Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier: D6FAya7kfC2nNbJ7qvtXnM2Z3UxGA9Wgl/0Lp+3VePg=
Subject key identifier: A2:57:63:C7:D7:30:A6:9F:4E:E7:BC:7E:DD:C9:18:BC:3B:0B:FF:74
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial: 019677C3D0B6D4E603DDDCA55FF2A26C0C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 15:00:43 +0000
Manifest this update: Sun 27 Apr 2025 15:00:43 +0000
Manifest next update: Mon 28 Apr 2025 15:00:43 +0000
Files and hashes: 1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: tZSWzaIF4/T3vY8SyPoFLp5g/B7Hd10P0GshZeFL93g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:d0:b6:d4:e6:03:dd:dc:a5:5f:f2:a2:6c:0c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Validity
Not Before: Apr 27 15:00:43 2025 GMT
Not After : Apr 28 15:00:43 2025 GMT
Subject: CN=a25763c7d730a69f4ee7bc7eddc918bc3b0bff74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:a4:a2:1c:e0:87:63:5e:8c:22:f6:bf:b2:
cb:ed:17:35:17:05:3e:95:97:79:9c:a4:56:d2:50:
ef:2e:d5:fe:ef:91:83:ed:bb:e5:09:2a:5a:1b:a4:
7d:29:3e:3b:72:19:9e:65:1b:2b:c2:39:aa:be:38:
6a:f4:fd:9d:b3:fc:1b:eb:e6:73:21:35:54:c6:bf:
e2:f5:b4:47:d0:5d:ce:f7:4b:19:f6:88:d3:9d:2a:
e0:99:a0:c6:57:34:3d:39:0a:41:cd:86:1b:67:e4:
ff:ac:03:dc:19:08:b4:35:a6:d9:3d:48:52:0f:48:
48:53:16:e6:73:36:cd:13:a8:51:2a:29:db:15:8c:
83:46:1d:c1:83:b1:60:a8:fd:ba:a5:9c:75:db:3a:
49:60:6a:5b:09:b8:44:e2:bc:27:8d:42:6a:cf:e5:
34:d8:ca:99:2a:01:fe:b7:2d:d6:ec:bd:aa:40:f3:
39:c7:b9:f2:1c:61:e6:66:c7:40:6d:76:27:f0:a0:
67:1c:86:f7:e6:da:c3:87:3f:36:b6:b8:63:20:d3:
ef:5c:1c:99:23:d0:44:1c:44:98:d9:99:0c:9d:a5:
0e:69:4d:53:c7:ee:2d:8f:2d:cb:8e:58:d1:22:77:
10:5a:d4:28:3e:c7:a4:0f:1b:89:c0:5c:0c:c5:c3:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:57:63:C7:D7:30:A6:9F:4E:E7:BC:7E:DD:C9:18:BC:3B:0B:FF:74
X509v3 Authority Key Identifier:
keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f2:f7:25:e2:4d:7a:2e:26:87:9e:cb:f2:1d:93:28:db:1a:
ef:cb:1a:c6:2a:75:cc:be:b8:8c:24:4c:87:85:62:d0:92:0d:
24:c3:65:fa:e2:6a:52:39:d9:b3:f3:fe:5f:45:c2:84:5d:e5:
39:ed:95:b5:5c:fb:89:66:0e:b7:de:a0:c5:56:73:6a:85:8d:
cf:80:9a:60:d8:6f:8f:32:f5:7e:67:b7:18:7b:10:ac:81:0c:
fe:96:72:e1:50:c4:8f:b0:08:7c:5d:ad:28:3d:53:0c:70:6d:
a9:4a:59:d2:e7:e3:f9:d6:d5:b9:6d:46:a8:9b:ff:c5:ae:56:
2e:84:df:84:36:3f:2c:b8:43:16:55:41:9d:df:cf:8a:82:33:
d7:3c:89:9a:41:68:8f:a2:21:da:84:6d:5c:10:ee:4a:64:e5:
5e:45:00:be:57:5d:1c:ec:2e:23:b2:68:5f:c1:5a:44:d0:e1:
d6:ea:b6:f2:de:0e:7e:eb:34:99:92:94:49:67:c5:0b:a4:29:
99:fb:81:4c:b1:9f:53:01:2e:5c:ab:7e:d5:c0:2a:5e:6f:44:
8b:a1:81:50:51:79:ed:20:01:e0:67:7c:8a:e1:4b:03:b7:43:
f3:c5:9c:09:06:c9:2b:2b:50:9a:01:30:6d:2e:20:91:c6:96:
74:af:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:50:18 2025 by rpki-client