Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
File: Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json)
Hash identifier: r5W9+ZyFxe+3O7p71CWRG9WBjegt37pK0z2aVh3lRFo=
Subject key identifier: 07:1D:DE:BB:25:27:8D:71:2F:A3:2D:5B:F9:F5:C8:5C:33:E6:F2:FC
Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
Certificate issuer: /CN=66be521093bb89dc76250b227f7f7fba66e228d8
Certificate serial: 0196767A28AD8A5CBB3AAE89E40A5B2948EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
Manifest number: 63
Signing time: Sun 27 Apr 2025 09:00:39 +0000
Manifest this update: Sun 27 Apr 2025 09:00:39 +0000
Manifest next update: Mon 28 Apr 2025 09:00:39 +0000
Files and hashes: 1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: 8teI/q0eP2FypyNrOI+m24P7q7vAlHlxLB+9DpGcxvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:28:ad:8a:5c:bb:3a:ae:89:e4:0a:5b:29:48:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8
Validity
Not Before: Apr 27 09:00:39 2025 GMT
Not After : Apr 28 09:00:39 2025 GMT
Subject: CN=071ddebb25278d712fa32d5bf9f5c85c33e6f2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:44:de:e4:10:04:61:19:2f:5b:64:c8:86:
df:ae:8f:d4:5e:4d:fc:77:89:48:00:db:c2:b8:0c:
38:af:3d:6f:b9:56:02:8f:2e:93:45:2f:42:6b:54:
7e:ac:eb:0d:27:2f:07:bf:1f:5e:d9:fe:b0:6a:0b:
18:c1:c1:10:97:71:78:75:fa:9d:14:a7:16:52:b7:
8f:24:42:68:3f:7b:a1:55:8e:7d:b2:14:16:15:3e:
41:9b:d0:d5:50:d6:28:07:bf:8f:cf:7d:31:84:94:
ff:5d:2b:a3:e7:40:6f:d9:8b:e1:ce:6b:c8:55:f4:
59:3c:4a:c6:df:b0:ee:a6:21:7f:f7:33:45:81:35:
fa:8e:e5:34:e4:cf:a6:a3:06:e1:5f:1b:5c:7b:1f:
c1:be:b8:3d:46:24:a9:59:af:b0:ed:7a:ba:1a:bc:
64:b3:0d:db:87:8b:b9:0b:37:6b:08:c9:bb:93:83:
64:3e:89:f1:e6:42:5d:68:5d:80:e2:52:0b:96:be:
0f:e9:a2:2b:73:17:bb:2d:0e:8c:7b:e0:38:1a:12:
27:5a:f6:a8:5d:6a:b1:4f:40:c3:50:a6:cc:43:c8:
d1:d9:9c:3e:fc:db:2b:20:65:91:c0:f1:19:e2:04:
66:9d:fa:2b:dd:0a:e9:d0:f6:f1:17:6c:f8:03:32:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:DE:BB:25:27:8D:71:2F:A3:2D:5B:F9:F5:C8:5C:33:E6:F2:FC
X509v3 Authority Key Identifier:
keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:09:56:98:c2:b4:e2:ae:60:79:01:40:ff:a2:3e:a0:5f:6e:
6b:a3:de:ff:34:04:53:93:af:ef:7a:16:05:52:a9:8b:d3:83:
5b:f2:14:fd:05:5c:6a:ae:d4:c6:ce:45:e0:2c:6d:2a:50:c2:
de:f2:36:ed:a1:e1:6e:18:fc:17:ad:44:c7:6a:b1:0a:b2:91:
81:0d:ca:da:a9:dc:f9:55:12:38:84:fc:07:06:5a:dd:f0:c2:
05:bb:c1:23:28:90:e3:90:f8:10:e2:3f:a4:64:a2:b8:60:83:
fc:df:e2:ec:a8:8e:18:cb:3d:b1:a7:57:fa:de:2b:05:00:12:
65:a0:ac:f2:45:c8:06:9e:d0:f0:df:b9:dc:fa:e6:8a:d8:50:
e6:cd:6f:c6:1d:91:d2:ca:a7:ad:84:53:5e:b0:be:fd:de:64:
c6:5d:01:a0:10:4b:b3:6e:54:6d:29:13:81:aa:57:ff:6a:11:
c9:a2:63:82:4a:bd:fa:47:45:83:90:e8:75:8f:fe:84:0d:5d:
e0:ca:a3:0f:59:53:32:77:51:0d:ed:5e:5f:4b:eb:52:c8:35:
0b:a2:14:41:f8:5c:70:bb:fa:61:f6:d5:95:ca:ce:f4:e4:f8:
8e:f0:2b:7c:e9:af:1f:a2:b1:ad:d6:33:37:fd:60:fc:11:e3:
f1:a1:1f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:48 2025 by rpki-client