Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: DkFbbyycXTP3m3yhDpTjIIjDTHn+WhEeshlRa5EBac4=
Subject key identifier: EA:31:DF:FF:82:CA:B8:87:25:E5:EC:8F:5C:1D:46:3B:7F:27:F0:F4
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 0196488E698F53377E453BC80F3A5FE2BDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 109B
Signing time: Fri 18 Apr 2025 11:00:14 +0000
Manifest this update: Fri 18 Apr 2025 11:00:14 +0000
Manifest next update: Sat 19 Apr 2025 11:00:14 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: Mp4zh3j19jSIgWxAWocu5bYe5Rz/WPz8cll1PIy+JEk=)
2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:69:8f:53:37:7e:45:3b:c8:0f:3a:5f:e2:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Apr 18 11:00:14 2025 GMT
Not After : Apr 19 11:00:14 2025 GMT
Subject: CN=ea31dfff82cab88725e5ec8f5c1d463b7f27f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:d7:92:9d:75:38:e7:f8:5a:d7:2a:8f:dc:
2b:7d:ed:83:7d:0d:af:c0:8b:a6:30:28:9f:84:4e:
06:99:0b:9c:2e:eb:ba:64:92:87:84:69:cf:1f:01:
3f:7e:db:7c:fd:8b:87:ec:cd:a5:d3:a7:82:ac:fd:
71:47:9a:3e:3c:01:9c:cf:0f:d8:f6:02:87:90:f2:
2f:c3:87:9f:c0:5a:24:42:8c:c5:0b:6b:44:b9:7c:
ca:4b:00:d3:49:0f:ee:05:aa:fd:77:3a:f4:2d:17:
96:95:9c:57:2c:15:99:19:fe:fb:1c:3b:38:20:7a:
0e:30:79:45:ce:3b:52:33:39:18:d8:5c:c8:6e:fb:
a4:6b:a2:6e:0e:0b:09:ea:74:ea:9b:d1:a6:73:88:
e2:67:11:61:27:0b:40:19:27:a9:c1:c9:10:c3:97:
e8:34:c6:7c:4d:f8:17:f5:fb:06:8a:00:3e:96:43:
e5:d0:23:fa:b1:9e:aa:47:02:57:57:88:c6:fe:3d:
f1:35:f3:24:00:b9:2b:c0:00:e0:47:b8:97:54:de:
e6:4e:5c:4b:6f:66:da:5d:b4:c4:52:78:85:a1:1f:
21:54:8d:0f:5e:74:e6:71:ab:00:15:13:21:76:7d:
14:e5:ab:89:1d:89:b1:e4:13:62:71:49:7b:16:cc:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:31:DF:FF:82:CA:B8:87:25:E5:EC:8F:5C:1D:46:3B:7F:27:F0:F4
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:83:25:1c:d5:93:98:04:2b:7c:80:e9:da:d4:e2:f9:ac:
9e:ea:c4:aa:fe:48:14:c8:47:7a:16:06:3d:47:81:d6:e6:6a:
3b:77:81:52:35:71:52:f8:9f:b1:95:35:48:77:c8:7c:b0:8f:
4d:ab:ab:60:d7:ae:6b:86:d7:73:b1:a1:35:00:bd:9b:31:17:
df:c3:18:34:33:18:60:8b:50:c0:69:e9:81:84:3e:1f:ef:6f:
f4:cd:37:5a:47:f1:4b:58:24:38:3e:ea:e0:bc:b9:57:7d:31:
dc:23:06:69:c3:63:b5:aa:d2:09:39:db:81:6e:19:0e:d4:d7:
6c:ed:82:32:4c:69:3f:24:04:a5:a4:7a:ae:37:f5:f6:81:44:
ff:7d:3b:7a:b3:60:cf:6c:11:5a:37:d0:c6:ae:fe:37:c9:f1:
73:78:2a:06:8a:5e:68:88:a1:05:be:50:2d:1a:61:32:56:44:
4a:8a:00:25:c8:f1:b3:e3:6e:b9:6b:be:32:a8:c0:60:55:70:
08:a3:e4:d5:86:c4:bc:a8:bc:ab:a0:74:69:aa:d1:b9:29:a2:
b7:72:a0:85:16:80:39:d3:57:a8:3e:a4:f1:02:bd:c2:64:d3:
8d:7b:3a:ff:44:a6:40:c3:78:fb:33:cb:41:67:23:5c:1e:55:
99:ed:18:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:20 2025 by rpki-client