Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: LwRe+GcXG3CLOdTPXjJf0SsDTmgXeq9AVmEIxr+BB2E=
Subject key identifier: 8D:4B:E9:3B:85:4B:C5:3E:55:AE:40:BF:A6:0D:C4:54:28:C3:18:54
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 01964FDB01B5146FB1D58FCF5AF6ABD0CEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 21:01:14 +0000
Manifest this update: Sat 19 Apr 2025 21:01:14 +0000
Manifest next update: Sun 20 Apr 2025 21:01:14 +0000
Files and hashes: 1: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (hash: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=)
2: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: WoLFmwCwqPQscp9VWEgIN1YwaJt5Kd6HD6kRAQMKkJQ=)
3: e2qB4esbK6h3v26XFDC4VZBc5KY.roa (hash: j1cRIZ5v+8OJ2fmGwhM51DYmzvrib+oAKJLnWq3m2pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:db:01:b5:14:6f:b1:d5:8f:cf:5a:f6:ab:d0:ce:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Apr 19 21:01:14 2025 GMT
Not After : Apr 20 21:01:14 2025 GMT
Subject: CN=8d4be93b854bc53e55ae40bfa60dc45428c31854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:8a:55:19:c0:c0:c3:08:8e:04:59:42:9c:
95:e3:ab:ff:ba:8b:07:3c:9f:21:c1:6b:6f:49:46:
20:e5:ba:73:ef:43:a0:15:8c:0e:f2:ae:b5:02:e6:
e1:db:09:2b:f3:46:5b:74:f1:a8:aa:a0:25:64:3d:
e2:e4:4c:52:02:1b:2b:fb:f7:0c:f2:4d:b3:da:00:
d0:b2:e4:81:04:da:28:c0:2d:31:c6:ee:20:d9:26:
54:b3:9c:98:43:5d:91:7b:fb:cd:e3:52:70:d3:e4:
ff:a5:da:c0:77:d2:f2:f9:5f:6f:7c:bc:f2:bb:4f:
1f:0b:a1:2f:b0:f1:3d:5b:0e:16:d8:6d:b0:73:01:
5e:87:2c:4a:f3:72:c4:2c:60:23:56:eb:ec:ec:7d:
cf:e0:48:76:20:73:d8:1a:f7:1e:a6:fd:dc:ac:4a:
ea:4b:34:7a:64:50:8b:3e:8e:12:09:90:0d:5f:c4:
09:25:3e:e9:5f:4d:fc:a8:b7:3c:a5:5a:77:9d:fa:
83:37:c0:99:8e:c2:e4:76:78:8d:25:b3:82:57:27:
61:c3:f4:be:d0:b7:c4:14:0a:03:80:c6:60:81:a2:
c5:11:5b:f8:4f:f6:af:fc:7c:9c:70:9d:89:1e:b4:
1b:44:6b:f2:63:53:b6:7e:ba:fb:d1:c4:b6:c2:29:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:E9:3B:85:4B:C5:3E:55:AE:40:BF:A6:0D:C4:54:28:C3:18:54
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b8:9f:10:fa:0b:73:fd:cc:5e:5b:81:2b:d1:05:8b:28:b0:
b9:08:be:43:2a:06:48:73:d8:d8:7b:e3:69:1e:17:46:ec:41:
d5:df:4c:a7:9f:85:5c:ee:cd:09:e6:c1:0f:3e:dd:cf:52:9e:
e1:3b:d5:8a:0f:65:94:3e:0b:86:ba:d2:d0:2d:b0:cb:86:f8:
b1:0f:45:d1:28:84:03:aa:9d:5f:2e:56:cb:88:99:90:65:ed:
1f:20:f8:02:cc:d8:65:8c:c5:dc:c5:11:62:8a:a2:f9:39:46:
d0:62:cc:41:23:f5:40:68:52:36:6b:ef:87:bd:fb:f4:7b:87:
ff:f3:1e:18:bb:a2:37:d3:ed:f3:32:16:38:2d:84:38:d9:d9:
90:a7:84:72:db:e9:7b:36:ed:4a:6e:c4:de:c7:a5:2a:a6:4c:
3f:57:b0:36:82:c2:22:e6:68:72:cc:d6:1e:9d:03:84:6f:78:
e7:91:27:e3:20:86:42:c8:58:c2:7d:a2:2b:91:48:1d:80:ab:
39:c4:17:93:36:39:12:1e:b4:bf:8c:d6:5b:50:c5:20:81:5d:
ad:70:01:33:f6:91:db:44:63:3e:90:8b:ff:8f:34:3e:a2:aa:
ca:81:74:77:21:df:d0:7a:55:5d:c4:87:c8:18:c4:fa:78:7b:
6c:be:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:03 2025 by rpki-client