Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: yEhC/C7rLfkZpsGPzKl7hV4ty3j3i9MJXVcFNoiTpEw=
Subject key identifier: D1:99:0C:21:43:6C:C0:B0:F0:D7:FD:F2:8D:1A:2B:41:8E:83:E8:80
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 019638AD9D88619628F31F5161E37423F9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 11AF
Signing time: Tue 15 Apr 2025 09:00:24 +0000
Manifest this update: Tue 15 Apr 2025 09:00:24 +0000
Manifest next update: Wed 16 Apr 2025 09:00:24 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: A35SboJ6BYaZiIEWm8UBJOBxqwDKak0fphc7S4LeOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:ad:9d:88:61:96:28:f3:1f:51:61:e3:74:23:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Apr 15 09:00:24 2025 GMT
Not After : Apr 16 09:00:24 2025 GMT
Subject: CN=d1990c21436cc0b0f0d7fdf28d1a2b418e83e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:de:ce:cc:cd:bd:6d:f1:3a:fc:32:cf:22:
bb:19:37:08:12:0f:16:4e:c2:ef:91:aa:17:fa:ab:
dd:45:4a:4c:96:97:9e:f5:5b:8e:19:a5:5c:25:d0:
61:2a:ea:61:eb:17:d3:f2:7a:eb:69:6c:93:55:bd:
7f:3f:49:ac:1b:24:a8:c0:67:2f:9e:8b:32:98:a1:
a3:c3:eb:00:48:1e:4d:43:44:5b:f5:13:7f:91:16:
ed:46:b7:4e:99:66:09:c4:da:fe:de:d0:54:b5:64:
20:ea:88:60:fd:7c:82:34:c5:65:1a:9c:1b:0b:13:
44:53:c3:3c:a7:48:1e:a3:10:86:98:ba:5b:b0:88:
d2:ba:e8:d6:f9:c6:5f:9b:cd:c4:d9:5c:19:65:74:
10:6c:51:5c:2a:86:e9:aa:96:16:5d:a1:56:55:ce:
21:3a:1d:4c:a6:07:23:ae:4f:fb:8d:c8:74:a8:22:
fc:8b:c8:26:e6:1d:83:d6:a3:c0:93:4a:0d:75:20:
1e:8e:db:fc:73:70:70:a4:12:14:50:70:df:e7:05:
b2:0f:7b:95:2a:c9:af:6c:e0:c2:94:9f:c4:ad:c4:
ff:7d:bf:08:60:24:30:e3:fe:bd:8b:51:5a:65:c3:
85:bb:bd:4c:79:f2:68:c3:3c:1f:1b:e9:20:c0:d3:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:0C:21:43:6C:C0:B0:F0:D7:FD:F2:8D:1A:2B:41:8E:83:E8:80
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1d:99:64:4d:10:fb:60:4d:04:e8:09:44:df:ff:f9:2e:8c:
6e:a8:6c:d7:86:0d:74:66:be:45:74:3a:e5:3f:46:b7:20:93:
a3:24:8e:87:1e:fc:3a:fc:81:ee:fb:f9:48:0b:a3:f0:ab:b1:
77:7b:2b:60:88:cc:29:ea:cd:97:21:4d:7f:81:92:62:99:56:
76:ce:f1:f5:46:cc:fb:60:71:3a:6a:01:ee:c1:4d:d6:14:4d:
76:65:47:0d:fb:5e:a2:55:db:1e:d2:8e:33:95:3a:90:8f:81:
95:ea:23:bf:a7:d9:f2:df:e1:90:50:72:21:85:ed:1e:db:ad:
c9:30:ca:74:ad:62:b8:51:11:5d:6f:bc:23:86:ad:14:f8:0a:
15:cc:fe:e2:e1:1a:59:f6:bd:83:b4:32:30:65:f5:65:68:7e:
19:95:04:83:e1:0a:90:e5:3e:ff:86:3f:5f:e0:ef:96:f2:3e:
9b:22:40:af:2a:45:42:78:07:bd:9b:0e:1f:fd:06:18:15:2e:
67:6f:36:9e:d1:b0:d5:5b:6b:ad:aa:2f:1a:ae:ee:4f:ba:25:
07:38:80:11:fa:a2:24:ff:bb:71:4f:5b:58:13:f0:38:59:63:
e8:14:29:54:75:5d:8d:72:e6:a9:42:02:c3:7b:94:2c:49:c4:
44:b3:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:17:57 2025 by rpki-client