Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
File: Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft (raw, json)
Hash identifier: WiQyYSRlnCoqKOwDAVy4RyoN3NZmGdlU/BiU/DpoSIg=
Subject key identifier: 02:99:02:53:9C:20:5C:9B:8D:22:69:C6:92:47:CA:2D:71:D6:AA:69
Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627
Certificate serial: 019590AB9142B0430DA0F480641400B662E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
Manifest number: 13F3
Signing time: Thu 13 Mar 2025 18:01:57 +0000
Manifest this update: Thu 13 Mar 2025 18:01:57 +0000
Manifest next update: Fri 14 Mar 2025 18:01:57 +0000
Files and hashes: 1: Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl (hash: wF4h4chWS6c0urEUbWmKoPAklAeBQOsHwqoayqWesvk=)
2: ZBPuASXAJcjpb4z2Gk47z8Bokws.roa (hash: xXQRbhIxvcjZLo2Nk1OZPyhXjwNTzt2gl2oGbinvPSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:91:42:b0:43:0d:a0:f4:80:64:14:00:b6:62:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627
Validity
Not Before: Mar 13 18:01:57 2025 GMT
Not After : Mar 14 18:01:57 2025 GMT
Subject: CN=029902539c205c9b8d2269c69247ca2d71d6aa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:a9:18:57:b9:78:75:16:e0:31:ca:e8:49:
70:81:dd:5f:9f:ad:0c:51:30:31:6b:2a:bf:e9:1f:
6a:a3:68:c0:9c:e4:2f:d7:13:8b:0d:d6:36:dd:8d:
eb:2c:09:e3:17:e0:05:5d:b8:de:cb:ef:a9:ec:f1:
ba:a4:6f:e3:20:e8:74:03:c0:62:3e:54:6a:7e:c7:
df:51:fd:cc:59:50:9a:6b:81:60:54:41:27:10:04:
fe:19:04:66:d1:87:99:e6:bd:de:a2:1b:36:17:b5:
df:01:d3:dc:75:65:d3:8b:04:77:ec:c5:ea:ba:14:
04:23:45:ea:72:47:56:7b:f7:1b:71:6c:82:ca:5c:
f6:35:2a:c4:b5:4a:f8:18:7e:f1:ec:3e:5a:a4:80:
aa:83:5c:0f:7b:2d:8b:3f:72:02:10:ae:aa:f7:64:
0e:41:75:b3:7f:14:22:8b:22:36:7e:da:dd:a9:4d:
2c:5a:82:98:28:03:4a:21:20:55:7f:01:88:bd:61:
d3:88:79:41:24:ec:64:53:35:b0:3a:3b:4f:a7:22:
a1:76:99:13:2a:bf:f2:d1:59:10:b8:fb:3e:84:8f:
3f:e6:a5:90:e9:64:96:6e:16:e1:15:67:ed:10:5f:
f9:e7:49:28:47:d8:ac:dc:18:3f:4f:35:9f:db:2b:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:02:53:9C:20:5C:9B:8D:22:69:C6:92:47:CA:2D:71:D6:AA:69
X509v3 Authority Key Identifier:
keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5b:aa:18:f6:a3:1c:eb:0e:0d:2f:e2:cf:e7:36:23:c1:4f:
0a:6b:52:1e:78:c2:8e:1b:d5:5d:66:9e:58:42:5f:bf:ba:0c:
43:5d:e0:f4:90:34:39:78:ff:68:d7:6e:60:68:ea:cd:06:12:
de:d0:cc:27:34:85:37:15:28:98:db:49:53:e4:12:c2:8b:11:
92:d9:bc:fb:e3:13:c1:8a:ac:36:03:c8:23:5e:37:93:3d:ba:
c7:79:b5:b8:2b:dd:0d:c6:21:4f:43:56:38:3d:c0:19:22:41:
f6:7b:92:e6:58:4b:86:35:6a:e4:ed:e1:20:a9:8d:8b:c9:91:
85:37:44:95:19:e3:2c:c3:83:8d:df:cd:d2:c2:f9:eb:8f:38:
74:8d:96:25:ea:85:b6:c1:67:25:1e:b3:28:3e:97:4c:eb:bc:
5d:1e:28:16:54:cd:98:f1:9a:eb:a5:a7:e1:2f:44:06:8b:2f:
20:ed:26:4a:28:8b:c5:6d:59:45:94:2b:b1:9d:60:f8:eb:6d:
0c:e8:18:27:90:56:78:49:d3:1c:c2:7b:5a:6c:df:4c:fc:17:
9e:24:19:47:d5:aa:11:80:56:fb:c7:fb:b4:4c:8d:48:e6:f1:
d3:0b:70:c9:27:f9:91:52:44:ac:6e:d7:3a:ae:e8:c3:f8:e2:
a8:a1:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:53 2025 by rpki-client