Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: EXzoTXTAybAZJxOS3HEvkPguhTV3Zd/lZvv4lAjFvrM=
Subject key identifier: EC:67:CD:BA:70:F0:E9:89:41:D3:CF:73:86:4A:73:A2:F5:1E:70:0C
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019644E8D2B97C28039F1E3A5850122802E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 09AC
Signing time: Thu 17 Apr 2025 18:00:31 +0000
Manifest this update: Thu 17 Apr 2025 18:00:31 +0000
Manifest next update: Fri 18 Apr 2025 18:00:31 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: yjSQXAlvut/c77BOWyXAEa+VngmymYJKUBATZabej+8=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:d2:b9:7c:28:03:9f:1e:3a:58:50:12:28:02:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Apr 17 18:00:31 2025 GMT
Not After : Apr 18 18:00:31 2025 GMT
Subject: CN=ec67cdba70f0e98941d3cf73864a73a2f51e700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:da:c4:2e:81:60:c9:44:a3:78:fe:dc:78:
88:d4:cf:0f:30:6e:88:1b:20:33:36:1e:d7:22:1c:
02:b0:8e:e6:da:fe:8d:f7:77:32:95:20:24:d6:98:
5d:5b:33:e4:cf:f3:92:19:a2:57:a8:34:28:0f:98:
3c:37:60:f5:b0:29:43:02:98:2a:e0:10:3e:e1:5f:
06:27:99:24:48:50:24:4d:2a:f6:9d:07:9a:14:b5:
4e:0b:56:9d:8c:a9:b8:a8:a5:1e:75:f4:a0:e3:b1:
a8:71:db:a3:65:6e:90:12:8e:5b:33:2e:31:01:3f:
ed:a5:e7:17:6b:0e:da:ba:b2:38:9b:43:cf:18:f8:
f6:b5:4d:51:57:eb:c6:5e:fa:1e:70:1b:09:8e:30:
8a:22:d9:49:68:08:78:24:17:c7:82:12:2d:de:d6:
53:78:f0:84:95:05:80:ee:5a:c6:fd:b5:41:58:c3:
7d:d5:f7:68:2d:28:c6:75:09:d1:7b:43:9f:01:03:
a6:a7:ca:3d:ad:f7:bb:c7:be:3d:1c:cb:8c:bb:3a:
83:d1:94:5b:6d:47:cf:94:21:23:2c:1c:7e:89:bd:
f3:89:f3:15:52:f7:dd:9f:fa:7c:45:83:43:3f:f9:
72:91:9a:26:23:bd:b7:2e:ef:8f:1d:4b:ee:0c:6c:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:67:CD:BA:70:F0:E9:89:41:D3:CF:73:86:4A:73:A2:F5:1E:70:0C
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7f:27:d8:dd:59:3d:d4:7e:f6:99:ec:db:98:98:4b:fa:0f:
58:d9:8e:61:bd:ba:86:1c:c0:d3:69:06:e5:7f:16:01:31:c9:
14:c9:5d:2e:f2:02:bb:0e:07:93:15:08:4e:29:74:ca:eb:65:
b8:7a:b1:e5:d7:5a:7f:54:69:9a:e2:2c:8e:75:63:90:aa:f4:
9e:eb:13:79:f9:41:54:69:33:af:05:ed:d9:b8:19:26:95:25:
46:e7:2e:be:52:ef:96:16:f4:0d:ba:cb:58:c3:cd:9f:2f:15:
20:cd:96:93:ec:de:45:d3:f2:00:27:7d:5d:23:d8:5e:2b:8a:
00:76:77:70:04:88:c8:43:a2:47:11:68:ff:3a:44:40:c9:e0:
e7:2f:dc:c8:d5:5e:66:39:ef:f6:33:e1:56:b0:d5:29:6b:75:
b6:b9:a3:2e:4f:0d:21:ad:6e:73:93:60:ba:3e:ee:bb:1b:bb:
fa:11:71:da:b3:1f:ac:7c:ea:58:75:3d:2e:71:46:fb:07:1e:
f9:e7:c8:e5:1e:0c:e3:88:c1:ea:6e:f6:8f:65:4a:ed:12:2c:
77:9b:f5:0c:bd:ed:dc:c7:9c:ba:6c:0b:8d:79:f5:5f:1d:5e:
d1:1b:7b:27:02:2a:71:a4:f6:0b:b8:0a:d4:d7:7f:2c:15:62:
e1:4c:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:27 2025 by rpki-client