Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: Oo/d8sLLi1LX1pcBbIZOHnInNcQ8hJGsVTeJTDYcrw8=
Subject key identifier: CC:D9:85:65:93:70:42:74:E4:8D:DC:4F:98:0A:1A:C0:AA:43:B4:97
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 01968BB8FB274FBAF75CDB7BCA46C81EED62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 12:01:17 +0000
Manifest this update: Thu 01 May 2025 12:01:17 +0000
Manifest next update: Fri 02 May 2025 12:01:17 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: /ElIhP3y6gjLS9hZ/843y3s1w8wpcNs2V60EyWs2j9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:fb:27:4f:ba:f7:5c:db:7b:ca:46:c8:1e:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: May 1 12:01:17 2025 GMT
Not After : May 2 12:01:17 2025 GMT
Subject: CN=ccd9856593704274e48ddc4f980a1ac0aa43b497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:e2:59:be:eb:42:c4:1b:7b:85:8f:d2:44:
66:cb:a6:9a:28:13:1f:8d:d5:fa:f7:45:fc:38:6e:
47:a1:39:0b:25:fc:7a:51:7e:60:f9:b7:d2:cc:d4:
cc:74:d1:54:74:f1:b5:e8:4f:d9:83:91:06:42:c2:
77:ef:30:b8:eb:95:a8:ce:19:39:c0:a1:6b:1c:19:
46:09:76:fb:53:a5:e8:9a:86:30:a5:33:4c:58:ee:
84:e6:58:4c:b6:d1:38:f8:84:a0:59:9b:f5:7c:4d:
76:c3:0f:e2:91:79:21:06:0e:c7:a7:03:0b:ab:b1:
62:2a:e4:1b:d1:7b:4c:14:89:25:50:cf:e4:f2:d0:
ef:ac:ce:21:e0:9d:5b:ea:63:ba:db:5f:f5:49:8b:
f0:96:8b:f5:49:ab:ea:83:8c:90:21:f9:63:d7:55:
e0:9c:0c:e2:07:05:c2:cc:1d:8f:37:71:20:a5:ca:
16:ea:e7:27:8b:c0:f6:4d:07:e5:86:a1:dd:3f:f3:
61:fc:8c:c1:d2:87:35:6c:44:ee:26:a6:ac:15:35:
6a:bd:42:60:97:2f:b2:66:08:68:96:26:3d:7e:4c:
c8:71:b9:3a:23:de:fc:c1:75:40:3a:89:51:e9:ed:
58:00:95:2e:d7:f9:53:22:45:fa:a8:cf:18:40:6f:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:85:65:93:70:42:74:E4:8D:DC:4F:98:0A:1A:C0:AA:43:B4:97
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:80:df:33:ae:fd:e2:26:0b:6b:24:e9:ba:11:32:2d:8e:19:
e2:12:66:f8:cc:c2:e9:fc:e9:e5:e9:92:ba:59:07:8b:00:70:
40:4b:06:d1:7a:e4:3e:16:cc:52:e6:6e:97:1b:99:9c:dd:07:
f6:a2:65:47:84:ac:fd:a6:db:32:8e:cf:45:23:7f:2c:d2:ad:
16:b7:87:2f:a9:7a:05:b2:51:3e:99:0f:e9:0c:73:f8:1b:53:
f6:4b:92:e6:73:1b:46:c8:b0:7c:c8:11:78:0f:9e:ad:73:1f:
d8:a1:ae:b2:7b:e2:96:7d:2d:c6:b8:0c:94:19:5c:04:69:1f:
f3:bb:9f:a7:45:00:68:03:09:5a:61:56:24:b5:c5:c8:16:74:
d7:41:4e:db:13:5c:4e:0b:d6:da:91:23:9b:58:0b:0c:16:37:
1d:9b:e6:b9:a9:35:69:0b:48:10:90:99:d8:1a:a2:f6:76:3d:
69:d1:8c:15:e9:2b:15:c5:b5:1b:fe:2f:e2:7e:da:35:7f:0c:
70:19:36:bc:a7:83:bd:94:34:5a:cc:0f:7e:75:8b:69:ea:3b:
fa:80:f0:60:91:1a:d2:04:e6:0f:73:09:af:82:9e:0f:00:19:
f8:ab:89:6c:5e:3b:de:77:25:aa:ca:68:73:e6:5a:1a:d1:1c:
14:49:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:35:08 2025 by rpki-client