Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: OZvGOkTPAr+DvKywvgv4qmC6wPfTZ13H6zIONoWi+w4=
Subject key identifier: A0:48:11:05:C4:84:F9:63:40:21:C0:3E:E0:D5:B3:9E:42:0C:77:69
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019651C8EEBFF1A874A27568A2E6A8EBA4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0865
Signing time: Sun 20 Apr 2025 06:00:44 +0000
Manifest this update: Sun 20 Apr 2025 06:00:44 +0000
Manifest next update: Mon 21 Apr 2025 06:00:44 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: QbHC4Cqrbrn6uw0KgZmsa6aJKoJ3GgTL7Wg9LG0Suws=)
2: eL1SH2o6BFV4SrOkUUf29xtUS08.roa (hash: JmkdJoGyIMkBw++B3F+N+a79o3z14Hcd0LecLEcyOis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:ee:bf:f1:a8:74:a2:75:68:a2:e6:a8:eb:a4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Apr 20 06:00:44 2025 GMT
Not After : Apr 21 06:00:44 2025 GMT
Subject: CN=a0481105c484f9634021c03ee0d5b39e420c7769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:03:b8:84:f1:4b:a1:0b:73:9b:24:e8:99:
f7:a7:3e:ec:af:cd:03:99:10:67:1a:0a:a5:b8:9f:
ad:3b:81:9f:92:5a:46:76:ee:fd:88:d6:4b:ad:e3:
ed:cc:e7:16:81:c6:6c:07:55:be:c6:98:16:55:f4:
b3:84:95:86:db:37:f4:74:05:3a:0f:2e:ca:82:08:
99:34:af:5a:87:7d:a6:99:a1:0d:3a:e2:e3:eb:5f:
38:b7:bf:d4:d9:fe:1b:c5:5b:96:bb:ca:de:29:8b:
d4:c9:ff:69:7b:9c:58:e4:31:8b:74:bd:e4:bf:c3:
c4:6e:c7:db:16:dc:51:22:eb:43:a1:1d:f9:af:36:
0b:71:d5:2e:23:29:4e:6f:ae:50:0e:e5:b5:f6:b0:
a3:87:57:91:52:a1:2a:84:3e:e7:56:27:c9:09:26:
c7:ed:bc:f1:e4:04:49:9e:41:44:86:e2:bd:5b:fe:
d8:b1:a4:cb:7b:fb:a9:a7:c5:2f:41:78:9c:8b:8f:
5c:d2:a4:24:e7:fa:79:3c:01:72:93:4f:36:e3:63:
6b:37:e6:1d:c6:36:a5:3f:e6:6c:0d:43:26:59:1e:
7a:e7:f9:2a:9f:68:34:b6:21:8e:3c:a7:26:af:cc:
f2:17:1c:72:3b:2f:73:6c:9b:34:b1:b7:2d:a1:ca:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:11:05:C4:84:F9:63:40:21:C0:3E:E0:D5:B3:9E:42:0C:77:69
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2f:9a:bc:46:25:0d:b4:6c:e6:6a:ea:62:04:a0:0a:3b:d1:
36:7f:ff:ec:b9:13:24:0d:cd:39:e6:ab:62:a1:d1:1f:4c:17:
69:b4:12:8d:ca:00:4b:84:31:a2:c1:cf:a7:5b:c4:83:57:c8:
3e:9a:d6:94:48:fc:c7:92:e0:c0:43:0f:dc:00:90:32:56:05:
b7:9c:38:bb:2b:4d:26:78:44:86:14:95:e6:b5:d9:3f:dd:03:
3c:c7:13:50:54:4f:15:6c:71:7a:68:b5:43:25:b8:e9:3b:2a:
31:5a:24:7d:53:8c:bc:fb:17:1e:2c:ee:1e:2a:90:db:e2:e5:
66:3d:15:5f:23:f4:80:24:56:a0:fa:3e:de:42:5d:7d:93:85:
db:5c:df:55:3a:51:24:c7:80:7c:03:7e:e2:82:64:83:b4:2b:
d8:a3:fb:d8:41:90:34:f3:85:4f:af:6d:97:d1:51:ab:12:3e:
e8:52:3d:ab:e9:ae:59:69:50:03:8e:3a:de:50:aa:62:41:4a:
06:53:b6:d8:75:fe:c2:09:76:0f:da:3f:0c:aa:b3:56:76:ae:
67:5e:ec:72:45:85:94:4a:79:e2:ed:2a:b2:81:06:ca:f0:0a:
85:0e:6e:b8:b9:4c:77:b2:4a:45:1f:56:a1:68:a2:bb:e2:40:
fe:a3:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:00 2025 by rpki-client