Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: 47HpJFx5Rji4hcHhtsTd/nptfg3XlkFr9RIJL/6P86M=
Subject key identifier: 7D:A9:FE:0C:98:CD:76:81:FB:51:B4:E3:3C:1A:A0:E3:42:67:E1:59
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 019643D65AF86A57E134EC8D36592A2E2136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 0634
Signing time: Thu 17 Apr 2025 13:00:43 +0000
Manifest this update: Thu 17 Apr 2025 13:00:43 +0000
Manifest next update: Fri 18 Apr 2025 13:00:43 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: djvvWVFHzMtNkxGbtwpUGGdNCA9lGMIRA252ZZbaUCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:5a:f8:6a:57:e1:34:ec:8d:36:59:2a:2e:21:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Apr 17 13:00:43 2025 GMT
Not After : Apr 18 13:00:43 2025 GMT
Subject: CN=7da9fe0c98cd7681fb51b4e33c1aa0e34267e159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:ce:6b:8a:90:ce:5f:59:64:e0:04:19:4e:
ed:fe:bf:5c:bf:67:02:e1:04:e3:48:b0:ba:70:d7:
6d:78:74:52:f3:6c:ce:b3:77:b3:6e:5c:b9:b4:3b:
b1:3d:68:3d:90:18:6d:54:1e:ee:bc:ca:34:e4:41:
d9:04:5e:4b:de:28:1e:64:13:e3:6e:81:ab:85:27:
13:17:34:32:a7:e5:ba:fd:ed:75:68:ae:db:da:b4:
a7:bd:47:45:74:01:57:39:87:9e:79:f0:12:5c:9c:
13:8b:f9:42:2c:23:82:37:e1:f4:75:86:90:fe:b5:
95:d5:6e:e7:d7:87:bd:e8:8c:a7:99:5e:92:fe:a8:
10:88:63:a8:d1:40:73:d0:a5:16:8e:8c:be:c3:12:
99:c4:62:01:4d:4b:a6:c6:22:db:db:da:52:03:56:
0a:94:f2:5b:66:cd:8a:ec:bd:2a:48:f6:8d:df:14:
00:6c:54:97:4c:c0:02:7b:a2:9a:4c:53:0d:36:25:
ed:ed:be:06:6f:33:c8:e6:03:16:d3:f7:0c:8a:b4:
56:de:64:05:69:6b:a8:57:14:29:fa:98:74:b3:10:
09:d0:a2:8f:27:22:63:fb:b8:94:c6:fd:01:5c:0c:
37:6e:a7:2d:c7:ba:0c:36:42:5b:4a:2b:8d:cb:4a:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:FE:0C:98:CD:76:81:FB:51:B4:E3:3C:1A:A0:E3:42:67:E1:59
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c1:1a:84:3a:ce:3a:8e:ad:5c:5e:85:96:4e:2c:7f:97:35:
a3:5a:1c:65:07:06:49:fa:7f:a5:66:89:26:41:9d:4a:f5:cb:
16:40:3f:d6:64:ec:dd:46:51:c5:ee:2d:58:4d:ba:63:c2:94:
5f:81:61:95:21:f8:40:c9:46:f3:f7:82:dd:d7:2a:46:5e:43:
d9:30:36:a9:6a:cf:7f:3e:38:94:11:77:10:a7:6c:14:d7:ed:
5a:b4:df:2a:0b:98:a7:18:70:40:1e:10:4f:0b:62:15:80:74:
1d:c3:b0:38:ae:64:fd:66:53:23:f5:13:f2:99:6f:28:de:dc:
79:17:fa:71:b6:0f:8e:c3:93:5d:fb:22:ba:ca:c2:bf:13:fa:
20:57:53:d6:80:65:54:c8:a3:67:25:ab:56:90:33:db:27:b6:
12:46:a6:12:85:a8:c1:37:91:22:12:e5:e9:70:3f:f4:76:cd:
31:5c:b2:68:8e:7a:2c:38:56:d6:4e:6b:30:57:2f:37:e9:a6:
02:f8:e1:e0:56:3d:b2:a2:ea:b1:8c:ca:26:67:a5:33:dc:1f:
ff:e3:37:17:c7:79:06:6a:46:0e:6b:e1:9b:f2:73:3e:ee:6c:
e9:65:0a:ec:d2:5e:18:8e:6e:b7:cd:a8:44:78:b9:6b:40:d8:
86:ff:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:17:13 2025 by rpki-client