Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: J/kuyuLBczHHmS6ed3wV4LHxchovd0ci4Bo1iUvoWsE=
Subject key identifier: 51:E4:97:B7:A5:CC:48:7E:6B:07:DF:E3:8F:13:E8:95:20:29:98:11
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 0196A9F9D1C322864F16774E3D16A45614C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 0220
Signing time: Wed 07 May 2025 09:00:43 +0000
Manifest this update: Wed 07 May 2025 09:00:43 +0000
Manifest next update: Thu 08 May 2025 09:00:43 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: ZMvLnlqFmn4N8ieoA9jGvVN6xTTcimSunOCfW95X7zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:d1:c3:22:86:4f:16:77:4e:3d:16:a4:56:14:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: May 7 09:00:43 2025 GMT
Not After : May 8 09:00:43 2025 GMT
Subject: CN=51e497b7a5cc487e6b07dfe38f13e89520299811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:0b:cd:2d:eb:aa:9d:e9:6b:84:5e:c5:85:
85:4c:ce:c2:ce:e5:bd:7c:f4:8a:ee:9c:07:9a:d5:
e7:f8:ea:ee:aa:92:cb:7c:29:17:c0:3c:c8:bf:be:
0d:c6:74:45:5a:50:ca:67:bf:b1:1b:da:8c:8b:05:
77:54:49:23:93:99:83:59:d8:5d:ca:8d:cb:1e:12:
68:81:13:c1:02:d9:44:fc:45:d8:29:c9:e1:90:4e:
6a:16:38:44:ef:ee:50:1b:f0:03:d0:8d:a8:07:ef:
e1:ad:bd:98:30:56:e5:5e:04:b0:55:60:7f:d8:46:
da:80:30:51:3d:8a:67:bb:53:cd:8e:65:ab:6f:4c:
57:62:16:11:34:4d:f3:be:b4:43:15:3d:12:4d:df:
e6:29:b9:95:aa:25:70:c9:33:ef:ce:ca:fd:86:2c:
44:02:33:46:a6:4e:6d:8d:70:23:a1:04:57:15:cb:
8b:84:ff:da:0f:d4:ae:bb:04:73:fe:0f:bf:8e:bd:
57:09:98:11:fe:36:16:83:6d:37:6e:f5:ae:2b:da:
82:c0:49:ba:aa:bf:78:ad:ed:66:d8:8c:0f:56:c2:
f7:4e:53:9f:d8:1d:1b:63:74:bf:72:02:14:fa:34:
55:3f:e0:c0:11:75:f5:64:f9:39:6c:b4:2c:6c:96:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E4:97:B7:A5:CC:48:7E:6B:07:DF:E3:8F:13:E8:95:20:29:98:11
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:15:41:e3:24:f5:a9:4c:62:35:de:9a:d7:96:ad:0d:dc:32:
64:f5:97:70:d0:13:eb:c2:f0:4e:a5:11:96:a2:98:97:e7:ac:
68:86:ce:03:4e:e7:f0:96:84:91:81:11:43:49:f3:88:1c:4b:
08:f6:0d:d7:f0:16:9e:73:d9:39:95:d5:ac:eb:a4:dc:30:37:
58:78:85:da:62:0b:3f:a7:82:51:ba:3e:28:04:00:bf:e5:b8:
7d:7c:58:b2:39:56:b3:a2:fd:1f:03:9a:55:de:50:c1:50:e3:
5e:23:a2:5a:5e:67:51:0c:b9:82:57:0c:9e:eb:bd:ca:9c:ab:
bc:a5:90:2b:50:dc:1e:fa:7f:7f:4d:28:38:e4:4d:e4:89:19:
cd:58:60:59:9d:62:ce:9a:26:27:4c:69:a3:18:95:54:dd:bb:
f6:8f:10:2c:47:93:47:ea:8d:40:d9:ba:62:e6:57:dd:2c:0b:
f1:63:f6:d1:71:86:36:19:d4:e8:08:28:97:3c:dc:1b:05:31:
d1:b9:a5:1c:ca:e8:cb:51:8f:c6:d1:7c:66:42:20:b7:b7:bb:
75:2a:cc:65:25:9a:a7:1f:6b:b6:a9:f1:2e:73:80:af:28:56:
24:90:95:fb:c0:fa:a7:b4:e9:14:8f:ec:cb:3d:11:cc:d5:b6:
51:ee:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:18:23 2025 by rpki-client