Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: xAelDloM6jArJRBkcbtiqIBN/ofrRWCH4ieHQBiK4GA=
Subject key identifier: 99:92:36:3A:48:A2:8B:EA:63:AF:C1:1E:0A:3C:7A:BD:19:88:D6:B3
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 0196120EDC29C0441DD8DFC1176732112042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 14DE
Signing time: Mon 07 Apr 2025 21:01:25 +0000
Manifest this update: Mon 07 Apr 2025 21:01:25 +0000
Manifest next update: Tue 08 Apr 2025 21:01:25 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: CLxHzuB5J/ZRh9EpMnXwfxZB9AV2hN6ccCFcPcV7bCs=)
2: mVTx8X7zW9-jF_MuhkLfqeZLvKg.roa (hash: tYbEebrUyUiI4ejPIzbtFxeT7l12ooRdzaX7lTItoII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:dc:29:c0:44:1d:d8:df:c1:17:67:32:11:20:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Apr 7 21:01:25 2025 GMT
Not After : Apr 8 21:01:25 2025 GMT
Subject: CN=9992363a48a28bea63afc11e0a3c7abd1988d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:9d:fa:42:e8:e5:8f:29:83:e8:22:b5:cc:
06:9d:e3:89:d5:21:35:d0:35:89:9b:bc:2c:07:59:
91:1b:4b:1d:ec:dc:6e:11:3a:28:a2:12:2b:27:82:
e9:98:3c:2f:3f:66:cb:26:f7:05:4f:bc:f6:81:15:
7e:2f:83:20:07:ae:92:f3:e9:0f:53:7d:af:d0:64:
79:65:91:04:a4:b7:ac:7e:13:97:2d:6a:4b:89:26:
bd:fc:9d:34:5a:0e:99:f5:0b:ab:65:0e:59:70:ad:
09:24:30:e3:ca:8e:ce:49:37:d8:a9:64:51:cb:16:
69:d1:dc:cf:9a:3a:73:5f:cd:94:41:4d:60:db:9b:
e5:71:0e:c3:05:38:bf:62:7a:59:fd:6b:36:0e:17:
b5:ea:b8:84:b1:1d:6d:07:2c:ba:39:ff:f2:a3:63:
38:8c:f8:61:71:ad:0d:18:fd:91:0a:db:9a:a9:16:
7c:1b:04:fe:54:85:96:b2:9b:a4:41:7c:72:92:b2:
b1:d0:6f:80:da:65:a5:99:70:76:d5:b2:12:c4:94:
08:85:58:fb:24:af:2d:41:2d:38:56:36:03:3b:ad:
98:d9:25:fe:2d:86:4e:03:f1:f7:d5:28:38:e5:3e:
ca:ea:cb:71:ba:a1:4f:a0:60:80:09:b5:d0:8f:98:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:36:3A:48:A2:8B:EA:63:AF:C1:1E:0A:3C:7A:BD:19:88:D6:B3
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c0:41:78:b5:b2:a4:a0:83:63:26:a0:1a:70:02:18:c0:e7:
52:77:3d:d0:50:51:6b:39:68:9c:5c:08:db:20:c0:a4:3e:86:
3b:db:8c:7c:9e:0d:7e:12:04:32:86:a5:2d:53:71:3f:26:aa:
c3:d2:77:74:ad:70:85:75:aa:4d:66:4b:21:ed:ed:15:3c:fe:
b6:6c:fc:7e:cf:ec:e6:4f:29:88:c5:b8:c3:93:cd:10:75:f6:
81:23:bc:f0:1e:f4:f0:41:f9:eb:8f:01:b6:ab:fc:d9:84:85:
c4:8a:c5:c6:31:41:ad:96:cf:4c:79:78:84:44:8a:4c:9b:b1:
c7:20:90:06:90:3e:df:08:42:7e:ec:90:4a:a8:18:41:57:da:
e1:33:4a:54:c0:29:d2:e6:49:96:94:23:39:d6:a0:f5:f1:47:
58:13:18:80:4a:47:74:d0:48:20:fe:7b:e5:09:80:f2:26:3b:
38:b5:6f:0d:1b:e1:62:14:e0:c2:bc:aa:d8:19:e3:be:bd:30:
4c:ee:33:83:93:3e:b3:74:8f:44:8d:88:43:f2:49:c2:56:1e:
4e:8c:29:a6:3d:70:81:3a:6f:91:75:82:0a:e1:d5:8e:28:ea:
a1:ae:12:da:7b:c1:b0:5e:00:b2:1b:d8:ad:da:32:84:d5:99:
f0:12:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:32 2025 by rpki-client