Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: i4gRWL+unTsuObyg4flBZlxrITtuLkuWiDo637IA6cA=
Subject key identifier: F5:24:1B:E7:C8:96:E4:49:0C:16:64:90:C8:07:30:A5:2F:8B:71:B4
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 01967E33F1DD9F862B1381E72036D2A42793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 21:00:55 +0000
Manifest this update: Mon 28 Apr 2025 21:00:55 +0000
Manifest next update: Tue 29 Apr 2025 21:00:55 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: hkRt2IDh7zrIcim4ZCGVGyXvuRKZjDR1/tENgSwpWR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:f1:dd:9f:86:2b:13:81:e7:20:36:d2:a4:27:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Apr 28 21:00:55 2025 GMT
Not After : Apr 29 21:00:55 2025 GMT
Subject: CN=f5241be7c896e4490c166490c80730a52f8b71b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ec:22:9f:3d:0c:ec:bf:0d:50:a7:82:40:d0:
e0:b5:cb:46:91:a8:5c:7a:10:c6:95:17:90:71:6a:
ef:af:42:b3:df:f3:89:0e:a8:52:94:7a:be:6b:e5:
f7:25:71:e6:56:12:2b:2e:e6:20:a6:e8:ad:04:ce:
30:61:da:6e:3e:01:74:65:8f:83:87:86:3a:e4:df:
8e:54:87:9a:79:a6:45:58:b1:ab:08:6a:53:65:1c:
fb:e1:67:99:75:06:90:3c:3f:7a:e4:83:95:e3:6d:
e4:12:cb:fe:fc:ab:f7:a1:5b:68:c4:e4:be:b7:6c:
95:18:06:1c:6b:01:e5:64:f2:74:3e:2f:38:a2:09:
b3:98:01:52:12:d9:5a:12:68:50:68:91:17:c4:12:
d8:c1:48:ea:15:7c:f9:a0:b7:3a:8e:6e:46:ea:35:
9e:2f:ee:10:ac:e5:d8:6c:dc:54:b7:b4:3a:8c:5b:
1b:92:6c:4e:80:28:23:82:bf:3f:01:4b:17:a6:52:
bb:cf:2d:cd:58:df:0e:49:9c:6d:16:da:db:d4:1d:
ad:3f:c3:51:bc:ac:7d:61:2e:94:42:85:66:7e:7c:
e9:0d:21:bc:99:a0:c1:e8:ed:d2:b9:17:6f:36:8d:
06:47:29:aa:a9:02:22:3f:78:15:8d:12:19:54:3c:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:1B:E7:C8:96:E4:49:0C:16:64:90:C8:07:30:A5:2F:8B:71:B4
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dd:ab:85:5d:24:20:ce:c6:2f:26:7f:95:7e:83:6c:18:87:
27:b2:3e:71:11:56:fc:e3:db:63:16:d0:d4:dc:81:f8:c0:9b:
24:3e:31:96:bd:68:54:5e:86:78:a6:f2:58:37:65:e2:65:26:
a5:81:92:23:fd:9a:9b:d3:0a:aa:ba:57:c9:54:2b:81:de:40:
4c:a8:9e:05:46:5a:d4:7f:00:90:ff:e6:b9:74:5c:67:1e:d6:
00:2b:ce:49:ba:e1:6b:d3:2e:ed:3c:da:82:01:1d:e5:0f:40:
0d:9d:c1:12:6f:58:bd:aa:d1:fb:32:97:15:e7:69:0e:12:dd:
b4:db:0c:6b:8f:ae:25:a5:64:81:12:97:96:49:ad:00:b0:67:
dd:f2:6e:c5:50:ef:7d:30:10:83:54:01:02:db:bc:61:5a:9b:
85:36:bd:cd:ea:63:58:cf:26:6e:c0:26:50:13:73:f5:3e:5a:
cc:bd:40:e4:ae:f5:79:cd:81:24:95:bc:3f:4c:51:20:c6:21:
bf:f4:38:41:ba:f9:6a:38:34:da:77:52:d7:4d:65:e9:b9:89:
b0:a3:6f:b1:a1:2b:22:33:01:40:41:95:65:33:70:95:f6:f2:
8e:9f:1c:73:57:bc:b7:30:47:22:2c:10:06:04:89:fa:d1:0f:
08:6f:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:59:47 2025 by rpki-client