Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: ABpCESMJRcxV2K5LxdlFE/WtiasMeAzpmot1nIBeNKE=
Subject key identifier: 0F:3E:A9:3E:E5:44:58:6C:E3:44:B0:3E:DA:86:33:02:DC:F1:56:F1
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 019676E7C9DAB5010A003F5FFBDED8C73991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 11:00:23 +0000
Manifest this update: Sun 27 Apr 2025 11:00:23 +0000
Manifest next update: Mon 28 Apr 2025 11:00:23 +0000
Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: zK73biZ1aNIB9Ol8KOKayuTyzxxyHJHkCBLoZqKeuXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:c9:da:b5:01:0a:00:3f:5f:fb:de:d8:c7:39:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Apr 27 11:00:23 2025 GMT
Not After : Apr 28 11:00:23 2025 GMT
Subject: CN=0f3ea93ee544586ce344b03eda863302dcf156f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e7:48:1b:8f:c1:47:8c:d2:3e:2d:2f:cc:07:
95:5a:eb:d5:33:98:ad:c7:1b:c7:ae:95:c2:be:16:
4c:9c:5b:f3:0a:8e:2a:57:b6:02:40:69:9d:a7:83:
3c:8b:0b:be:9c:74:51:ea:45:6b:3e:09:fb:a1:3c:
11:33:c5:d8:bf:92:5b:ce:53:b7:ab:eb:24:95:fe:
66:88:2e:25:b6:09:be:ae:5f:61:ae:19:2e:72:5e:
a7:0d:20:66:6a:27:6a:1e:00:a0:e2:90:16:12:20:
39:c9:4e:c2:9c:9f:8e:05:62:c9:38:dc:1e:37:8a:
f8:02:dd:a3:44:27:7e:35:d8:9e:22:59:f4:42:54:
14:67:ad:74:66:50:67:54:f3:a6:e6:1e:9f:b0:6a:
63:7d:c8:9f:e7:ff:9a:a6:33:ff:fb:93:2d:2e:4a:
0a:25:d5:be:15:17:a6:5a:63:78:23:cc:b0:a2:cf:
2a:8f:bd:a8:24:a9:bd:a8:18:a2:2f:16:d4:fc:4d:
cc:04:12:e5:46:f5:aa:d3:39:01:69:d6:95:26:bb:
09:dd:c9:65:b2:5a:15:df:db:8f:0f:3c:3b:8c:9f:
db:1c:b1:b0:08:38:3d:78:a6:25:e9:3e:01:5e:d0:
64:c6:57:89:fb:de:ac:dc:98:96:86:76:39:e8:5f:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:A9:3E:E5:44:58:6C:E3:44:B0:3E:DA:86:33:02:DC:F1:56:F1
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:5f:b5:ef:6d:7b:87:58:22:21:44:a4:34:75:86:7c:67:
64:da:98:59:bd:d9:3e:6e:27:2a:27:e4:3d:7b:4f:64:de:54:
97:2a:4c:3f:07:80:f4:3b:8c:c7:a1:6a:a9:f1:27:b0:8e:08:
dc:80:46:28:b3:18:92:8f:06:64:be:83:57:ed:d7:09:ca:cc:
b3:9f:54:5b:89:a9:e0:1f:8b:87:ba:1d:5b:95:7b:33:f9:85:
34:ac:29:de:0c:52:46:31:a4:c8:18:b4:94:61:55:9c:31:03:
6e:5f:19:66:6e:da:91:27:dd:54:da:50:a6:34:5b:ac:5a:52:
4c:9f:cb:7d:cb:5b:eb:39:42:8f:47:cc:6d:64:b5:8d:a9:9b:
22:88:79:45:68:97:2d:e4:5e:6e:c3:73:19:f3:c7:20:92:90:
98:d4:75:9b:18:79:b5:d1:c1:c0:a0:65:f9:66:83:cc:b7:e3:
fa:20:57:d0:15:e1:d1:59:bf:d9:e0:cc:3c:5c:cb:ae:a3:2b:
7c:81:a5:04:28:e3:27:de:c9:cb:82:46:2d:d5:13:5e:38:20:
35:fc:15:e8:b1:d3:4d:9f:16:e9:eb:dc:ae:d1:0c:75:f0:5e:
f6:70:4a:ba:b7:0f:fe:70:23:18:0a:0a:b2:ef:26:2f:50:67:
97:2e:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:52:35 2025 by rpki-client