Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: lbFvUO8bNKBBbj+leuXmy/eWzzJ4WPZ0m+NNbG9hroM=
Subject key identifier: 51:53:4E:23:59:79:05:B7:61:40:6F:2C:76:69:AF:4E:02:B0:CC:99
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019672D484129F6E55ACB6AAB67B2C2A4598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 036C
Signing time: Sat 26 Apr 2025 16:00:52 +0000
Manifest this update: Sat 26 Apr 2025 16:00:52 +0000
Manifest next update: Sun 27 Apr 2025 16:00:52 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: xsOdwWlij51vCUoAnKFw7GuCwPFWG6Z0xCRyKKcNfU4=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:84:12:9f:6e:55:ac:b6:aa:b6:7b:2c:2a:45:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Apr 26 16:00:52 2025 GMT
Not After : Apr 27 16:00:52 2025 GMT
Subject: CN=51534e23597905b761406f2c7669af4e02b0cc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:e1:31:fd:13:28:10:df:76:ad:a4:6c:25:
ad:4c:61:f4:b7:df:b9:03:8d:89:29:17:d2:67:0b:
d8:b4:e6:40:b3:61:12:e7:40:0b:4a:e6:a7:28:3a:
da:0d:5e:38:21:68:2c:09:64:71:61:20:85:bd:7c:
5e:6d:2e:5a:26:1c:95:70:e7:5f:b9:d4:a3:f0:32:
d9:fb:69:ad:ff:62:6c:c3:14:ab:93:16:20:9f:65:
81:3d:09:88:6d:f7:a0:d0:07:6d:8c:20:d0:65:8f:
0e:79:66:b3:22:c5:e4:15:72:c5:c6:6c:b4:6a:ea:
91:14:94:c8:9c:65:a5:41:4a:1a:7d:47:25:95:78:
dd:e7:2c:f7:24:03:95:1e:00:a6:62:4b:e6:ec:f5:
1c:7c:6b:06:e9:3a:6a:3f:e9:c3:41:40:97:41:7f:
8b:79:51:7f:24:41:c4:09:f6:77:7c:50:3d:d6:fa:
83:4f:30:df:cb:85:af:20:e5:85:b4:e7:de:16:d0:
48:9c:17:31:cc:47:c8:e9:2c:81:71:9c:e0:06:ba:
1c:15:5f:ed:3b:f2:2c:a4:7d:14:c3:47:52:7e:1c:
56:99:25:4d:50:ce:75:37:d9:02:ee:50:c9:b4:2d:
96:f7:2f:82:55:42:00:0d:43:77:e4:35:67:73:9b:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:4E:23:59:79:05:B7:61:40:6F:2C:76:69:AF:4E:02:B0:CC:99
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1b:88:86:cc:22:34:88:48:47:97:15:fa:fb:a9:36:6c:aa:
00:fd:2f:70:db:e2:bd:de:ff:53:02:19:ca:9b:b3:08:ab:b5:
67:a4:cc:1e:d4:2a:01:24:99:4a:c0:58:e8:b8:73:1c:b0:61:
34:e4:4e:8d:88:0e:55:56:55:5c:a2:f0:46:ac:53:5b:a9:2e:
cc:3f:e9:ea:44:bf:63:81:5c:99:69:3a:d5:6e:3f:11:26:c6:
9f:62:29:ac:4c:cf:e2:a5:35:58:12:57:d0:27:36:6a:5a:ce:
26:29:7a:b3:77:d8:f4:db:d9:5b:ad:f7:6f:8d:0a:69:a3:c1:
d9:bb:b0:00:31:ba:d1:b7:f7:b2:9f:4b:21:07:89:0f:f8:11:
08:b7:91:48:f1:9a:19:1c:0b:1b:2e:8b:5e:da:a0:23:e9:7a:
23:1f:7d:f0:53:87:80:54:1f:55:61:11:cc:2f:a7:b9:60:64:
72:28:50:11:48:5f:65:59:ca:d0:f1:72:17:c7:ca:79:75:06:
cc:9a:ca:ab:81:2e:69:4f:a5:fd:a3:81:11:7a:f8:aa:08:54:
24:83:0e:65:64:9b:e0:2e:d2:6e:38:d3:84:39:a7:85:0d:ec:
52:31:1d:a8:c4:47:81:bc:8e:5f:27:0a:36:80:0f:f1:c4:7e:
63:dc:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:23:28 2025 by rpki-client