Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: lL4pNuSkAxSLQkdcvBBNbnSnd6t7SIMzyJvD0tsYZWw=
Subject key identifier: 48:FA:89:AF:83:3A:D2:1D:B7:7B:BA:67:89:42:EC:A1:97:DD:37:38
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 01967EA16BE182A8B623C4EB6371DE431038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 151B
Signing time: Mon 28 Apr 2025 23:00:30 +0000
Manifest this update: Mon 28 Apr 2025 23:00:30 +0000
Manifest next update: Tue 29 Apr 2025 23:00:30 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: 7gsJYSv08bJ7JKarsRBrKERSVycI+bV7iEwxnnYGshk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:6b:e1:82:a8:b6:23:c4:eb:63:71:de:43:10:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Apr 28 23:00:30 2025 GMT
Not After : Apr 29 23:00:30 2025 GMT
Subject: CN=48fa89af833ad21db77bba678942eca197dd3738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:b8:5f:ff:31:31:6d:7f:a2:64:2e:0f:c7:
95:3f:65:47:1d:5c:05:cf:4a:4f:d4:ee:8b:65:c4:
4d:de:78:38:e1:c4:b5:93:2d:e2:a5:92:0e:f4:0c:
ee:92:ba:86:d1:58:9f:15:b3:a8:ce:db:9e:c1:26:
43:01:90:2b:ff:71:45:96:cf:1a:ea:ca:d3:b1:39:
21:65:d1:31:1b:6c:96:73:18:f3:7e:46:f4:14:6a:
ba:21:e3:d9:e5:49:c9:db:5d:79:07:65:e9:d8:62:
bc:c0:a3:a9:b0:25:e7:c9:90:cb:52:8e:b6:d0:2d:
66:c1:0e:5f:d6:e7:64:7c:25:b7:38:73:38:80:f1:
f2:bb:7b:f7:8b:6f:a4:cc:28:04:4e:64:b1:7e:54:
ad:31:19:f6:19:3a:be:38:73:93:79:af:4f:25:62:
5e:4d:77:e4:5f:da:1b:06:39:ba:eb:a7:5c:5e:de:
4a:e5:b0:f7:38:87:e8:c8:b9:fe:28:12:e9:7c:80:
69:53:e8:4e:d5:9a:a9:b5:2a:bc:a3:5a:5c:00:63:
ec:4a:4c:b9:84:ea:d9:76:43:0f:b6:46:0c:21:8d:
ae:e5:78:4d:c7:81:1e:c7:7c:a7:f5:88:40:b8:24:
6e:69:d1:b0:2f:66:0a:a2:8a:b8:db:57:9d:c7:7b:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:89:AF:83:3A:D2:1D:B7:7B:BA:67:89:42:EC:A1:97:DD:37:38
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:76:5a:0f:60:f2:e7:b3:e5:7c:c3:2c:5d:c0:8d:99:58:8f:
c8:e3:3f:40:ea:3e:b2:1f:78:79:67:d3:66:d9:63:e9:c9:02:
30:4f:f1:9e:db:d0:16:b7:39:9b:7a:26:65:2a:8d:15:35:15:
97:44:17:c8:21:92:64:57:15:53:dd:23:93:27:46:55:f4:a3:
81:06:62:0c:34:63:d8:17:dc:30:3d:e8:f9:75:4b:0b:40:a8:
0a:50:a0:db:b3:73:67:61:53:f3:4a:ea:c3:dd:de:85:fe:ce:
24:82:44:e6:dd:29:9f:10:55:31:7e:4a:91:27:c8:fb:d0:1a:
25:9e:91:e4:b6:83:fa:9e:85:1c:77:7a:62:3c:29:d3:14:9b:
b1:ca:2c:33:d0:4c:85:36:bb:b8:e2:16:71:74:69:6d:3e:71:
15:33:ad:a0:96:b8:7c:2d:a9:ca:df:47:10:33:f9:79:17:c5:
e0:4a:c1:dd:27:5c:57:a5:e3:cb:7d:1a:a0:f8:0d:2c:08:bd:
a7:3e:bc:44:5f:b5:66:a3:0a:da:3b:1a:02:a3:cd:ba:82:ca:
02:c2:d4:cf:2f:84:4a:b2:56:3c:af:b0:5b:e3:e2:d5:0b:59:
9f:90:36:48:98:59:23:8d:06:bf:41:d6:6f:1f:13:9a:46:b2:
3f:40:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:33:02 2025 by rpki-client