Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: nVTeROvZs0ZV7iLzfwKMHILHpp11LGRIRZpTEncvgLc=
Subject key identifier: 33:82:26:D5:6D:06:37:E2:DC:BE:67:7A:8D:32:DD:9D:1F:E4:2F:7A
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 019679B2314C44BD81F6DBCB3E31C40CD220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 00:00:43 +0000
Manifest this update: Mon 28 Apr 2025 00:00:43 +0000
Manifest next update: Tue 29 Apr 2025 00:00:43 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: /3c6HOM5HIkxiOVqAVAgTTwz8bAIVdj9Zw0/EAjbMBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:31:4c:44:bd:81:f6:db:cb:3e:31:c4:0c:d2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Apr 28 00:00:43 2025 GMT
Not After : Apr 29 00:00:43 2025 GMT
Subject: CN=338226d56d0637e2dcbe677a8d32dd9d1fe42f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:b8:61:2b:60:f0:93:ab:aa:54:a9:4a:d3:
6b:39:fd:22:e2:7d:73:20:00:59:ee:90:13:8d:88:
31:83:fa:dc:81:7b:8a:f3:e2:a2:6b:f7:1f:0e:ed:
6e:d3:d1:cf:9a:e0:21:fd:c6:64:00:ad:e6:de:8f:
64:ed:09:42:da:9e:6c:65:3c:3d:ac:f5:94:c5:1b:
29:1d:d4:95:2b:6b:e0:20:78:55:c0:34:da:a8:cb:
78:36:0e:5f:0c:e5:b8:c7:8c:0d:16:fe:a1:50:7c:
5f:4f:4c:c7:a2:b8:e6:35:9d:1b:67:fe:11:d9:f5:
48:02:b6:3e:26:6a:8f:f2:c4:71:71:ed:68:ac:a9:
c8:44:d7:ef:26:e6:40:00:48:c9:6b:b5:ba:2e:55:
e4:d6:60:26:d6:e5:1c:b4:a2:08:42:90:50:58:27:
54:42:07:db:8e:34:26:fb:18:26:de:3a:f2:e7:4f:
a7:d5:22:e9:db:0d:3e:1a:c5:11:4e:51:b2:6a:ba:
c5:f6:a4:a8:54:32:c9:87:8a:9b:f0:8d:4e:54:82:
6b:71:ad:a2:89:cc:5a:31:fd:67:21:94:33:32:02:
4b:1a:a9:02:db:10:09:1c:fa:9a:ea:26:d0:a9:22:
a2:39:3e:d6:12:68:9c:ba:13:db:c1:be:cb:a7:8f:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:26:D5:6D:06:37:E2:DC:BE:67:7A:8D:32:DD:9D:1F:E4:2F:7A
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d9:46:61:90:56:f0:e0:5f:de:62:11:60:67:ce:5e:3c:70:
ac:db:4d:bf:9d:7b:ff:b3:72:0d:a2:17:ed:4b:4d:1f:06:f9:
90:cf:4d:9f:ef:7e:0c:a7:cc:cf:f7:3f:8e:f3:af:3b:d6:c1:
a1:11:42:12:a0:3b:4a:cd:b7:3a:d3:a5:f8:99:da:fe:2f:cb:
30:fc:3b:67:7d:87:42:db:2f:6a:0a:ad:7f:2a:46:34:d6:a5:
0b:19:b4:37:35:65:89:9b:da:12:17:06:bb:76:4e:45:af:eb:
62:b9:39:b1:9e:91:89:e1:2a:76:3f:52:f0:cf:5f:5b:85:16:
27:de:db:6f:bb:5f:b1:fc:2b:3b:43:b9:c6:48:ca:f8:46:8a:
e2:18:44:4a:51:b4:cc:0d:75:df:4e:bc:51:a8:92:f6:ee:6c:
8d:b7:97:ac:a0:73:00:c1:ef:5f:d7:ae:fe:c2:a8:ef:8e:79:
68:17:58:a8:a8:86:a9:0a:8e:55:59:45:a2:2d:5d:22:ba:cc:
0c:bd:4f:c1:7d:c9:34:18:cc:99:a3:8d:24:f7:69:42:aa:43:
6f:87:cd:b0:50:c9:30:58:3d:3c:e0:c9:fe:ab:41:73:38:0b:
22:2f:46:84:88:65:9c:75:72:60:4d:80:21:40:6c:ca:78:86:
15:6e:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:12:33 2025 by rpki-client