Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: nwo95zEm9DWc4raxXqbd6ZDXzcERNj1B0RnUEFLRpQQ=
Subject key identifier: 18:7E:7A:A0:02:92:E9:DE:31:DD:4E:01:C0:DE:ED:B0:13:3A:96:DA
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 0196760CC6104049BF89BE3FD323C621C43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0D2B
Signing time: Sun 27 Apr 2025 07:01:10 +0000
Manifest this update: Sun 27 Apr 2025 07:01:10 +0000
Manifest next update: Mon 28 Apr 2025 07:01:10 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: /JPD5H5C9rJ/MI9GAVRtE2waL7Hj7/6MHmbJgIQ73HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:c6:10:40:49:bf:89:be:3f:d3:23:c6:21:c4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Apr 27 07:01:10 2025 GMT
Not After : Apr 28 07:01:10 2025 GMT
Subject: CN=187e7aa00292e9de31dd4e01c0deedb0133a96da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:51:5e:6e:51:b1:7d:26:39:3c:e7:8f:75:
7f:f7:2c:c7:25:cc:e7:8c:77:fd:a1:77:ce:3f:88:
4c:da:c2:d6:2b:8d:28:88:71:c2:a9:8f:3a:24:56:
a7:f8:4e:b8:dd:46:df:d7:a0:1c:bc:04:69:96:3b:
6b:c4:10:84:d6:c1:82:4a:70:3a:86:99:06:dd:8e:
10:50:cc:78:1f:6c:6d:ec:2b:17:e0:1e:a5:6f:38:
6a:5f:8e:06:1e:55:ac:cd:73:bf:a5:0d:18:ae:81:
ef:b4:b9:44:68:7f:4d:72:05:8a:9d:9a:c6:c7:22:
d4:47:c8:36:b0:4d:02:3a:e6:b1:bb:66:a1:71:02:
e7:10:0e:1f:e4:d5:77:76:cd:d2:41:f7:0e:d7:cf:
7d:f2:ae:5f:67:85:76:0e:82:22:34:14:8a:df:80:
21:64:f6:65:a8:d6:71:a8:5b:0e:61:46:6f:42:6c:
f3:68:4f:a5:8f:f1:87:ca:2c:38:92:27:a1:de:9a:
3b:51:0a:f3:35:51:66:94:57:56:42:f6:5c:56:fe:
45:92:72:47:18:31:84:29:6f:a7:5f:8e:91:b8:60:
c1:48:24:c7:62:c1:93:f3:bd:9e:9b:05:dc:95:9e:
af:e2:b5:5a:05:0a:51:50:55:65:50:2c:e9:e0:e4:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:7A:A0:02:92:E9:DE:31:DD:4E:01:C0:DE:ED:B0:13:3A:96:DA
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9e:36:4b:bf:18:40:4d:ff:a0:1b:fb:d3:65:cb:15:27:f7:
84:b9:fc:fe:1f:e4:23:b5:37:26:8d:ab:ee:09:32:36:49:f8:
a9:47:34:8f:00:11:08:af:1d:8f:69:a7:15:fe:34:37:1f:58:
82:cb:a5:6f:b4:1d:1c:54:80:00:c7:27:33:f5:ed:e5:ba:3e:
7b:96:ec:18:30:a3:10:89:07:b2:de:40:97:69:d9:be:65:9e:
c0:4c:77:e4:7e:64:76:20:5c:47:d9:00:f2:7d:f0:ba:a6:94:
27:92:51:89:0a:f3:9e:43:3c:a0:51:ed:d2:4a:10:48:e6:74:
89:b8:42:aa:ff:99:80:15:59:bb:be:e3:c7:9a:1d:89:eb:50:
fd:24:20:7b:70:99:ec:7f:05:43:de:08:74:8f:09:24:2d:9e:
3b:3d:db:3a:7c:3d:06:ac:5b:88:86:59:6f:15:cf:52:15:b6:
c6:e2:17:63:e0:8b:ef:29:57:88:11:19:eb:51:17:7f:5a:cf:
32:b8:93:f9:ee:c1:5d:b8:08:db:38:53:23:11:57:70:ea:0a:
17:96:5f:a8:2d:73:0c:24:ad:40:db:8d:13:3a:fa:9a:20:d1:
9b:ef:61:75:91:4b:e4:b3:9e:93:d3:dd:c9:b0:56:4b:ad:8e:
c6:f1:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:44 2025 by rpki-client