Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: 0INzAPu6VYvV2Jhx6MK71r0NDoVEpr4AZG6TYpT6VZc=
Subject key identifier: 8C:47:D0:95:35:1D:6D:B2:B3:A9:15:9A:EF:E6:6A:04:EA:07:7C:58
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 0196AA9EDC1312C92D426C803E23FAF6C971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 0E9F
Signing time: Wed 07 May 2025 12:00:59 +0000
Manifest this update: Wed 07 May 2025 12:00:59 +0000
Manifest next update: Thu 08 May 2025 12:00:59 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: kp/EK/DIfUqdLwCLur58otGKZeHKnBeKZ+bVShVKbhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:dc:13:12:c9:2d:42:6c:80:3e:23:fa:f6:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: May 7 12:00:59 2025 GMT
Not After : May 8 12:00:59 2025 GMT
Subject: CN=8c47d095351d6db2b3a9159aefe66a04ea077c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:1c:6b:87:a5:77:6d:0d:39:97:4d:e8:fb:
5f:b3:0a:6c:9a:10:8d:bc:6a:f4:dc:af:c8:1e:ad:
6d:a3:62:f0:48:47:63:37:ad:09:6a:05:78:68:72:
87:bd:65:40:9e:d6:a7:ac:08:e2:86:a8:28:93:6b:
04:14:83:8e:f1:b9:2e:4e:6a:74:7f:4f:fb:7b:7b:
0a:50:09:24:57:0e:9c:c1:2b:1d:5d:52:e9:4a:05:
eb:28:4b:82:d7:91:6e:1e:0d:14:95:19:8f:9d:d9:
fb:ed:10:b9:cc:e2:eb:cd:2b:33:ed:a4:76:b6:41:
c5:be:39:e6:a5:03:bd:8b:3b:4e:d9:23:fe:18:af:
5f:b3:a1:99:77:60:42:6c:bb:3a:0a:3e:83:7c:0c:
79:08:18:4b:f2:2c:8a:7c:97:82:83:e1:4e:d7:fc:
36:13:49:cf:f5:ef:61:d4:54:2e:9e:7d:7f:29:db:
0e:45:9c:1f:2b:2a:2c:4e:ad:d1:c4:f0:da:95:a4:
60:2e:20:0e:05:5c:d6:5d:d0:36:d5:27:71:e9:f0:
2c:0e:03:12:82:25:7c:f6:e7:bf:32:e3:ff:f2:99:
4c:9d:84:76:e7:c1:f0:fb:10:fa:b7:23:1a:c9:db:
b9:3c:b3:e8:1a:56:a6:e2:1e:7a:e8:7c:b8:4c:0f:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:D0:95:35:1D:6D:B2:B3:A9:15:9A:EF:E6:6A:04:EA:07:7C:58
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:67:aa:51:9e:86:d4:c9:59:2d:15:ed:05:14:90:1b:ef:e4:
8b:61:87:76:f0:b3:d1:ef:6e:79:50:d8:bb:3f:4d:de:1c:7d:
b1:1a:63:7e:a5:3c:57:30:55:35:4e:b3:b2:42:80:f9:33:7c:
8a:f7:60:a0:44:b7:1e:10:77:c0:ae:4b:da:bf:94:00:17:b8:
f3:5e:e2:86:87:75:c6:da:e6:c2:2f:97:81:69:0c:5b:88:a6:
72:28:3b:87:10:12:ea:1b:68:73:c8:b6:97:a9:d1:ac:36:6e:
b0:28:31:63:89:e3:3a:77:ce:52:55:95:56:9b:86:74:61:8a:
fb:49:63:76:45:1c:3e:24:21:72:67:f7:86:d3:0c:12:7c:1b:
b4:44:35:d4:2b:62:d7:80:c9:e2:39:e1:a0:89:da:58:0d:0b:
98:ca:ff:ea:5d:54:d7:e5:24:3f:97:b5:bf:3b:af:2f:71:26:
28:9a:aa:ff:d9:d5:ff:81:f6:fb:33:7c:b5:2b:de:ec:d4:8f:
b8:fd:ea:c4:ad:68:f2:47:6a:45:e0:96:bb:41:45:e5:32:da:
cf:a5:7b:8c:50:bd:b6:ba:8b:e2:39:a6:00:b1:2c:1b:c9:4a:
aa:ef:35:0c:f6:d7:7e:c6:94:85:a2:f5:e4:a2:68:00:b9:74:
f9:50:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:57:52 2025 by rpki-client