Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: hiaM6110r/S0SeV4KBB2F+4FG9iFEJWermk/RSHSUfQ=
Subject key identifier: 6E:ED:60:0D:90:19:51:98:9A:9D:C5:08:96:2E:45:BC:90:D3:A0:61
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 01967FB45D64FFFA74FFAAE5FEA584B841BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 0CAD
Signing time: Tue 29 Apr 2025 04:00:48 +0000
Manifest this update: Tue 29 Apr 2025 04:00:48 +0000
Manifest next update: Wed 30 Apr 2025 04:00:48 +0000
Files and hashes: 1: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: oChXQ4NCIFpYwP2CvYTW4/TZH8KqqEfxSJWNknCXiNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:5d:64:ff:fa:74:ff:aa:e5:fe:a5:84:b8:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Apr 29 04:00:48 2025 GMT
Not After : Apr 30 04:00:48 2025 GMT
Subject: CN=6eed600d901951989a9dc508962e45bc90d3a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:0d:ed:41:49:1b:ed:33:73:e7:42:a6:74:
6a:f5:31:bd:3a:36:73:4e:25:60:5f:0b:45:dd:39:
15:74:d5:69:e8:ad:06:05:c4:d9:3b:57:2e:7f:31:
d7:32:84:a0:93:fb:f4:4b:1b:91:b4:d3:6f:9f:d8:
a1:3e:3e:fa:ff:cd:5a:0e:26:16:c4:0b:5c:a7:17:
47:70:3d:25:90:e6:6f:8f:c8:91:ae:16:e7:2f:6d:
80:96:f6:4b:e2:94:b8:45:72:3f:4b:b3:d5:ce:46:
65:1c:70:bf:6a:29:45:84:85:bc:56:48:a2:70:6d:
e2:b3:41:82:1a:da:a1:a9:70:90:e7:8b:9d:77:7c:
1d:86:22:35:54:4d:a3:f7:83:b5:83:b3:cb:7b:77:
cd:94:86:98:c2:60:8d:40:b2:37:37:11:d7:90:83:
02:8e:83:9f:ad:c4:2e:5f:b9:17:6a:cf:34:ee:11:
35:d5:de:d5:a3:08:1a:d3:0e:7a:f8:c8:75:c9:c2:
b8:b7:6f:fa:f3:0e:59:0d:80:c1:8b:5c:00:6a:44:
f9:b6:3d:07:af:0f:ba:63:23:89:e3:8f:61:d2:27:
f7:88:19:a6:96:35:60:47:6e:e2:23:bc:f8:a3:6e:
61:da:9e:7f:f8:1f:00:17:6a:dd:15:e8:18:17:d9:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:ED:60:0D:90:19:51:98:9A:9D:C5:08:96:2E:45:BC:90:D3:A0:61
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d7:c1:5d:4d:7a:6a:ab:67:4b:92:d0:fb:77:7b:4a:69:0d:
fa:77:e6:19:65:40:23:ff:9f:5a:99:4c:11:61:72:92:21:48:
27:3f:7a:05:42:87:57:b3:9e:ad:4a:40:33:61:9f:b8:3c:72:
33:01:a5:8a:0f:bc:a5:09:0a:7c:3b:57:68:b2:20:5c:b6:b8:
46:ea:13:de:e6:56:81:57:10:40:4d:ad:54:16:75:3f:8d:5c:
15:16:ec:bf:3b:08:d8:26:c7:88:00:b4:fe:5a:6b:88:ee:4f:
bf:04:79:c9:ed:21:83:ca:57:f1:d3:72:1e:13:2a:8b:6f:3e:
2f:4f:87:1b:40:ca:7c:41:d1:a4:7f:34:b9:c8:3c:3a:5b:35:
c3:cc:7c:93:f9:b8:26:bd:51:8a:b4:b0:30:6f:7d:9d:a5:9f:
98:51:ac:e0:9e:36:1a:90:02:7e:89:82:c4:e3:d2:df:2d:31:
2a:9f:e1:43:bf:14:eb:95:f5:5e:94:96:cc:ad:5a:21:7d:f5:
2c:fb:9b:05:4b:ae:b2:ae:88:37:7a:c6:06:df:32:8f:83:0f:
38:6a:12:5c:dd:db:4c:42:ee:99:1f:19:3d:a0:7f:c3:5a:55:
3d:71:1b:df:7a:ef:d3:56:16:38:a0:68:8a:87:b5:dc:e8:ed:
5b:d9:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:37:42 2025 by rpki-client