Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File: zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier: WHJIAumyq8uq3O3P7kO7Dq52kGwDIeGt81TqF9pE8zg=
Subject key identifier: 49:21:69:B4:5E:97:97:AC:C7:B4:95:D2:04:B0:23:EA:20:FB:19:3D
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer: /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial: 0196515A9D7A86E0D51FC65D9EC3D2E11181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number: 071A
Signing time: Sun 20 Apr 2025 04:00:15 +0000
Manifest this update: Sun 20 Apr 2025 04:00:15 +0000
Manifest next update: Mon 21 Apr 2025 04:00:15 +0000
Files and hashes: 1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: 8XK4BEIxxkE3EKu7v5Z9AK2FKXu6Vk6PWmIuAK/Z9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:9d:7a:86:e0:d5:1f:c6:5d:9e:c3:d2:e1:11:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Validity
Not Before: Apr 20 04:00:15 2025 GMT
Not After : Apr 21 04:00:15 2025 GMT
Subject: CN=492169b45e9797acc7b495d204b023ea20fb193d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:fe:c8:fc:93:61:2f:4a:47:a5:5a:07:c4:
19:8f:7f:d5:bc:9c:6f:67:95:0d:01:c0:a7:2e:c8:
03:3a:c1:08:d8:d4:bf:fb:be:11:1b:03:86:96:2d:
f0:dc:9e:36:36:7b:50:d1:42:98:ab:aa:e6:97:6b:
7e:54:b0:de:85:be:1a:dc:21:ec:23:c1:15:e2:f9:
05:61:54:ec:30:56:90:b0:ff:ca:61:b0:8d:49:f6:
55:0f:94:3e:32:6e:e3:76:59:19:51:5c:1b:6e:76:
bf:c4:f3:2c:d1:de:4d:99:24:4b:5e:e7:cb:8a:50:
fa:10:84:90:91:e8:b7:f1:f5:55:8b:22:a3:59:ce:
f6:c8:a7:bf:85:ba:f7:cf:9d:14:f9:97:f9:2f:d9:
9c:b3:2d:15:52:fe:3c:cd:9d:1a:91:c7:3b:d5:a0:
1d:dc:5f:f7:34:1e:17:fe:ad:51:23:4c:fa:d5:96:
ba:4c:a7:f9:b7:df:e6:5b:8e:fd:af:4b:b8:18:a4:
7e:0a:24:99:0f:8f:cc:7c:a1:5e:ab:14:8b:4d:74:
73:bb:b3:6a:80:df:55:86:6c:a1:51:ed:e6:ba:28:
7b:b2:04:80:a5:70:a8:a0:8f:3d:f6:6a:4c:31:5f:
af:37:a7:95:93:5d:13:fc:35:e2:ed:4c:df:0f:eb:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:69:B4:5E:97:97:AC:C7:B4:95:D2:04:B0:23:EA:20:FB:19:3D
X509v3 Authority Key Identifier:
keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:0e:2e:9f:a1:09:11:31:0a:5d:1b:be:ed:37:c2:96:50:d6:
20:66:2e:c4:f1:55:78:7b:2a:e5:bf:43:69:0d:5e:03:5d:af:
b4:d1:42:28:df:8a:03:00:f3:8d:b7:b9:19:74:54:4d:7a:a0:
6b:f5:c5:2e:4b:e3:c7:ed:50:51:ba:8d:57:f4:27:80:60:95:
3c:2e:f2:fa:ce:d4:a5:d7:63:af:2e:b4:ff:c7:13:98:f8:42:
0f:56:96:5a:46:25:26:37:ac:36:33:e8:d4:74:57:ec:dd:b1:
b8:01:14:79:ca:31:48:c9:23:06:c6:85:f7:1e:a9:f3:ca:30:
67:56:89:01:c3:de:da:77:ce:68:ca:43:f2:d9:ac:29:a9:0a:
b3:21:23:a5:32:6c:fc:88:d1:08:ea:9e:ea:1e:ec:30:26:59:
46:f7:6b:5c:ed:f8:b5:8c:e1:cd:c7:76:70:7a:c3:2d:71:79:
16:97:91:47:74:35:8b:03:6b:e0:5c:14:12:a5:d6:97:6e:8e:
9c:27:a2:14:45:f4:93:7c:3b:aa:a5:35:f8:43:db:be:51:a5:
7d:cd:74:a4:72:49:e9:57:39:dc:31:84:73:54:7c:f6:0a:35:
c7:ae:2e:1b:cc:2a:c6:fa:82:05:7c:6b:9e:f4:ec:90:f0:6a:
c0:23:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:42 2025 by rpki-client