Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: y9NPi7JxbPOPFpBzLKQ+rKFC3r6U++ysPD+c2OX6yv8=
Subject key identifier: 55:81:D3:0F:38:11:24:F5:05:02:69:A0:25:51:DA:B1:75:3E:1C:D1
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 01967BD71DA9B7BF8A572685D587CFF22DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 10:00:17 +0000
Manifest this update: Mon 28 Apr 2025 10:00:17 +0000
Manifest next update: Tue 29 Apr 2025 10:00:17 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: AJnUlOmPE9CPsotpYwgEuhr18eZr/+GGEIHi2KKPdFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:1d:a9:b7:bf:8a:57:26:85:d5:87:cf:f2:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Apr 28 10:00:17 2025 GMT
Not After : Apr 29 10:00:17 2025 GMT
Subject: CN=5581d30f381124f5050269a02551dab1753e1cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:93:1a:89:44:8f:18:b4:82:b2:e4:38:bf:
a3:32:f7:f4:db:86:01:88:81:06:55:f2:ec:e6:f1:
a7:80:33:37:94:f5:42:95:7e:3e:e6:ec:77:3c:f1:
d0:20:6f:69:dc:f9:ef:ac:5f:49:1e:37:c4:7d:d4:
92:77:78:19:ef:f0:41:f5:3a:af:17:52:36:da:1a:
0d:93:47:ce:00:f5:e5:b6:7c:24:19:5f:25:bd:81:
a2:30:94:9b:8f:54:27:c2:d3:ba:84:fe:e8:d1:25:
70:70:96:6d:05:57:8f:bd:9c:50:bb:2b:d5:87:68:
a0:9c:a8:d4:1c:fc:ef:ed:e4:eb:1c:cc:7e:86:e3:
6a:1f:f9:04:d6:87:7b:20:81:96:d0:99:6d:c5:1f:
c4:68:ee:88:76:b8:a1:be:90:d7:39:84:42:7f:ab:
f9:72:b9:5a:03:6c:d6:35:d5:55:b4:3c:10:45:98:
53:91:e8:76:45:0a:31:15:bc:9f:51:27:c5:6b:14:
e5:99:db:26:68:37:ad:e5:89:59:be:88:bb:8f:c0:
a4:e5:ce:ff:dd:84:cb:92:02:5e:fd:f5:4a:57:ac:
e0:0c:37:87:e4:16:bf:92:58:02:fb:8d:89:b0:2c:
fe:3f:12:ae:a9:cd:af:06:6a:b6:06:dd:29:f2:a4:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:81:D3:0F:38:11:24:F5:05:02:69:A0:25:51:DA:B1:75:3E:1C:D1
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fc:73:26:06:88:35:80:17:e4:91:dd:2e:69:11:13:5e:3d:
3a:fe:f9:02:b1:d5:2f:77:b7:d4:f6:fe:01:75:04:1c:d0:ef:
92:ef:f8:fb:2b:88:c7:27:2c:76:25:a3:a9:a0:92:80:d7:16:
7c:12:60:46:53:47:c6:fe:ec:33:2d:b1:f4:6f:f3:41:1e:af:
8d:61:40:2d:f5:66:ec:1d:1d:20:fd:09:e4:f6:f2:5a:e9:62:
e0:b3:22:ce:0d:2e:75:5d:d1:53:5a:b6:f3:3b:b6:41:69:de:
30:08:19:f0:bc:a4:a9:3b:42:39:49:13:98:a9:ca:19:97:cc:
bd:7b:1c:40:4b:84:66:86:38:41:6c:d9:e0:e5:7c:57:8b:e5:
28:a8:d5:b2:3c:39:d3:fd:bf:ac:f4:2e:68:70:8c:c7:cf:75:
80:ea:f8:4d:9a:20:c8:69:ac:b7:5b:7a:90:00:35:c3:57:4d:
40:a4:16:f2:20:55:5e:28:ba:80:26:53:26:34:16:25:f2:e4:
79:2a:80:d1:fc:62:3c:5f:d3:47:90:e0:f0:ec:83:d0:6d:e7:
4a:b0:8c:36:1a:e2:72:18:d8:a2:fc:e7:60:17:2f:d5:41:33:
75:82:93:f6:6c:4b:5c:db:d4:92:f1:c4:41:54:f8:3f:f0:8e:
c2:e1:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:55:52 2025 by rpki-client