e7:bd:a6:ad:38:e3:e9:7d:e0:89:16:7f:1a:
78:70:9a:91:44:c2:9f:0f:0f:8d:ea:63:1f:a2:c8:
33:74:dd:b9:a1:54:c4:4d:f3:1f:8e:14:c6:18:f5:
71:d5:33:7f:1b:57:0f:e2:74:bc:ac:41:c3:ea:e6:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:ED:2F:AA:84:DF:0E:7F:3F:5F:5C:76:95:D9:91:FE:0B:8A:E3
X509v3 Authority Key Identifier:
keyid:64:FF:41:A2:4F:C4:82:71:B9:92:32:7A:2D:AE:5A:43:3B:DE:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP9Bok_EgnG5kjJ6La5aQzve0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d796e4-d654-4e7b-84d4-f01a62400821/1/ZP9Bok_EgnG5kjJ6La5aQzve0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:0a:16:04:73:90:8a:23:d5:68:72:92:75:3d:93:1d:c7:
80:87:a7:6c:4b:da:71:d0:44:84:5c:39:e3:4d:ea:01:81:af:
ca:54:da:e4:02:a3:cf:8b:9f:c2:aa:21:63:cc:ce:b4:e1:d7:
a2:fc:b1:6c:70:67:c1:e8:af:36:46:18:14:65:42:6a:1e:24:
59:fb:18:bd:60:7a:61:75:00:a4:7a:a4:a0:b1:cf:a3:d3:d9:
6b:14:0e:ca:ce:b3:f8:fd:32:0b:b6:45:72:fa:6e:17:d1:cf:
79:82:71:10:c3:c3:d1:4f:4b:d1:a6:9a:2c:a8:a2:76:06:65:
57:70:fa:3e:51:29:8a:8c:6d:c4:c9:49:64:c5:1d:50:19:36:
13:b4:40:33:88:48:2b:be:31:53:17:db:e8:f2:20:1c:16:bb:
a6:3c:da:1f:1f:ed:0d:56:3b:71:3e:36:cd:8e:15:16:c7:a2:
4b:ab:a0:c0:a1:2b:4d:15:21:03:19:58:6a:e3:e2:28:d1:1c:
ca:6f:34:3f:ec:c2:e0:4e:72:b9:3c:9c:3f:8f:06:49:7d:b3:
8a:d8:85:d1:8f:0d:86:6f:5c:25:c7:43:53:3a:5e:1c:93:52:
52:98:e0:1e:45:65:ef:8b:57:74:5a:8b:15:3b:5f:18:e0:be:
fc:b0:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:01:35 2025 by rpki-client