Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: +zB7Nqjr5HMRlY9HE0vooJm85M11XiWwQ4TgY25VsIM=
Subject key identifier: 2D:9F:1A:F4:88:83:3F:4C:A7:B7:B8:5B:7A:23:2E:53:A4:EF:B5:A9
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 0196771F07BCA0005937EBEE1D799BB3AF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 12:00:44 +0000
Manifest this update: Sun 27 Apr 2025 12:00:44 +0000
Manifest next update: Mon 28 Apr 2025 12:00:44 +0000
Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: 4C5h+0sYXvuEaull1f/VGNNmgyZ084K65uY9rzFx9Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:07:bc:a0:00:59:37:eb:ee:1d:79:9b:b3:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Apr 27 12:00:44 2025 GMT
Not After : Apr 28 12:00:44 2025 GMT
Subject: CN=2d9f1af488833f4ca7b7b85b7a232e53a4efb5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:86:ad:74:8d:ae:cf:d7:51:83:fa:78:44:
d6:6b:85:6a:b1:bf:f0:e6:f0:07:b5:6a:53:c7:37:
3a:5f:bb:d8:df:7b:62:20:08:b2:df:6f:f8:0f:20:
9d:87:e4:ef:7f:27:32:50:89:b0:84:82:61:0b:72:
d4:b3:b3:ec:39:0b:41:34:b0:63:eb:20:49:15:44:
c2:85:99:4a:03:f3:f3:ca:02:59:d2:fa:cd:e8:48:
91:16:06:c7:e2:18:3e:f6:06:96:da:e4:00:24:b8:
ca:91:dd:56:49:6e:03:2e:a3:f3:c9:8a:f5:e6:fa:
ba:47:f5:31:b5:77:64:35:bd:6f:d7:04:87:ad:77:
12:98:fe:f7:05:57:4a:39:80:78:3b:34:35:f9:a9:
8c:15:24:36:15:c4:70:d4:ad:8c:e5:89:33:d2:30:
06:6e:38:5f:54:e3:2e:4d:4c:32:30:ec:73:9f:aa:
62:2f:ea:43:a8:52:33:53:60:e4:99:4e:5c:40:d7:
13:79:61:14:e0:3e:1e:ba:0f:60:f4:80:ea:16:db:
59:8d:6f:37:82:05:37:4b:3f:f5:a2:05:5c:b4:84:
49:b9:78:d9:c5:8e:a1:ff:67:29:83:9b:ba:8d:dc:
6b:f9:35:a9:8e:e9:79:f3:a8:7f:d8:9b:da:a7:0a:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:1A:F4:88:83:3F:4C:A7:B7:B8:5B:7A:23:2E:53:A4:EF:B5:A9
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:46:b0:b0:7c:37:b6:dd:66:06:46:51:ce:f3:22:bb:46:26:
83:b0:05:c5:cb:c1:91:c2:e0:1e:c1:56:3d:e0:e3:9f:d9:f3:
57:17:ab:c4:7b:68:26:2f:7d:2d:cf:48:41:bd:ba:15:96:e6:
a7:92:39:de:ef:cd:61:d6:d1:57:55:78:7d:13:fd:77:99:8c:
29:b0:86:93:2a:d1:42:81:c3:86:9f:a5:9a:4b:12:0a:84:6e:
ba:bc:c3:4b:f0:b4:57:ee:fe:fa:83:da:7a:50:cb:08:27:d1:
e2:2c:11:57:29:ab:90:fb:ed:da:d5:02:e9:23:81:d1:08:89:
74:87:91:eb:96:e3:48:9e:88:5a:97:8b:fb:0d:a5:71:4a:ea:
44:f9:b9:55:89:7a:17:50:c2:bf:c0:22:3e:19:3b:5c:7f:0d:
78:f6:71:aa:38:fc:66:ed:ea:c7:e5:23:e9:b5:41:83:ae:f7:
96:82:98:fb:b7:c4:4c:48:7e:36:14:2c:7f:c8:86:49:52:78:
4c:90:12:00:04:19:73:49:66:fd:33:b7:04:77:a4:9e:4d:94:
1a:10:bc:24:7c:65:98:8a:13:ed:bb:a7:57:67:fe:73:bc:78:
df:5a:40:df:8b:a0:06:52:2b:1b:01:d7:83:a0:37:d0:97:83:
a5:55:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:43 2025 by rpki-client