Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
File: zBEL75xblqgxx6v5VZJ0S7rx7mc.mft (raw, json)
Hash identifier: IlI7mTNW8JTLP9zEafKIKQ6v1M6jPVWKPE52TN45F5U=
Subject key identifier: E0:EB:43:30:4D:F7:FB:B1:04:5C:80:50:1E:89:49:BF:43:05:FC:EA
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 019652A4F0073D06E972A82887A2895D0DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 10:01:03 +0000
Manifest this update: Sun 20 Apr 2025 10:01:03 +0000
Manifest next update: Mon 21 Apr 2025 10:01:03 +0000
Files and hashes: 1: vb1dDyyTWxxLlSgfwG-f2LoghnM.roa (hash: /aBDSc4vT/oTqhg2Zpyh6DEtnkQwwXOnttzniIq6fsw=)
2: zBEL75xblqgxx6v5VZJ0S7rx7mc.crl (hash: ljZKpx5xs+vqzEvWsDipHlBNAsLTWu3ml0AqpxP39sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:f0:07:3d:06:e9:72:a8:28:87:a2:89:5d:0d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Apr 20 10:01:03 2025 GMT
Not After : Apr 21 10:01:03 2025 GMT
Subject: CN=e0eb43304df7fbb1045c80501e8949bf4305fcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:c2:20:86:60:96:e1:c8:0c:e8:bd:d9:c1:
71:f3:e1:b9:f5:f3:13:99:40:78:e3:5e:79:16:00:
a7:c3:48:fe:a7:f5:18:ba:17:b9:38:00:a5:b3:cf:
d6:e0:fb:7a:83:da:28:49:47:8d:98:10:c0:d0:a8:
2a:b3:f6:98:55:d3:b6:b7:e8:40:ea:c0:e5:5b:68:
f2:1e:59:b4:ca:31:03:08:16:b2:6e:9c:f9:77:5c:
3f:07:ea:fc:03:8f:72:36:0e:44:c2:92:76:62:49:
34:51:79:d2:56:05:c8:b5:26:1d:ce:26:e5:5a:68:
e3:70:b9:ce:06:f4:76:35:12:6c:48:af:1f:89:44:
7e:a8:e2:0d:42:f0:65:67:82:ae:7f:c0:5a:51:7f:
83:fa:d7:94:b0:3c:f0:ba:66:00:e8:e4:13:83:c2:
68:cd:85:62:db:b5:46:96:e0:e1:f8:5e:d1:a1:25:
78:0f:3a:1e:65:ca:cc:a0:2d:23:fc:be:41:52:e1:
37:28:32:1e:e3:9b:72:6c:a9:05:fa:38:6b:65:99:
6a:94:c3:98:c1:c5:d4:52:26:09:61:31:88:bf:56:
5a:0e:fb:2f:ca:82:03:d0:15:11:78:58:a2:4b:c6:
b7:d4:f6:51:d1:ae:7f:99:06:7b:e0:84:03:90:aa:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EB:43:30:4D:F7:FB:B1:04:5C:80:50:1E:89:49:BF:43:05:FC:EA
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a5:91:f8:08:2e:14:5c:e7:f2:80:57:4d:c7:0c:d3:3a:14:
de:fb:d5:10:5e:3a:0c:b1:c1:b0:c2:62:a7:3e:00:fc:f2:b0:
36:5e:32:77:29:42:bf:42:bc:3d:10:e4:50:55:c0:1f:20:33:
67:30:fe:36:d5:d3:e0:25:e8:26:70:0b:d0:e6:3c:fd:83:30:
93:35:f4:b2:04:00:e5:3a:05:f6:f5:fd:ea:f2:15:b6:b8:c5:
b0:2f:1a:27:01:a8:5f:9b:92:12:5b:b6:fb:97:7d:55:ed:86:
9f:1b:28:4e:86:4c:35:f0:7a:88:cd:f0:2f:f4:27:78:61:f9:
7d:1c:f9:6f:21:d6:63:14:80:a4:9e:e8:99:03:cb:9c:1f:ed:
ea:9a:ab:d0:f7:52:77:18:29:27:82:db:ac:7e:0c:06:5f:f3:
42:c5:c0:01:47:77:cc:d2:2d:7a:96:75:df:ab:d4:68:fd:7c:
69:7d:e1:1d:0a:80:af:d3:62:d4:7d:ad:75:ed:91:4f:e6:07:
7b:8b:b3:c7:54:10:a8:ad:1a:bb:80:58:06:d0:94:42:a9:0e:
f7:b5:94:56:b1:7c:0e:72:13:1f:91:2d:38:aa:aa:03:a7:75:
7d:1c:2a:46:39:55:5e:07:f5:3b:d0:0f:1e:71:64:4b:25:f0:
c7:f8:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:20 2025 by rpki-client