Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: w2H0I+tgUb23CtN4okzNpVZDGoN3J0R2PEL1ec2QQ4Y=
Subject key identifier: E4:8A:2B:46:A4:C5:27:3B:62:8F:D9:9A:5C:6D:42:D0:B6:C4:52:FF
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 019673792231369CBEFA6AFAF1F6B063F952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 0F3A
Signing time: Sat 26 Apr 2025 19:00:40 +0000
Manifest this update: Sat 26 Apr 2025 19:00:40 +0000
Manifest next update: Sun 27 Apr 2025 19:00:40 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: fZQZTZa0ND/FIQ1nY44DrKU/GrKRp1pmpJbEtHYFfIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:22:31:36:9c:be:fa:6a:fa:f1:f6:b0:63:f9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Apr 26 19:00:40 2025 GMT
Not After : Apr 27 19:00:40 2025 GMT
Subject: CN=e48a2b46a4c5273b628fd99a5c6d42d0b6c452ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:3d:09:12:dc:48:45:d0:5b:21:54:71:d9:
a0:7c:3a:83:b8:ff:fc:9b:cb:9f:f6:b3:43:ce:d3:
44:8d:9e:6b:c3:69:5c:d9:bb:c6:6e:0d:4f:51:db:
4e:52:0a:3c:ce:da:77:3b:6f:2b:cb:4d:f4:ad:c6:
b6:f8:3a:42:7b:30:ce:65:ed:3e:dd:24:8f:b4:8e:
a0:2f:7c:d5:8b:14:e4:e9:0e:16:98:8f:8b:f1:2e:
c6:53:81:2f:2f:4b:d5:2b:ed:8e:d3:19:89:fa:d3:
b4:d3:b7:14:1f:eb:31:1d:37:ee:10:48:ed:c4:98:
a0:19:5b:9d:e5:08:0c:7f:ab:6c:30:63:f8:f5:cd:
53:36:2e:dd:30:1f:38:36:b5:7e:87:32:cd:14:85:
0f:01:af:b4:88:2e:65:97:9d:d3:36:4e:1d:06:2d:
f1:ba:40:b4:86:60:c8:70:4f:d6:55:07:15:15:3b:
e3:a1:62:30:db:e9:98:3c:2e:40:02:b0:29:b0:80:
21:36:be:57:06:4f:71:95:ed:ed:dc:59:3d:56:b7:
c4:76:d0:13:4d:2a:11:9b:67:49:f1:8b:7a:e6:4d:
84:85:ad:58:8c:19:a7:b1:07:b2:d6:e2:5e:a6:97:
4f:ae:a7:f7:ea:f6:6e:f9:16:fb:cd:73:0b:7f:2a:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8A:2B:46:A4:C5:27:3B:62:8F:D9:9A:5C:6D:42:D0:B6:C4:52:FF
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:20:a8:1e:bc:83:77:9b:39:3b:59:e5:05:01:9c:fc:09:
dc:c5:bd:7d:fa:28:4a:31:9f:0b:88:24:7d:7a:3a:44:ca:6d:
ea:ea:56:74:be:bb:cf:18:bf:fe:46:a4:8e:72:31:22:7e:32:
70:3d:67:e0:26:d8:62:33:81:92:27:0f:e0:fc:85:23:86:10:
47:54:ae:8a:69:13:70:af:7c:1e:b0:26:7a:02:88:7d:96:aa:
cb:de:f9:d4:13:e6:ae:b3:aa:cb:06:52:5f:68:a1:83:24:a4:
6c:24:88:60:e4:a2:a3:3c:8d:9b:85:90:69:c7:0f:57:4b:ba:
06:a4:09:b4:c0:a0:1e:73:4f:b7:99:6a:66:56:c5:62:3e:30:
fc:f3:40:80:f2:c4:6f:bd:2d:42:4a:fc:d7:40:b8:6b:c9:c0:
0a:6d:06:61:75:79:f1:4a:1b:09:bc:1b:07:61:be:59:a4:f6:
58:10:41:7a:4b:9b:05:49:9a:90:1c:77:eb:a3:7e:44:96:3a:
b3:b8:04:62:c5:59:60:24:49:04:57:c7:45:b7:6c:bb:6a:9b:
23:d8:eb:c5:b9:ce:f9:31:78:09:13:0c:50:e5:a2:25:cd:3a:
ef:2b:e7:06:0f:f5:60:bc:0f:60:35:59:fe:96:45:30:bc:7b:
54:bb:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:42 2025 by rpki-client