Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: p3ieTDsMQSxIstKdUSW0N/JSCWFkuJDHhdkaARj5zJc=
Subject key identifier: 62:AE:D7:F2:6E:EC:A5:22:9D:54:3E:10:19:4A:45:36:35:03:A1:11
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 0196760CCDC4883A25F2C79CB964CFB34175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0A62
Signing time: Sun 27 Apr 2025 07:01:12 +0000
Manifest this update: Sun 27 Apr 2025 07:01:12 +0000
Manifest next update: Mon 28 Apr 2025 07:01:12 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: xJ4fGsOiZ9nymmjklcUBAh0CXqjU7x/2ynEQYMsjoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:cd:c4:88:3a:25:f2:c7:9c:b9:64:cf:b3:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Apr 27 07:01:12 2025 GMT
Not After : Apr 28 07:01:12 2025 GMT
Subject: CN=62aed7f26eeca5229d543e10194a45363503a111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:de:c6:e3:8e:a2:05:aa:6a:bc:43:53:94:69:
7b:07:66:46:45:d5:e9:96:5d:0b:cf:b9:9c:f9:b8:
62:d0:7f:86:b5:6f:87:cf:92:6b:73:58:a4:39:db:
91:fa:9e:05:f4:db:44:d9:f8:bb:b1:f4:ed:91:82:
3b:58:8d:8a:03:63:28:57:4b:ee:e1:d4:e6:2c:d5:
4a:ab:cf:c4:4a:dd:51:1f:e1:b3:83:5b:b7:02:c0:
7f:08:97:d1:cf:65:44:6f:40:3a:16:fb:39:06:73:
77:8e:9b:8c:4b:6c:5f:7c:d5:14:b2:5d:09:1a:84:
48:d9:98:28:36:b9:68:2e:57:da:ac:7e:be:e5:4c:
0b:51:2e:da:f2:e4:36:fa:75:41:fa:1b:cf:ef:b4:
54:81:6f:bd:d8:c8:4a:f2:96:bc:71:3c:18:28:86:
1e:35:72:41:3a:6b:65:ba:43:65:e0:4e:7e:d9:04:
f8:8d:1f:85:87:79:44:5b:23:1f:3b:87:ed:1e:98:
2a:ad:bf:cb:3b:6f:41:45:5e:74:8d:8a:91:2b:fc:
f6:16:59:f3:2d:08:07:88:3d:38:c7:f0:e8:aa:49:
4d:fa:5b:7e:e6:cf:2f:82:76:57:4a:9d:f6:60:35:
21:08:b5:21:4a:1b:60:72:28:67:c7:34:50:03:56:
95:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AE:D7:F2:6E:EC:A5:22:9D:54:3E:10:19:4A:45:36:35:03:A1:11
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0c:5c:54:40:ec:41:80:55:52:d1:b8:de:12:64:65:ee:fe:
bf:a8:05:34:95:a0:5e:78:58:70:86:74:d2:7b:36:54:8f:b0:
c7:3a:58:65:cf:8d:2a:a5:b8:7a:0e:98:4d:68:5f:12:8b:e8:
29:0c:8a:fa:54:e8:03:ae:bb:12:ac:9b:07:dc:72:62:ac:32:
6b:73:1d:50:60:d4:5d:d3:bd:ec:00:17:f7:0d:02:08:62:39:
df:42:c1:1a:ac:35:76:a6:8b:ac:b3:5b:cf:8e:3c:8f:b3:ad:
dd:bf:b4:10:b9:f5:1f:42:45:3d:b5:5a:04:7d:dd:c9:92:3f:
66:e3:40:94:ba:08:30:ec:bd:81:4b:66:5a:22:7f:6c:d3:c3:
a5:8c:15:f3:ad:37:85:eb:7b:45:0b:29:cd:b5:14:cf:66:fd:
18:92:40:59:f8:c0:6e:35:6f:ab:4d:c8:c0:90:5d:86:11:03:
e2:de:2f:58:16:0c:a0:46:cf:84:b3:1d:a9:1a:a8:b3:b6:e9:
20:1e:00:11:7d:03:f4:b5:51:fe:46:a7:11:eb:75:c4:bf:19:
8e:2b:86:ce:ae:68:db:66:56:60:e0:89:e5:75:1b:26:5b:b0:
c1:96:49:65:fc:c3:0f:fb:11:f2:3b:d0:56:07:20:70:41:fb:
e7:63:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:50 2025 by rpki-client