Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier: P17BX1+RtL7DRTRQY1LUZn7baylhqk6iRWTA9v3MSlk=
Subject key identifier: BD:26:70:D0:5F:39:5C:A9:B8:C3:C0:24:ED:36:9A:33:EC:55:AE:A2
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial: 01967F7D6ACD8C3C7A60E1CC42CB8C8D1946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 03:00:47 +0000
Manifest this update: Tue 29 Apr 2025 03:00:47 +0000
Manifest next update: Wed 30 Apr 2025 03:00:47 +0000
Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: okftxOac8I3MLQWRaWp1CJqDLPuUKN+n+3gUzdnI3Xk=)
2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:6a:cd:8c:3c:7a:60:e1:cc:42:cb:8c:8d:19:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Validity
Not Before: Apr 29 03:00:47 2025 GMT
Not After : Apr 30 03:00:47 2025 GMT
Subject: CN=bd2670d05f395ca9b8c3c024ed369a33ec55aea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:78:23:f7:5f:ec:0d:d8:49:61:0b:db:24:
f6:be:8f:bb:44:d3:74:99:d7:73:b5:fc:fb:24:b5:
86:2a:99:8d:59:66:be:69:cc:2a:bf:e4:4b:3a:01:
43:72:3f:27:b8:06:17:9c:b8:5d:29:99:fe:52:0a:
49:e8:9b:cc:7e:d7:2e:b1:20:52:bc:d6:4d:6e:30:
42:5d:47:e8:e7:3e:ea:d0:97:5b:64:21:45:f0:5a:
26:9b:60:75:ef:73:5e:57:7f:8e:46:ad:ae:54:61:
44:79:51:2f:3e:f7:85:9c:f6:98:71:91:e7:a1:d7:
1c:ef:9b:f8:60:6b:1e:70:22:cc:55:43:40:e0:69:
a2:31:05:49:ae:4c:c3:df:f7:b3:a6:1a:bd:a8:64:
61:a4:e1:04:84:3d:ee:4f:6e:18:37:54:86:92:01:
20:ef:88:04:f9:af:e1:1f:b1:5c:3b:3d:29:9f:95:
02:3c:42:c3:0e:d0:ea:e6:57:f6:3e:44:dd:03:fb:
80:c3:45:91:ba:65:83:9a:f0:1d:c1:82:f1:23:a5:
cb:9c:82:89:d9:1e:9d:58:2e:d5:4e:54:b0:c0:33:
b0:d8:f7:1f:74:28:32:8d:5b:d3:98:25:b1:06:78:
58:29:77:67:cd:92:f5:25:f7:99:3b:b8:c4:44:c5:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:70:D0:5F:39:5C:A9:B8:C3:C0:24:ED:36:9A:33:EC:55:AE:A2
X509v3 Authority Key Identifier:
keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c4:3b:2b:03:d9:90:3f:f6:27:e0:4b:0a:46:f0:a4:3a:c3:
ee:db:54:11:ee:49:6b:48:22:ce:5a:26:af:ec:f5:4a:91:d9:
fa:38:00:d3:76:06:17:23:04:86:ff:82:98:4d:63:f7:bd:0a:
7d:13:77:e2:73:b7:dc:f7:a8:f1:6d:80:be:dc:29:f8:34:3d:
18:49:c4:54:9a:a6:a0:85:69:31:d0:d8:bc:ac:e1:91:9b:9c:
f1:4e:aa:be:96:da:de:aa:36:72:fc:c2:75:a0:fd:10:a1:fa:
49:fd:4d:f2:e9:52:53:6a:45:e1:0c:0e:71:b5:57:ea:cb:99:
33:86:a9:53:07:65:10:da:9c:36:94:9b:1d:4b:78:99:7e:e0:
eb:15:0e:0f:ad:3f:03:ae:02:56:d6:0f:f2:68:d0:0d:08:87:
94:3e:6c:6d:a0:8b:4d:6d:b6:ae:4f:1f:a8:d2:d4:0c:47:bd:
db:ba:2a:01:bb:e0:27:55:8f:b1:5d:17:d2:e9:f8:36:83:04:
f3:f1:ea:56:27:6b:c4:a6:af:c7:fe:f8:72:98:fb:bf:b6:6c:
74:65:7f:d5:06:02:c1:d7:d1:5e:5a:27:5e:39:b9:f0:7f:fb:
46:0f:4e:89:89:f5:c8:0b:b2:85:79:58:6f:0d:37:36:d5:22:
2c:aa:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:28:45 2025 by rpki-client