Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
File: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft (raw, json)
Hash identifier: EwXV0JFxkHoEwkTvyXG391c2LIS5MhsBQAi/idKk/Ug=
Subject key identifier: EB:9B:5B:E6:BF:02:C8:91:54:B5:4D:F8:1C:3A:67:A0:B4:C9:40:14
Authority key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
Certificate issuer: /CN=6790960ac4ba271502f1738a59490856f1975b1f
Certificate serial: 01965537ACCE0B90C8DC12CCBE27D7FDD3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
Manifest number: 0830
Signing time: Sun 20 Apr 2025 22:00:33 +0000
Manifest this update: Sun 20 Apr 2025 22:00:33 +0000
Manifest next update: Mon 21 Apr 2025 22:00:33 +0000
Files and hashes: 1: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl (hash: ezv9MqdqsrrZTeEmWK3N2iXZxTS/W8Psn3svsH4mHvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:ac:ce:0b:90:c8:dc:12:cc:be:27:d7:fd:d3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6790960ac4ba271502f1738a59490856f1975b1f
Validity
Not Before: Apr 20 22:00:33 2025 GMT
Not After : Apr 21 22:00:33 2025 GMT
Subject: CN=eb9b5be6bf02c89154b54df81c3a67a0b4c94014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:c3:6c:83:24:e2:ae:ed:ad:87:2a:36:b1:
f7:49:bf:dc:52:35:f3:13:1a:a8:82:42:8a:c1:c6:
81:8b:14:6d:4b:c3:5b:42:56:b6:4a:55:4c:df:51:
cf:e2:ec:f0:c2:81:a6:47:e9:75:74:70:2f:ce:43:
b2:5c:e5:b8:06:b3:3b:13:71:fe:a6:e9:9d:fb:d5:
24:98:c1:8d:5a:88:9b:a9:b0:3d:a4:04:db:a0:6b:
97:5c:fb:00:7e:69:ca:b0:2c:9c:ee:1b:d2:62:e4:
b8:7f:bd:e8:ed:4e:b0:bc:ff:62:5f:22:13:38:68:
b6:ce:b9:20:f6:9c:fb:75:fe:6b:de:ea:8e:bf:c6:
2a:b7:6d:64:65:76:28:7a:3c:e3:35:22:3a:66:be:
24:b4:e8:2c:fc:f5:c7:e7:5f:46:85:d5:7e:2e:4d:
ba:ea:13:f5:07:ea:53:e0:49:7f:40:70:00:8c:b2:
ac:6d:dd:7c:d9:2b:98:4c:82:15:bb:2c:85:ba:14:
45:ed:fd:a1:d4:26:19:34:1a:f4:75:bf:ed:de:1c:
57:a2:32:d3:e4:3d:01:3c:43:df:1e:d6:5a:84:6b:
96:c3:3d:05:ff:6d:bc:0d:eb:75:19:59:44:15:f1:
f4:fb:c8:87:91:dd:51:b7:d9:d8:32:2a:f7:dd:a3:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:5B:E6:BF:02:C8:91:54:B5:4D:F8:1C:3A:67:A0:B4:C9:40:14
X509v3 Authority Key Identifier:
keyid:67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:0c:b3:39:48:ab:e0:23:12:14:f3:3f:56:1f:1e:be:9f:
af:87:d8:11:c9:4f:2b:0e:7c:5d:5a:96:c0:a0:55:c4:2d:6d:
4a:af:a6:98:d1:b6:09:97:79:eb:fd:16:d9:7c:35:a5:45:21:
a3:23:19:1c:e3:cb:a0:b0:a5:30:82:da:9e:fb:20:6e:3f:65:
d2:13:fb:c9:a3:36:16:be:3f:fa:6a:4b:6f:f3:84:de:cd:40:
44:40:b4:e8:7d:e6:f9:67:74:18:b5:ae:bc:38:9e:c5:73:55:
20:c3:93:aa:de:41:c8:a6:7e:5f:39:85:b2:b7:8e:f4:28:59:
8c:03:73:ad:f3:4f:35:f4:90:bd:55:a3:1c:00:0a:fb:37:df:
3a:5e:de:17:8d:66:08:bc:20:55:9b:ef:ae:af:cc:1e:57:02:
97:4c:46:e0:a7:34:55:fd:c4:cb:ef:0c:45:b4:45:f1:49:69:
1a:50:b1:ac:bd:ff:06:67:81:51:58:46:c6:4c:97:be:8d:8c:
f0:6b:eb:7c:2f:0a:3c:63:a5:78:80:8a:00:ac:3b:c2:a1:7e:
a7:17:24:0e:b7:f9:4a:84:7b:35:98:05:9c:5b:24:98:10:fd:
72:73:cf:9c:0b:5b:32:72:70:e9:28:3e:88:db:4a:cd:a9:5b:
5f:4e:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:38:29 2025 by rpki-client