Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
File: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft (raw, json)
Hash identifier: xG86CmK5xvlCDEzFP9sGBHfNE8KRHBRJQaddOpa1nEA=
Subject key identifier: 75:5B:65:78:77:E6:2E:DF:B9:BF:2A:30:4A:AD:90:54:44:F2:47:E1
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 019655009D296C427CCBC60116293C055A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
Manifest number: 0DC3
Signing time: Sun 20 Apr 2025 21:00:25 +0000
Manifest this update: Sun 20 Apr 2025 21:00:25 +0000
Manifest next update: Mon 21 Apr 2025 21:00:25 +0000
Files and hashes: 1: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl (hash: KLYN+wk7WHm7sqQXuIs0LRbQRMmiuqQSOYp1rwfnP6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:9d:29:6c:42:7c:cb:c6:01:16:29:3c:05:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Apr 20 21:00:25 2025 GMT
Not After : Apr 21 21:00:25 2025 GMT
Subject: CN=755b657877e62edfb9bf2a304aad905444f247e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:48:65:7c:40:2c:53:19:1d:52:2e:05:c9:
62:52:b3:06:96:0f:b1:3f:ae:fe:9d:5e:2f:65:ab:
a2:a4:03:9a:a3:7d:22:3c:81:65:3b:fb:0d:38:17:
87:b7:bd:2f:99:70:74:84:c9:d8:c8:1c:e1:1a:19:
58:83:80:af:69:cc:46:47:c4:7a:95:d7:e4:dd:82:
71:a4:1f:82:91:4d:94:b7:0f:18:64:5e:28:e7:fb:
04:a0:a6:42:f2:a6:dd:55:08:83:ca:5e:ec:0e:d5:
45:bc:a8:88:a9:94:37:b7:fa:28:a2:f3:4f:4a:81:
6c:aa:ac:03:fa:56:21:08:ab:bf:cd:f2:92:07:95:
aa:10:90:1b:66:26:ae:f8:22:47:bc:7a:0b:ba:fc:
dc:4c:84:03:21:b7:c6:7d:7e:e8:0d:66:19:bd:0c:
d4:1f:81:fb:dd:7a:75:3a:b9:07:17:db:9b:d8:fd:
83:46:b6:d5:e9:b2:fd:64:6a:e2:4a:80:71:08:40:
50:42:f6:a8:5a:0c:95:55:41:49:7c:15:b4:26:fd:
c9:21:f5:b7:67:6a:42:e8:cb:a2:69:e7:b7:10:7d:
0f:8b:7e:9a:1b:75:93:09:b4:d6:34:3b:da:07:16:
03:b1:12:31:16:c3:bd:b2:e1:b4:09:f3:b3:fe:46:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5B:65:78:77:E6:2E:DF:B9:BF:2A:30:4A:AD:90:54:44:F2:47:E1
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bf:c0:0c:64:97:69:63:33:21:f2:3c:58:df:34:5c:b0:ff:
79:54:b3:90:41:a3:b5:e6:bb:00:bf:3e:b9:74:76:fc:87:1a:
40:e4:4a:ff:c3:ef:bf:8e:35:75:55:6d:4b:21:2b:5a:cb:bf:
39:42:fc:f8:3b:33:6e:ac:88:b3:28:59:e7:17:00:90:f3:52:
a4:d4:ed:8c:f5:2a:36:ab:b5:7d:db:ed:ed:7e:56:bb:7f:4d:
b5:d0:9f:13:bd:41:9c:3a:88:06:53:d6:6c:b3:75:1f:d4:88:
74:c4:fa:e1:85:49:50:47:15:99:cd:10:eb:53:43:cb:7f:91:
e5:22:18:4b:55:be:d4:cf:12:e9:66:1a:70:ba:e8:42:a6:bb:
f1:e1:97:10:b5:65:6c:e7:78:6e:d5:0b:88:48:16:92:c4:7a:
e8:59:97:fb:81:7d:73:2f:da:37:c4:c6:35:f2:e2:45:25:11:
f8:9c:ef:2e:d9:a7:74:05:64:57:47:77:83:da:a1:46:13:f2:
a9:ca:cd:96:0b:e8:63:4d:39:cc:1f:b0:75:de:e8:96:1f:69:
0d:4f:55:1f:e2:32:4b:37:60:30:e5:ab:63:c3:36:6e:6e:c2:
a4:07:bd:98:27:62:8d:09:71:db:9b:1d:f9:f2:94:ac:07:ca:
66:5f:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:31 2025 by rpki-client