Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json)
Hash identifier: 0Zj0bgg7Lpo/jg4RsxXv3vD2/PWYaLuy/1r+Nyzng3o=
Subject key identifier: D4:FE:D6:44:4D:70:24:C6:C9:9C:A7:B9:2C:B1:04:DB:D2:27:C7:9D
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial: 019656138C60F69DAF96E4A2157FFF304435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
Manifest number: 0FC1
Signing time: Mon 21 Apr 2025 02:00:43 +0000
Manifest this update: Mon 21 Apr 2025 02:00:43 +0000
Manifest next update: Tue 22 Apr 2025 02:00:43 +0000
Files and hashes: 1: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: gGCRPSGjlt30LKsIZqN8qU26+3Du3VFRp1PNrWPwvv0=)
2: qjMEBhnPSGniZnI84qDRLbjstP0.roa (hash: zxHWsvNMH3bRN0wwXS6+6h5nHO/vNMw7yKNF0sDPkqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:8c:60:f6:9d:af:96:e4:a2:15:7f:ff:30:44:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Validity
Not Before: Apr 21 02:00:43 2025 GMT
Not After : Apr 22 02:00:43 2025 GMT
Subject: CN=d4fed6444d7024c6c99ca7b92cb104dbd227c79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:58:4e:82:6b:73:b7:16:f3:57:59:bf:b8:
ad:ba:f8:f8:09:63:2b:f9:1e:a8:72:3e:8b:23:71:
67:ef:b2:d9:30:07:c6:8a:68:d3:e7:d7:86:1f:65:
2b:3b:d0:27:6a:1f:a2:85:4d:74:9c:e3:b2:26:0d:
83:76:69:67:44:c3:78:b8:ae:ea:a9:1f:44:a5:0e:
e2:2a:73:93:d9:88:b9:d7:79:50:dd:0e:e9:7d:4c:
80:be:f4:7a:0a:55:9a:af:7f:6b:44:6d:e0:0c:9a:
c8:f0:5f:fc:cd:85:ff:c0:4b:ca:65:18:c4:9f:69:
17:7f:d6:f2:4c:ee:95:71:c6:6c:36:1f:1d:e8:e6:
2b:5c:1b:9a:7d:f6:f3:cb:07:66:29:8f:75:56:f6:
f1:12:61:64:0b:f6:22:20:db:84:95:65:49:90:99:
87:7f:1c:16:71:6a:ef:72:6d:f1:ae:66:2d:44:9e:
8e:50:63:e1:bb:36:39:fb:50:78:67:2d:f9:8d:21:
8c:9e:46:8b:1d:79:e5:76:e8:74:a9:b0:db:b3:58:
81:66:17:83:fc:5c:35:37:ec:16:bf:a8:84:85:d5:
be:11:ee:5a:e8:81:8c:90:aa:a1:d9:17:cf:a7:e4:
ee:e3:de:f6:62:1a:ed:35:f7:96:5a:05:c4:1c:0b:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FE:D6:44:4D:70:24:C6:C9:9C:A7:B9:2C:B1:04:DB:D2:27:C7:9D
X509v3 Authority Key Identifier:
keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:cc:79:9e:9a:9f:f4:8d:fd:88:b0:29:cd:3e:d7:c8:3e:9e:
e3:ad:aa:24:90:e4:19:2f:4d:f2:83:a9:ed:65:73:08:85:a0:
80:fe:f3:91:fd:0b:91:db:42:f4:a6:02:f3:fc:3f:52:80:06:
11:50:ca:db:fd:4c:e4:93:a6:e5:2d:4f:5b:dc:c0:be:da:f6:
9b:31:a1:e7:df:cc:5c:73:f3:93:cc:57:43:22:05:52:9b:be:
6b:bf:e4:8e:9a:11:62:f8:4f:98:1f:7a:35:cc:0b:74:4c:cf:
59:b0:33:35:0b:29:88:d4:cc:1a:8d:61:89:0e:b7:53:11:03:
0d:19:ea:7c:b0:f7:8d:7f:36:45:e6:6d:49:54:35:ce:8f:28:
5f:45:2c:b0:a1:b2:98:a8:d3:95:8d:d2:ba:59:1d:58:cb:7a:
77:04:23:cb:24:58:24:ae:58:32:f2:f1:4a:3b:8b:bd:70:ee:
77:cd:7d:97:90:6e:ac:d0:31:e4:f5:f2:18:a8:f5:72:73:87:
03:1e:dd:ed:52:1f:d2:4a:f5:96:db:0c:f8:61:d6:b4:0e:b3:
7a:46:2b:44:a3:0e:36:e5:b6:93:82:71:04:1b:e5:82:a4:3c:
da:ff:85:e7:d1:04:59:39:52:8d:8c:18:fb:8d:75:18:19:7d:
34:f6:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:27 2025 by rpki-client