Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: m4hkn0Z2ma4CdsXViV1aWtcLta1AMtlJRh94wu5Wm+I=
Subject key identifier: 5C:93:DC:01:2C:EE:D4:30:7A:CE:AE:A3:5C:60:89:D8:8B:09:20:4A
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 019683FEF0A6B3AF5EB74680AB10D814AD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 00:00:45 +0000
Manifest this update: Wed 30 Apr 2025 00:00:45 +0000
Manifest next update: Thu 01 May 2025 00:00:45 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: 6neVJObgULLqrCL8PHRHu7K9h4NEZM7M33aphGuC+00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:fe:f0:a6:b3:af:5e:b7:46:80:ab:10:d8:14:ad:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Apr 30 00:00:45 2025 GMT
Not After : May 1 00:00:45 2025 GMT
Subject: CN=5c93dc012ceed4307aceaea35c6089d88b09204a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:09:91:7d:a9:94:fe:b4:c0:cc:9f:ac:e2:
db:36:d0:41:52:ff:26:88:9f:3b:62:d6:55:a6:62:
87:e9:58:db:5a:e9:5a:4f:64:fc:30:df:83:82:f0:
c5:db:c9:47:40:2b:86:0b:c8:6d:af:48:5a:6b:0d:
3a:55:6a:b1:51:de:7e:2a:6b:40:5d:59:43:2f:69:
b6:99:20:83:ed:ea:4f:81:fc:aa:79:a2:f0:dd:54:
08:5b:97:6b:9c:cf:d7:dc:6e:50:04:a3:fa:bf:92:
f4:3e:b1:fa:08:82:a7:5f:30:32:82:da:f8:db:5d:
7b:a7:a1:c8:46:e2:d0:72:29:0e:a5:a7:a1:22:0e:
81:9b:06:32:2b:7b:cc:39:6d:2d:2c:c8:66:ae:d1:
45:90:e3:4f:9d:e0:64:4f:9f:23:6e:34:1c:53:6e:
2e:d1:2d:83:cb:b4:e9:ae:5d:21:79:fb:6f:3c:bd:
b5:71:46:02:c8:66:38:71:fe:68:f5:5d:48:33:ca:
0a:88:2b:d4:36:2a:19:51:9e:62:be:f4:1e:d4:a5:
36:e8:ee:69:22:7d:75:20:c2:0d:23:12:92:ac:f5:
8c:67:b3:d5:7f:ac:6b:d9:28:71:df:51:93:1d:55:
6d:01:58:36:0a:42:93:cd:2a:3c:d2:0c:03:77:0d:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:DC:01:2C:EE:D4:30:7A:CE:AE:A3:5C:60:89:D8:8B:09:20:4A
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:84:52:5f:f2:27:4d:8b:46:77:1a:13:10:e7:7f:68:c6:1f:
11:44:d5:23:40:3c:a1:ed:e1:cc:c6:d6:8e:b6:3d:20:d0:04:
b8:f4:ea:bb:24:33:e5:b7:6c:93:c1:b4:8a:84:57:f5:32:48:
5e:e3:90:ab:40:d6:79:2f:c4:71:c8:34:2c:eb:42:79:88:b8:
b2:d6:71:f8:25:bc:31:55:73:7c:df:c5:b1:f8:22:7b:e4:10:
f7:8c:87:1b:bf:ab:00:f6:fd:eb:e4:0d:03:79:81:27:f3:7b:
3e:32:45:60:aa:7d:dd:69:ab:06:85:6a:a2:6a:a1:64:6a:f6:
2d:13:e2:9b:28:f5:fa:fe:49:4b:7c:09:c3:4c:cb:6f:3a:41:
50:09:76:f1:ce:6e:c1:b6:d1:79:47:b3:94:dc:8d:b7:36:54:
4d:ed:b4:6a:42:a6:61:61:63:da:6d:dd:83:11:d3:24:00:89:
0e:d9:f7:b9:da:10:81:3c:3e:3e:e7:da:79:7f:30:c1:8d:ad:
75:68:e9:c1:af:fb:ed:02:df:f1:28:67:cd:61:a6:61:28:71:
84:f8:78:85:e0:5f:ac:ac:f0:8c:c4:26:59:f1:af:ee:de:82:
d2:9f:93:b0:82:8a:2f:e9:17:24:4a:78:e4:9c:97:25:2b:a6:
79:96:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:32:27 2025 by rpki-client