Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
File: Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft (raw, json)
Hash identifier: DABpDq+12GU7HKiH20hXfLuIRQoCEGZw2nV9apJ4M+4=
Subject key identifier: 26:C1:9C:25:EB:1C:B1:F0:D5:8A:F4:DA:06:42:A2:99:7A:7C:2B:D6
Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627
Certificate serial: 01964BFD90CC18F15EBACE9C958F7EFF3140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
Manifest number: 1454
Signing time: Sat 19 Apr 2025 03:00:30 +0000
Manifest this update: Sat 19 Apr 2025 03:00:30 +0000
Manifest next update: Sun 20 Apr 2025 03:00:30 +0000
Files and hashes: 1: Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl (hash: ShQNkgNolxhPteSk8nUJqFsGc54LvSmBJRDw2lWIBek=)
2: ZBPuASXAJcjpb4z2Gk47z8Bokws.roa (hash: xXQRbhIxvcjZLo2Nk1OZPyhXjwNTzt2gl2oGbinvPSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:90:cc:18:f1:5e:ba:ce:9c:95:8f:7e:ff:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627
Validity
Not Before: Apr 19 03:00:30 2025 GMT
Not After : Apr 20 03:00:30 2025 GMT
Subject: CN=26c19c25eb1cb1f0d58af4da0642a2997a7c2bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:7b:7c:3a:58:72:8d:22:c3:b8:a1:53:c2:
f1:bb:4e:4a:79:e0:b7:d8:73:b5:f9:28:8c:b0:0d:
a4:be:8f:c3:58:6e:be:b2:fa:7b:71:ac:13:00:32:
1b:9b:6d:cf:03:a2:8d:72:f3:c4:ef:8e:d0:d4:2b:
16:bc:72:d6:7f:51:13:a1:1f:ef:9b:f1:02:07:0e:
8f:15:85:de:b0:5d:2b:cd:92:2c:50:90:c9:74:f7:
c3:be:45:cd:d9:f5:53:cf:9e:f5:95:b2:19:27:04:
bf:fa:71:b1:34:de:0e:34:88:8f:99:f1:1c:24:8b:
53:7f:0f:fe:5c:15:0d:d4:df:6e:e5:d5:15:a0:e7:
a5:a8:5c:5d:ea:0a:3a:68:86:01:85:a6:1c:25:21:
b0:15:66:d7:38:36:88:23:e5:f0:02:5c:bb:97:f3:
bc:9f:29:16:c7:98:33:d9:2d:1e:be:45:6e:a9:e0:
dd:c2:2c:50:6b:4b:70:ef:47:72:53:0e:2a:1e:de:
3a:c2:c1:dd:fd:40:b9:ff:ca:59:5d:aa:8c:c7:07:
29:7b:66:8b:bb:00:8f:89:f7:3a:0d:d6:33:e0:7a:
02:3e:56:a4:0f:4f:e4:db:67:57:4a:30:44:d0:43:
98:3c:e0:60:85:9a:8a:44:dc:ae:77:1d:c1:c0:5e:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C1:9C:25:EB:1C:B1:F0:D5:8A:F4:DA:06:42:A2:99:7A:7C:2B:D6
X509v3 Authority Key Identifier:
keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1f:39:ac:d9:ad:e5:ca:6d:5f:8c:74:a5:be:9d:1b:7d:f1:
88:af:e2:c5:57:fa:69:46:76:07:14:bc:f3:6e:50:9b:17:2e:
e5:c0:50:e2:da:52:b9:52:63:d9:95:71:8b:39:37:07:0c:24:
b3:28:d5:69:2b:7d:15:2e:8d:ad:c3:84:0b:82:4c:49:c5:b8:
a2:85:dc:ce:32:85:d0:fd:de:42:d7:67:27:04:9b:2a:b1:f4:
8f:60:80:45:30:e9:71:e5:83:e1:3b:b2:a3:fa:ea:66:ca:ca:
d5:12:5c:27:23:04:90:c8:f5:0a:39:06:64:8a:0c:07:35:d6:
e1:6b:63:14:2a:ca:c2:c3:ce:c7:e4:f1:36:95:1d:da:1a:0f:
98:40:5e:da:13:a3:0c:fd:e2:d7:99:16:47:d5:05:17:af:c8:
21:5e:1a:62:3c:56:ae:c8:b8:ce:44:e7:40:4a:82:57:b8:47:
79:ab:92:c4:10:8c:21:e9:84:8b:7b:34:dc:23:16:26:ea:c6:
fd:d8:3f:b5:b5:19:c8:79:f0:58:fe:ee:0c:ae:38:c4:7e:84:
25:48:ec:ae:de:a3:f4:b1:38:f6:3f:6a:b5:81:7e:b3:1d:c8:
1d:70:29:f9:9d:d4:e5:8e:aa:bf:fc:c9:28:4e:17:c5:67:eb:
09:6a:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:27 2025 by rpki-client