Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json)
Hash identifier: 0Hikul5M6yKuMBrl2B0JMjFvPiUZmjyGlUSN6RK3Yjc=
Subject key identifier: 78:E7:AD:97:11:C5:FC:3B:64:8C:F4:90:C3:22:D1:76:2A:9D:02:8B
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 01967A56E2094896FECDC1EE9B2E494554AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
Manifest number: 0CA3
Signing time: Mon 28 Apr 2025 03:00:36 +0000
Manifest this update: Mon 28 Apr 2025 03:00:36 +0000
Manifest next update: Tue 29 Apr 2025 03:00:36 +0000
Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: qckohGJOcJCsMPxywR22ZFpLxV8M1Lbid+qMHlKZHcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:e2:09:48:96:fe:cd:c1:ee:9b:2e:49:45:54:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Apr 28 03:00:36 2025 GMT
Not After : Apr 29 03:00:36 2025 GMT
Subject: CN=78e7ad9711c5fc3b648cf490c322d1762a9d028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:8f:7c:05:91:ba:20:96:86:5f:48:bd:20:
14:50:61:48:21:40:98:2b:89:2a:ba:4d:66:13:e4:
8e:02:18:b7:2f:67:17:1b:09:1d:b1:50:44:d3:0a:
47:e0:e1:50:7c:35:c7:1d:ff:1d:8f:29:f2:f0:a9:
28:6a:96:5b:99:90:96:32:d6:2e:ec:a3:7f:2d:cb:
9a:77:41:06:d9:82:a7:b6:c4:e7:75:fa:6f:62:8d:
9a:86:71:c1:67:e0:cf:5a:30:c8:9b:d1:3e:8d:e9:
7e:98:b6:71:01:61:0f:ed:4b:eb:86:42:15:a7:6a:
ce:fa:25:f4:c9:88:94:a3:23:e0:ce:ef:f2:af:c5:
ab:8d:3c:3d:18:78:a3:41:4a:64:9e:93:56:21:0e:
7f:2c:e5:32:fd:de:02:75:56:26:22:bc:4d:b5:14:
b6:6e:b9:3c:85:f4:5f:e7:c9:7a:a8:c3:bb:e0:7d:
cc:02:2f:fa:ed:19:73:e8:af:99:90:92:b0:af:c2:
04:16:6d:06:92:5d:3a:cc:cc:15:af:74:ec:d8:b8:
49:0b:3d:27:f6:ea:b4:1b:f9:e3:77:ed:91:ad:4c:
ca:bd:fa:01:a9:89:b3:64:b8:86:36:09:b6:da:d3:
b4:2c:a4:78:32:d8:a9:03:0a:98:b1:e4:28:14:c5:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:AD:97:11:C5:FC:3B:64:8C:F4:90:C3:22:D1:76:2A:9D:02:8B
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:db:d1:f7:82:be:df:6f:8e:14:41:83:58:51:17:57:96:d0:
bf:38:d5:78:03:90:e1:32:c7:bb:68:ce:be:bd:56:86:a0:97:
f2:a0:2c:71:2f:c3:39:06:a9:04:44:86:14:42:5c:a4:69:ca:
fd:13:84:25:61:15:33:4b:cf:48:21:42:65:22:68:c0:b9:e8:
c1:85:8d:eb:61:a7:aa:18:03:65:e5:6a:41:ce:7b:53:67:25:
55:1c:7f:39:b4:4d:66:32:b5:de:4f:d5:36:dd:1b:15:82:dd:
0d:24:2f:52:f0:31:47:79:73:0e:7a:ea:5f:35:77:57:ab:6b:
0c:34:d5:57:d9:76:8f:a6:2a:4c:99:7d:f7:7e:2d:39:af:55:
dc:b3:bb:37:bd:ce:81:4c:0e:20:f1:b1:c3:4a:59:91:91:bd:
67:8d:f1:5e:2b:5e:c5:8d:1c:0e:51:f5:d8:c2:9d:a2:da:4f:
34:45:20:4b:dc:ac:f1:27:b7:49:f2:3e:f7:af:a2:c3:55:45:
0f:dd:3f:5e:f2:63:0e:1b:a7:f9:3b:fa:0e:6c:e6:21:3c:16:
8f:ea:c0:bb:da:d5:8f:2c:3a:52:2a:87:81:aa:09:73:74:00:
0c:19:ee:e3:26:93:b9:85:7f:3c:18:64:9d:4d:ab:30:da:ac:
b4:ad:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:46:07 2025 by rpki-client