Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
File: RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json)
Hash identifier: mJL+oGXz0iJTAN5JVUl1pw+5fv5DLodrisO3Sba1oL0=
Subject key identifier: 28:4B:B4:6A:E1:2B:31:5A:BC:76:BE:0A:F0:B7:F6:17:6A:41:D6:44
Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
Certificate issuer: /CN=459ccc1bb01160686806db35a93351b21b3e60dc
Certificate serial: 019635ADE195F4DEBEBFE602683C9B98C1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
Manifest number: 1263
Signing time: Mon 14 Apr 2025 19:01:49 +0000
Manifest this update: Mon 14 Apr 2025 19:01:49 +0000
Manifest next update: Tue 15 Apr 2025 19:01:49 +0000
Files and hashes: 1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: gdqM4JImb7WCVgGqKChgK/wZkp3GtL0DDvxaRjtXT84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:ad:e1:95:f4:de:be:bf:e6:02:68:3c:9b:98:c1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc
Validity
Not Before: Apr 14 19:01:49 2025 GMT
Not After : Apr 15 19:01:49 2025 GMT
Subject: CN=284bb46ae12b315abc76be0af0b7f6176a41d644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:a6:3f:c1:00:d8:92:82:11:4b:45:02:98:
ed:b2:e1:83:0a:a3:ae:1f:9f:48:b1:ba:8f:b7:22:
25:dd:a1:f5:ec:b7:dc:77:71:72:c6:fe:30:5a:37:
b1:ae:cf:3a:62:61:89:f2:03:20:4b:6f:3a:1c:8a:
3d:98:10:d4:ca:47:3f:07:0b:b5:9b:c6:d9:d7:b9:
f6:9e:e3:de:9d:a0:fd:b1:4d:d9:8a:9a:7c:0d:70:
45:5f:16:a9:f3:e1:20:62:88:b8:d2:95:76:10:45:
46:c8:75:19:a5:5e:17:e6:cb:90:31:62:08:2a:3c:
da:ef:3c:b3:59:1d:15:ab:d5:e2:e0:dd:70:97:c5:
6f:f8:07:1d:43:3c:be:aa:fd:8e:52:b3:c4:e3:81:
79:1d:4b:67:4b:1c:9c:a3:02:9d:10:90:ef:35:72:
68:9c:73:61:ce:db:88:31:7b:cc:6b:93:4f:13:c3:
7c:c9:ea:cd:53:e2:34:23:e1:5a:24:84:33:0f:4c:
9e:b1:1d:be:05:9f:ef:a1:84:e8:17:26:49:05:15:
ad:8b:9a:58:80:0b:45:eb:66:28:17:c2:77:ce:59:
75:7b:3a:27:eb:c4:39:53:81:6d:63:57:85:1c:dc:
ee:26:4d:0e:81:f6:88:c3:b8:9a:4e:e6:83:84:d5:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4B:B4:6A:E1:2B:31:5A:BC:76:BE:0A:F0:B7:F6:17:6A:41:D6:44
X509v3 Authority Key Identifier:
keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ff:3e:6b:e1:aa:ab:48:3f:4d:cc:4d:4b:af:b3:0d:a3:10:
5d:f7:d1:94:a9:f5:68:5c:2e:26:83:39:f3:ed:ef:2e:04:a5:
14:63:2c:78:39:ad:70:52:64:35:20:98:14:54:5c:ed:74:6c:
92:2a:b2:da:94:4e:ff:b6:b1:12:b0:7f:72:d2:b9:04:b9:b2:
db:66:6f:c3:74:67:bf:4a:2a:44:c8:cd:66:88:30:9f:a7:db:
9f:76:38:4a:bf:50:bc:ac:1d:c4:c1:74:d0:15:12:7f:3c:47:
44:83:f9:03:64:50:82:08:17:2c:0c:b3:2c:9a:5f:9b:aa:ad:
62:7c:aa:66:82:17:24:43:61:3a:92:44:35:05:e1:ef:da:92:
ed:3a:79:ac:53:34:be:8a:ff:bc:79:0a:b9:dd:c0:c0:d8:35:
44:9e:e6:dc:84:78:f4:58:d4:db:06:54:3a:d4:da:5a:1f:05:
46:bd:23:61:12:73:de:0f:f9:96:92:1f:61:3a:9c:60:68:dc:
0c:bd:45:c2:1c:cc:90:5d:da:63:c5:99:2e:69:cd:8c:09:19:
f6:14:f6:67:be:6c:f2:08:2d:d8:2d:8c:7c:48:5e:90:b9:91:
76:1c:cd:86:11:2b:ca:65:16:cd:8f:00:11:43:df:37:5c:95:
e6:b0:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:45:51 2025 by rpki-client