Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: fpArF9+nM4Dy9TQE/Tdh2/zhuDE5xDf/lPDSWjgJo2o=
Subject key identifier: 22:80:25:02:7F:EE:44:7E:80:56:8F:63:62:86:E9:65:1B:2F:74:8E
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 01965C1564B93FE4702B420027ABA606A287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0B5B
Signing time: Tue 22 Apr 2025 06:00:27 +0000
Manifest this update: Tue 22 Apr 2025 06:00:27 +0000
Manifest next update: Wed 23 Apr 2025 06:00:27 +0000
Files and hashes: 1: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: njYlNyHsEnh0cw/FDejpdux7HkNhQNzgX3XKMQxAyoQ=)
2: kHEeKE6TgxrOJerD-_ZXw-D5vjg.roa (hash: RWbQV5MQo5FT3Cm1pl/JMVADI60RB0vYV0kYhmIAzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:64:b9:3f:e4:70:2b:42:00:27:ab:a6:06:a2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Apr 22 06:00:27 2025 GMT
Not After : Apr 23 06:00:27 2025 GMT
Subject: CN=228025027fee447e80568f636286e9651b2f748e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:f5:4a:79:d2:03:f6:f3:3c:88:64:78:1d:
d9:a4:87:5c:94:e0:50:68:ef:8d:d1:f3:29:1a:b9:
cc:fd:55:30:f4:fa:79:88:a8:dc:ad:26:fc:fd:ea:
f7:dc:2f:45:38:01:05:80:5f:07:80:70:7e:ff:7e:
a1:b3:83:67:93:49:ca:0f:22:59:7b:38:55:5b:c0:
7d:35:fb:ef:e7:f3:03:42:54:fe:b8:c0:b7:69:9b:
74:c2:47:c6:d8:26:f3:bb:6e:c3:8f:fe:72:89:57:
7b:4c:83:ee:25:a6:b8:dc:91:f8:b3:ea:d2:c2:ad:
ab:02:1d:65:9d:4a:84:a5:c4:4c:ba:a8:0e:23:ff:
88:4d:3c:20:6f:9d:2f:19:a9:69:e4:cb:c7:c2:67:
a3:26:ce:fc:35:27:25:0c:74:55:b6:a2:a9:59:01:
bf:3f:cf:6c:a3:51:e9:1e:b3:ad:e9:d8:75:a2:32:
2e:7d:99:f2:fc:a3:4a:c3:96:b5:79:8f:95:5f:f6:
34:49:e0:69:2c:bb:b3:46:9b:00:98:8b:a0:e5:ef:
3c:17:cc:86:83:57:ed:05:cd:27:04:fa:df:be:9e:
24:91:b0:27:a2:f0:87:08:8d:df:ff:c0:69:ad:bb:
14:2e:98:f8:4a:c0:05:d1:04:09:c1:94:68:36:84:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:25:02:7F:EE:44:7E:80:56:8F:63:62:86:E9:65:1B:2F:74:8E
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4f:0d:69:8e:3e:05:20:94:b3:4c:a5:cf:84:bf:e6:3d:ab:
87:1e:d0:46:ad:18:09:8d:cc:7d:d1:df:52:de:e2:c6:2f:72:
96:76:42:20:3c:6e:9f:14:50:a0:9f:14:ec:80:d8:60:dd:0c:
5a:b4:66:0d:38:6d:a0:ff:5e:87:0f:25:a6:20:d7:07:ee:f6:
de:b4:e9:3d:0e:45:7e:0d:4f:88:50:9d:17:b8:a7:4e:8f:55:
ea:8d:ba:1f:04:25:1c:25:0c:6f:a2:bf:b1:ee:c2:89:84:c9:
72:79:ff:83:76:61:5e:e9:06:9f:5f:88:a2:7a:8d:2e:b4:b2:
5d:dd:47:44:6a:0f:d7:42:99:df:2d:83:45:89:92:2c:48:b3:
71:df:f3:20:c5:c5:1a:19:f5:58:48:33:91:7a:b6:d6:c0:20:
c3:cd:9e:0d:f4:c9:92:4a:27:db:53:08:f9:44:d3:d7:8f:3c:
a4:48:0e:05:1a:1f:a1:ee:f6:68:fc:aa:71:45:38:74:fd:e2:
c1:af:69:c0:76:90:7c:5f:53:e1:50:89:a3:42:18:61:6d:66:
72:67:b9:80:9a:9f:8d:9f:12:54:43:bc:f4:9b:b7:9b:04:ea:
37:7c:12:d4:da:8a:c2:24:1a:70:55:5d:db:49:15:ba:71:cc:
5a:71:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:48:12 2025 by rpki-client