Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft (raw, json)
Hash identifier: lrHAXof+e3ArHOFMyfdpGefUClkLWZVwBvmnjOgOlTk=
Subject key identifier: 98:2B:04:25:64:E2:2C:49:49:93:52:B5:93:64:79:6B:F7:B7:6A:A6
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 019655DD37A93430091FD3DB1B59599A4716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
Manifest number: 1505
Signing time: Mon 21 Apr 2025 01:01:23 +0000
Manifest this update: Mon 21 Apr 2025 01:01:23 +0000
Manifest next update: Tue 22 Apr 2025 01:01:23 +0000
Files and hashes: 1: 77Lxszm6b67-RSjepR0C23JG5dI.roa (hash: 9Xm4YAYAAgADPugT2wEGkyXGaEUt/FjBjGPJ5p3nqlw=)
2: ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl (hash: Ru2yCBkVqamFeupIZhsdOra8KTjfuebPT+iXahwVA2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:37:a9:34:30:09:1f:d3:db:1b:59:59:9a:47:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Apr 21 01:01:23 2025 GMT
Not After : Apr 22 01:01:23 2025 GMT
Subject: CN=982b042564e22c49499352b59364796bf7b76aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:9c:fe:33:19:c7:7e:6f:70:38:ca:db:4c:
05:71:71:74:07:e5:58:ce:43:0b:e0:cf:84:db:ab:
44:2e:35:23:f4:87:54:dd:18:10:c0:b8:aa:a6:46:
4f:16:6d:f6:ac:3b:ef:57:c3:ed:0c:c0:36:ee:c4:
b6:79:60:e3:1b:8d:3f:e0:da:a1:f7:2f:df:22:67:
f8:f4:c1:15:ab:c0:19:10:57:72:a0:35:20:d6:2c:
7e:08:0e:72:24:82:da:b8:7e:e5:44:84:3a:62:2c:
99:4b:dc:6b:d4:5d:f5:03:89:59:60:e0:27:5f:a0:
0f:65:22:53:28:73:06:d7:cc:c8:84:db:7a:95:56:
95:22:62:2c:7a:a4:ef:1b:0e:10:f6:0f:e7:93:d4:
77:44:e0:5f:96:d5:25:af:ac:86:38:6f:46:f6:40:
f1:45:e1:1e:b3:f9:4d:f0:62:43:98:c5:0c:d2:a2:
05:e7:d6:23:ea:1d:c5:f9:0a:05:6d:78:21:8a:3e:
61:0a:38:31:cc:fc:f8:60:9e:f2:65:e4:59:07:8b:
1c:8a:d6:ed:c7:83:38:ab:32:64:2e:56:f6:ef:67:
87:ea:38:23:da:f9:7f:3d:53:7e:b3:d5:21:6e:f9:
8d:fa:5b:cc:25:2b:ae:bd:59:1e:1c:61:dc:8d:3a:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2B:04:25:64:E2:2C:49:49:93:52:B5:93:64:79:6B:F7:B7:6A:A6
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5e:d2:36:a5:b7:51:3d:31:f8:2f:a8:98:70:7d:af:63:8b:
b6:42:12:72:1d:80:eb:7b:bb:17:19:6e:0a:d7:99:1a:70:37:
40:b2:a3:c4:ec:6f:17:5a:40:de:20:cd:e9:fb:d5:44:64:1a:
b3:95:39:71:52:cb:21:b9:26:25:f1:a5:5b:8b:50:c3:fc:7f:
4f:62:c7:6b:61:8d:4a:2b:ba:84:13:46:1d:c3:d2:80:43:78:
2e:38:d4:ee:9e:5f:49:bb:a2:25:7f:fc:4c:b9:de:2d:ab:23:
f1:aa:71:3d:0e:b6:d5:ce:84:c3:ba:de:fc:a6:78:03:34:c7:
cb:87:bd:b1:12:1f:e2:1f:e8:06:a0:e8:16:bd:09:9b:f9:35:
6f:55:eb:dd:be:61:62:da:90:b2:9b:04:f7:06:9b:43:55:57:
5c:f3:3c:64:c3:ce:cf:4f:65:4d:ce:28:45:dc:9f:c0:fa:6b:
70:6b:7d:5a:bd:44:61:84:35:d8:8f:53:78:d0:07:84:dd:50:
2b:79:b7:4e:b1:10:58:1f:84:2e:7d:e9:2f:b1:bb:09:db:b4:
30:e9:b0:c6:29:8d:e3:c7:7a:db:09:3d:39:80:e8:fe:30:fd:
38:6e:6a:a1:b5:5d:09:b0:0b:5a:4e:9d:d6:6d:61:60:9b:7e:
c1:1c:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:43 2025 by rpki-client