Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: 8Qxy4Zu0NNOm0efByLcmNyDwzzr0PONrWTXhNBhKsPU=
Subject key identifier: 8A:69:BF:ED:98:9D:F0:C8:E5:58:96:65:2E:F6:54:2E:D4:37:5F:C3
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 0196477BDB953F178C38A3EFF6E3C307C482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 1489
Signing time: Fri 18 Apr 2025 06:00:21 +0000
Manifest this update: Fri 18 Apr 2025 06:00:21 +0000
Manifest next update: Sat 19 Apr 2025 06:00:21 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: f7azrC7e1R8IZQPKx6UzF2Etv6jZgs9/5VMWCYovuYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7b:db:95:3f:17:8c:38:a3:ef:f6:e3:c3:07:c4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Apr 18 06:00:21 2025 GMT
Not After : Apr 19 06:00:21 2025 GMT
Subject: CN=8a69bfed989df0c8e55896652ef6542ed4375fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:f7:38:55:8e:83:7b:87:c6:01:1d:33:23:
15:d0:bf:04:48:d8:b9:b3:ab:80:ad:55:8d:3d:ea:
22:51:3a:20:de:b5:d0:24:b2:97:bf:22:af:6a:55:
6d:c7:04:2c:c2:33:d4:03:c9:10:d3:df:92:d0:6e:
c5:92:ef:c6:51:69:16:ac:9c:7f:44:90:74:3b:cd:
3d:72:5f:e2:bd:93:8b:28:b8:5f:7a:dc:54:63:00:
14:b0:ca:a2:3b:c4:d8:3b:d6:d9:ed:1f:aa:7c:75:
80:b7:bd:63:25:7e:5e:a7:6d:3f:a4:08:c0:e7:51:
0f:71:f9:ee:42:46:79:ee:d9:5f:50:0a:5d:01:58:
52:ef:2a:02:b8:e9:1b:28:59:a2:c4:d3:ac:0e:c9:
bb:6a:15:a0:eb:86:d5:c8:38:62:31:53:db:7d:07:
f7:39:e9:58:09:1c:8b:56:8d:b3:a0:45:db:2e:0f:
6e:15:ad:fe:73:ad:3e:9f:77:15:8f:bd:58:da:3f:
b5:80:73:7b:14:d1:4e:91:b2:5f:5f:9c:47:8b:46:
30:cb:dd:07:5b:65:bf:9e:56:23:c3:f5:a7:3d:74:
4d:93:b3:77:38:1a:37:ec:8b:c5:42:4e:6e:45:21:
66:5f:90:f7:84:18:22:12:4b:c1:39:18:49:6f:91:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:69:BF:ED:98:9D:F0:C8:E5:58:96:65:2E:F6:54:2E:D4:37:5F:C3
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cc:89:49:8d:ac:95:df:f0:bc:93:fc:53:01:e3:88:b2:cc:
48:ab:9e:4c:41:10:cd:d6:12:30:ab:68:3e:72:44:02:73:c3:
ab:59:e8:1a:c8:62:fe:78:cd:07:ac:60:15:1e:24:52:d5:61:
d3:af:1d:77:c5:df:1d:1a:fe:88:68:6e:c5:3e:21:fb:0a:0b:
9d:9b:20:de:e1:4f:71:c0:07:3c:27:71:89:8b:fd:75:d4:8d:
a1:fc:72:e6:ec:56:af:37:52:83:5c:22:54:c0:7a:16:ef:a1:
a5:5c:63:77:4e:f2:bb:b1:bb:99:fe:00:dd:a7:e1:08:9a:05:
53:85:62:0c:8b:b3:1c:10:c9:84:72:d7:22:68:2c:c2:bf:b9:
65:1b:09:7f:aa:44:0c:a3:1b:0d:04:09:3f:dd:5a:fc:3e:54:
6c:f9:13:0c:52:98:11:be:a1:1b:39:37:07:88:9b:96:fd:d6:
cf:47:c8:f9:1b:e7:2b:69:24:32:73:b2:95:5b:a0:7f:8c:94:
e8:16:d9:fa:5e:a9:d6:e3:ad:c0:d8:7b:e9:de:5f:8f:1f:be:
db:9a:b6:dd:2e:99:e6:22:f8:96:5e:d0:08:47:9c:f5:12:56:
a3:b8:bf:d8:b3:83:a3:cd:cf:4e:07:a1:f4:82:58:19:ba:7d:
52:7a:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:43:36 2025 by rpki-client