Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: ai2QD9gehM9DfmuXpYSdtAa+Q/3eWCIs3BetbbCsF1g=
Subject key identifier: 2D:84:AC:E3:E1:CD:57:8D:64:FF:DC:88:D1:A8:69:FA:4D:C6:63:51
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 0196572665AC38681DEC6B997FDA228DBFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 11FF
Signing time: Mon 21 Apr 2025 07:00:55 +0000
Manifest this update: Mon 21 Apr 2025 07:00:55 +0000
Manifest next update: Tue 22 Apr 2025 07:00:55 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: 3N5KLAwAIdZ8tUP61KQHfKjSCXkZ9R23QbG4Uq+XChY=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:65:ac:38:68:1d:ec:6b:99:7f:da:22:8d:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Apr 21 07:00:55 2025 GMT
Not After : Apr 22 07:00:55 2025 GMT
Subject: CN=2d84ace3e1cd578d64ffdc88d1a869fa4dc66351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:9a:02:73:8a:90:05:50:3c:73:49:66:ac:
8e:d2:33:a1:b5:39:cd:01:da:93:2e:fe:bb:af:82:
41:bf:bf:32:88:92:26:2d:cc:cc:53:c5:eb:6e:4f:
ef:4b:f5:e4:25:d4:0e:12:3a:d0:06:ff:6d:53:66:
97:38:ce:3d:af:53:01:66:c6:54:6e:e8:53:3a:fc:
23:ed:42:21:49:a1:39:72:35:3a:c3:06:6b:1f:5f:
cc:05:03:b8:55:06:36:2a:ef:e5:b6:d3:09:d5:85:
ea:17:b4:8b:7a:29:b8:8a:c8:d3:91:7d:74:81:89:
7d:01:2e:5a:f2:f8:39:c5:44:8f:78:75:45:8d:bd:
9c:42:1c:bd:9e:e2:e2:c0:17:c5:73:f6:93:27:b7:
73:27:34:e7:eb:0d:68:d3:0b:ef:5f:87:27:f4:de:
bb:cb:76:12:3e:5b:75:52:39:d0:8d:dc:d2:68:26:
0c:ef:ef:2c:9f:f0:cf:a9:2a:dd:ca:84:b7:0a:be:
be:2c:17:a3:85:03:bf:8b:de:fe:34:84:af:ac:e4:
a9:ab:e3:9b:d4:35:f3:0d:74:41:57:47:ad:83:19:
08:bf:96:ba:4a:92:97:9f:6f:0f:bf:50:b0:5a:5c:
56:ac:3b:27:e7:2a:86:05:74:42:69:a4:95:af:4e:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:AC:E3:E1:CD:57:8D:64:FF:DC:88:D1:A8:69:FA:4D:C6:63:51
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:62:91:d7:89:77:df:35:1a:3d:93:1e:3c:24:91:66:e2:be:
ec:fa:12:55:08:f2:63:d7:82:ed:2d:34:75:ef:28:01:a1:b2:
90:db:b5:5e:42:0c:e4:e5:d7:76:db:d1:13:f5:5a:ce:7a:67:
9f:96:ea:0b:c3:5e:bd:04:af:8f:57:88:2e:ea:07:92:c7:14:
28:6b:4a:29:b4:4f:be:cf:b4:fc:1e:89:7c:aa:a2:b2:7b:2e:
f8:36:44:60:96:9e:83:1b:2b:e0:72:5e:84:e4:2e:03:95:b4:
32:6c:fc:08:7b:c0:68:12:70:0a:7f:42:05:a7:d3:b3:69:9b:
7f:35:f4:c9:9b:2a:b9:83:15:e5:f0:57:25:bb:99:7a:b8:30:
03:76:90:2e:61:93:ea:0e:e7:d4:61:f9:de:b1:e2:94:24:92:
54:89:c7:37:9f:2e:25:61:7e:2a:21:21:35:a6:b8:27:36:9a:
fe:34:2c:15:1c:f4:e4:c0:bd:56:fb:1d:27:68:ec:cd:38:00:
ea:f1:48:e5:f2:f8:fb:50:ad:a0:cb:75:62:1d:4b:f4:05:1e:
ea:52:00:71:cc:d1:79:96:ad:cd:f8:2a:93:95:ea:eb:6a:70:
60:da:75:d9:dc:46:67:14:a0:40:ed:fd:30:2f:f2:d9:20:4d:
55:3c:7c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:49 2025 by rpki-client