Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: c2a+Vi0vrsUJIBHwojCF6gEgaa1k1DeB03MujlhIm0U=
Subject key identifier: 3C:E5:87:BA:A6:BD:6F:F9:48:A7:73:53:7E:BA:50:91:E3:4F:64:DF
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 01967679CB45299222E3F3953D9C36804FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: C4
Signing time: Sun 27 Apr 2025 09:00:15 +0000
Manifest this update: Sun 27 Apr 2025 09:00:15 +0000
Manifest next update: Mon 28 Apr 2025 09:00:15 +0000
Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: eyRInXMDGWyy4fb41y+2sxMo+yv4d2Vrf1ZA7AmRRC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:cb:45:29:92:22:e3:f3:95:3d:9c:36:80:4f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Apr 27 09:00:15 2025 GMT
Not After : Apr 28 09:00:15 2025 GMT
Subject: CN=3ce587baa6bd6ff948a773537eba5091e34f64df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:4c:04:f6:d5:96:df:fd:e5:40:a4:6f:b6:
f9:81:8d:e4:4c:bd:03:12:24:a7:9b:40:04:1b:9d:
ca:b7:cc:c5:fe:8b:64:0c:1d:7f:7f:05:57:60:01:
3a:ce:86:8c:c6:01:71:f5:fb:a2:a4:01:20:72:c3:
67:29:41:62:a0:da:9f:6a:74:bc:8f:57:e8:35:df:
ef:0b:3a:04:91:8b:d3:f5:dc:42:e7:fe:ec:87:a7:
ad:e4:e8:6e:ad:91:a8:12:81:0b:4d:1a:7c:6d:3e:
28:e8:7f:a4:ef:e9:67:9c:86:e2:0b:e0:cc:ab:ba:
06:72:2e:7a:90:32:52:8a:be:f9:e8:07:3c:6a:6c:
58:ce:ce:3a:5d:5d:a3:71:37:0a:f6:74:db:25:80:
8c:06:91:ee:89:9f:2f:37:56:ca:17:eb:e7:70:65:
15:01:5e:01:ea:9f:98:6b:5a:fe:74:2e:16:3b:de:
bb:8d:f4:a0:6d:80:c2:7e:40:fb:50:88:85:7d:eb:
63:34:71:b1:6e:ce:d0:79:c4:33:1d:25:58:f5:bf:
60:5c:2a:ee:7f:68:54:73:fc:71:ed:7b:53:48:90:
3e:c9:ef:f8:09:75:bd:1a:b2:e8:19:43:6b:cc:41:
e7:76:63:0b:a8:91:fc:9d:14:e8:25:7e:29:06:e6:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E5:87:BA:A6:BD:6F:F9:48:A7:73:53:7E:BA:50:91:E3:4F:64:DF
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8c:c1:47:14:51:1c:01:aa:e2:95:71:c3:c6:df:b8:a8:10:
a5:a3:39:89:3a:cd:7b:73:be:70:86:48:71:76:9f:15:10:f9:
2b:a4:94:f8:a1:94:54:fd:be:e7:ad:e6:cb:1c:a6:5f:25:1c:
39:9e:71:f8:b8:35:74:6b:5c:1b:4f:5f:16:24:59:a6:5e:3b:
ab:ee:19:5c:c4:a5:23:96:4e:02:8e:7f:65:35:44:bb:73:50:
57:b6:6d:60:d1:1b:ef:6f:8b:8f:5b:86:1c:de:83:a0:cd:4e:
0a:d0:01:9c:83:02:a2:cb:14:39:3f:86:f1:43:54:4d:f0:0f:
1b:6c:b9:dc:05:e1:21:ca:7d:4a:48:5d:1c:98:81:80:1b:23:
b7:08:a2:e0:be:9c:6c:e5:3f:5e:e7:52:f8:27:9b:96:2e:90:
32:b5:72:e2:58:3d:6e:cf:9c:8b:5c:11:9f:f8:d8:8c:ae:c5:
e7:13:9f:db:a5:00:4e:10:60:93:14:c2:ba:0f:d4:82:7f:65:
f5:f7:4a:e3:0a:86:0b:a6:12:e4:89:9b:2f:4b:e9:ca:b3:e0:
c3:d7:51:a1:fe:c0:2b:78:15:97:f6:19:e7:89:35:9d:65:82:
70:d7:5c:30:bc:d3:b2:f3:85:a4:5b:81:1c:37:32:ad:e5:8c:
e4:59:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:27 2025 by rpki-client