Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: ZuwVbRbilY36s5Wt5ooK24+iLe8iWUHN1FSZkgSvSd4=
Subject key identifier: 31:2E:D1:20:4C:3F:A5:89:8E:93:37:A7:7C:C8:8D:04:B5:1F:8D:9B
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 01967755996A7AB8AE3288D61D23AAF30CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 13:00:20 +0000
Manifest this update: Sun 27 Apr 2025 13:00:20 +0000
Manifest next update: Mon 28 Apr 2025 13:00:20 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: 3gOLoJq3g+V6h8ZM8csyjTn8lIPTAZce2TR57FKlRP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:99:6a:7a:b8:ae:32:88:d6:1d:23:aa:f3:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Apr 27 13:00:20 2025 GMT
Not After : Apr 28 13:00:20 2025 GMT
Subject: CN=312ed1204c3fa5898e9337a77cc88d04b51f8d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:f3:e7:a6:00:fa:fd:47:48:18:3f:7f:99:
dc:b5:d4:74:d0:57:e3:48:0f:dd:a2:6d:01:ea:fd:
d9:3b:31:23:32:b8:bf:06:3d:cd:88:18:ed:53:6c:
5e:9d:58:3a:39:0a:0b:0a:19:9d:9b:44:99:e7:4d:
df:24:52:20:59:ab:71:98:ae:73:17:f0:f7:d0:cc:
15:50:36:18:9f:db:a2:b0:a4:3f:b7:8d:35:e6:17:
95:83:3a:2e:f7:44:b5:47:ff:af:36:e0:ec:cb:7d:
06:42:2c:67:9d:a4:f9:d7:81:47:08:3e:72:fe:24:
ad:94:e4:b2:b7:20:9d:28:38:06:f0:86:14:e8:8b:
19:76:75:f0:24:29:c7:e4:41:2d:d6:a7:f7:9c:94:
41:24:8f:9f:67:39:79:41:5f:18:6b:95:bd:69:04:
ab:2a:e0:df:d5:05:63:2a:2f:88:f5:9c:46:7e:f8:
c9:b5:57:fd:90:04:0f:d4:04:55:cc:5f:e6:bd:5f:
c4:60:c9:89:81:32:eb:55:fd:eb:1c:84:9f:f7:a3:
8e:51:7c:11:65:7d:9a:0e:61:12:c7:2c:f2:b6:a5:
84:f3:02:6b:d6:ea:15:5c:bb:cc:d5:30:eb:ef:eb:
79:23:a3:f1:b5:0d:e1:e7:d8:eb:e5:cd:51:5a:e6:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:D1:20:4C:3F:A5:89:8E:93:37:A7:7C:C8:8D:04:B5:1F:8D:9B
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:27:c0:6b:1f:e1:21:0b:aa:54:20:fc:2f:11:77:64:3b:08:
93:14:29:7e:93:49:bf:9e:9e:18:73:a0:ed:9b:eb:6a:66:c2:
40:6d:07:f6:a1:11:ec:66:01:4a:56:f6:99:82:11:36:b7:ab:
5f:42:d8:61:29:00:de:0d:69:d5:44:89:ad:c5:93:57:cc:63:
f2:2c:ab:6f:b2:9a:63:7e:c3:ae:4a:1f:2f:37:5b:3c:16:88:
e2:24:24:1b:41:63:41:3f:6b:c6:b6:cc:aa:da:0f:5c:b4:8c:
b9:07:8b:94:c6:de:a2:27:5b:00:09:12:51:fa:1a:ed:f9:3d:
1d:4d:55:6e:47:d3:0c:b0:5f:c7:ec:78:70:db:8f:39:3c:77:
58:64:1a:47:d3:27:04:53:72:de:ac:61:2c:30:70:03:8d:91:
a4:19:f7:57:76:09:b8:84:96:65:fb:4b:aa:b0:e0:18:60:a5:
2b:9e:e7:4c:cc:03:bf:0b:62:52:50:21:2c:4a:8e:6f:e6:a9:
c0:50:fb:52:e5:2c:79:ad:f5:41:92:b4:1c:38:23:5c:75:54:
3c:96:78:27:21:09:61:89:2c:7c:cc:c1:65:df:c8:24:93:d7:
5f:17:1a:aa:c1:c9:1a:a5:2f:e3:56:6c:02:20:9b:62:0e:0a:
93:da:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:32 2025 by rpki-client