Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
File: Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft (raw, json)
Hash identifier: IHCpogNq5ICKZt9YX/JN+LYHlKSB6J382B1MCUK8gLc=
Subject key identifier: 9D:53:7D:C8:58:B1:18:04:98:40:DF:4B:11:E8:04:7A:E8:54:67:12
Authority key identifier: 67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
Certificate issuer: /CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Certificate serial: 0196108E4D8652E181C880CEB11E00FE701F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
Manifest number: 0AEF
Signing time: Mon 07 Apr 2025 14:01:23 +0000
Manifest this update: Mon 07 Apr 2025 14:01:23 +0000
Manifest next update: Tue 08 Apr 2025 14:01:23 +0000
Files and hashes: 1: IyubcYm7YNGoTHG6Zyl3Cm2IkRw.roa (hash: 4lmGSbybL+9qT7cvm7erjsIQir7v2NPime1p2riEn1k=)
2: Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl (hash: iJKbrASRuXuhz1+GbE6YwjWDr+tp/sl6Bj9vMPJrFfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:4d:86:52:e1:81:c8:80:ce:b1:1e:00:fe:70:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e1cedfe0826f0f9775bdfa8e9425300bde9f13
Validity
Not Before: Apr 7 14:01:23 2025 GMT
Not After : Apr 8 14:01:23 2025 GMT
Subject: CN=9d537dc858b118049840df4b11e8047ae8546712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:0e:b4:73:14:20:fa:d8:f7:e4:78:33:80:
8c:42:e3:21:66:af:71:38:fd:82:8e:12:4e:3d:62:
73:7c:ad:00:3a:5a:26:75:8c:1e:c0:6f:20:f3:be:
13:42:b3:4a:0b:fa:13:7e:a8:8f:53:5e:1a:b4:91:
07:2d:e0:12:63:e9:0f:77:a1:3c:51:e4:a3:5e:c3:
2f:c8:1b:ae:ca:5b:5f:3d:e0:d5:35:5e:f2:ce:01:
49:f1:a6:47:ac:56:55:02:c2:a7:5c:c9:58:e9:20:
80:2c:9d:4f:42:29:70:5b:43:92:3f:c8:d3:fe:56:
0d:38:db:f8:d5:df:a0:36:25:62:8f:91:a9:7e:c7:
01:46:97:2a:1b:db:5a:a7:1c:eb:6f:fc:aa:42:f8:
12:09:10:1c:6f:d1:3d:01:62:02:92:ba:a0:50:49:
44:59:e4:e5:c5:ae:e2:0f:f1:15:c7:89:ed:9d:28:
10:47:c5:ab:13:31:b4:c5:1b:73:ae:40:4c:83:05:
70:07:d0:b5:4b:f8:9c:93:dc:d6:4c:b4:ac:7d:c8:
6b:33:1d:f4:9d:9a:8e:ff:3c:3e:af:1a:cd:2b:96:
9f:43:37:06:ba:96:ea:72:d5:34:c0:76:44:af:ca:
c1:5a:c8:22:af:fa:fb:2e:13:3c:18:db:d1:88:d8:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:53:7D:C8:58:B1:18:04:98:40:DF:4B:11:E8:04:7A:E8:54:67:12
X509v3 Authority Key Identifier:
keyid:67:E1:CE:DF:E0:82:6F:0F:97:75:BD:FA:8E:94:25:30:0B:DE:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-HO3-CCbw-Xdb36jpQlMAvenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/19fa4a-f41d-4baf-b9ea-ec9b75521297/1/Z-HO3-CCbw-Xdb36jpQlMAvenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:de:7b:2c:19:7a:af:bc:57:35:11:35:f9:d3:28:9b:4f:30:
bf:c1:36:8a:0c:20:0f:36:de:b6:47:54:55:5b:f5:ff:f6:4f:
9f:0d:e3:d5:8d:82:58:bd:63:03:5e:e9:aa:78:9d:6c:79:a0:
1c:c1:f4:b4:e4:8d:39:f6:2e:bc:31:81:df:21:58:a6:79:29:
d6:6f:30:2c:77:0e:03:17:4b:d0:e8:b8:58:88:ee:16:53:c3:
7e:83:bf:a1:ec:84:d0:d9:72:2d:bc:3a:76:6d:ce:80:6b:a5:
34:91:ec:95:e9:07:43:1c:2a:df:ad:76:45:59:18:b6:d2:00:
96:17:3a:31:8a:f1:87:88:a3:0d:2d:f2:8c:af:be:64:e2:c1:
6e:49:e2:9d:90:45:4a:fa:70:de:16:d3:e3:ed:c3:ab:b1:39:
43:03:49:21:41:1d:eb:af:57:4e:89:f2:73:cf:42:a6:8a:fd:
a6:f3:69:8a:d8:76:f6:1c:13:4b:97:24:2b:94:ee:35:56:7a:
a7:6b:27:aa:5e:9d:82:e5:cb:b3:4c:0c:03:11:35:e0:fd:e9:
64:66:e7:5a:29:51:58:fa:5c:01:74:d0:2b:41:84:61:da:9a:
df:e5:a2:ea:42:3f:c1:05:a0:f2:24:0a:1e:ba:7c:a1:c5:5a:
a9:5d:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:00 2025 by rpki-client