Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
File: ZGhabXP_WifhvB-WF9-1UIutKTs.mft (raw, json)
Hash identifier: /wOO2PrtRSEWtuB1hz5HLJGikgP+FybpJ5+7I6giUgY=
Subject key identifier: AB:97:AB:76:8A:3F:46:56:F4:65:0C:12:D3:73:A0:90:7A:05:6F:D2
Authority key identifier: 64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
Certificate issuer: /CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Certificate serial: 01967755DC2FB2A7ADE6FA3FFD3577E2B5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
Manifest number: 0BC6
Signing time: Sun 27 Apr 2025 13:00:37 +0000
Manifest this update: Sun 27 Apr 2025 13:00:37 +0000
Manifest next update: Mon 28 Apr 2025 13:00:37 +0000
Files and hashes: 1: ZGhabXP_WifhvB-WF9-1UIutKTs.crl (hash: Nz3L5Mfg+z588u0JX5lr7Bnl4QKVZTkDMqDiK3Pepb0=)
2: luEbamkkQ3JNKI_McJaQ-rwJjV0.roa (hash: ErxV+CJ+EDpVd4vCMZWyy26jRiSWzXrUb4kdxbwG3ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:dc:2f:b2:a7:ad:e6:fa:3f:fd:35:77:e2:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64685a6d73ff5a27e1bc1f9617dfb5508bad293b
Validity
Not Before: Apr 27 13:00:37 2025 GMT
Not After : Apr 28 13:00:37 2025 GMT
Subject: CN=ab97ab768a3f4656f4650c12d373a0907a056fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:ae:f7:87:f1:ff:07:55:12:2f:08:05:96:
48:21:40:e2:7d:94:55:1a:5a:9a:bd:4c:32:89:41:
20:18:d6:a7:9b:8c:79:5a:8c:3e:0e:99:1a:5b:8a:
db:ad:f5:33:8e:8c:6f:d2:1a:84:62:3d:71:24:18:
55:6d:2d:7e:ca:f1:90:4b:ab:ec:06:9c:6e:23:8a:
3c:33:65:2f:5e:b9:1d:38:4c:5e:a8:ff:04:d5:16:
28:24:90:01:b7:40:99:89:4e:2a:32:83:48:1a:4f:
ba:90:72:7d:62:d3:3c:a2:00:e2:99:5d:1c:ae:cb:
91:51:59:05:09:a0:70:69:95:49:aa:d7:7f:9e:25:
34:1b:8f:d5:e4:7e:ac:2f:cc:11:fd:1e:3c:fc:52:
a2:39:ee:d8:d0:e5:fa:45:62:c9:da:63:3a:d6:74:
10:e3:a0:b2:21:85:42:24:b4:18:87:34:ca:48:9e:
bc:38:ad:34:b5:a2:dc:19:42:e7:79:0c:be:cf:27:
fd:92:69:c8:0b:7e:c5:a4:cb:04:7a:07:6c:1a:d0:
b0:a2:29:13:af:fb:62:91:3a:87:70:29:8e:fd:80:
8b:52:3e:d1:d9:cb:c0:9f:4c:70:b1:a1:1e:30:ed:
76:ea:a2:20:f2:5d:d5:21:e5:ad:f3:61:f9:3e:07:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:97:AB:76:8A:3F:46:56:F4:65:0C:12:D3:73:A0:90:7A:05:6F:D2
X509v3 Authority Key Identifier:
keyid:64:68:5A:6D:73:FF:5A:27:E1:BC:1F:96:17:DF:B5:50:8B:AD:29:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGhabXP_WifhvB-WF9-1UIutKTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3f1c-bbef-4d35-8146-c48b25f7846f/1/ZGhabXP_WifhvB-WF9-1UIutKTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:40:85:28:82:a9:70:55:67:27:c1:7b:69:af:9b:4b:dd:cf:
64:cb:61:b3:68:91:b8:4d:1c:d6:5d:30:15:c5:77:5f:f1:23:
dc:b7:e5:76:ad:ea:24:ae:31:89:e0:c9:49:e0:b3:49:f1:96:
5f:3b:07:8a:e2:c2:13:67:67:fd:cb:ef:1b:86:24:d5:d1:c1:
7d:e2:44:45:62:d4:f4:db:c0:09:b2:b1:13:da:9a:7a:97:2d:
e3:b8:d1:69:e6:2a:4d:0e:76:f3:d1:72:6d:3d:7c:56:b6:39:
ed:da:44:e5:c0:7c:ed:66:8a:98:38:d9:fe:3b:56:6c:91:00:
96:de:22:c6:15:df:cd:54:03:a3:95:f7:2b:4b:e3:20:ea:2c:
c9:1d:0d:40:b6:87:91:9e:8a:4d:da:7c:db:15:eb:37:f6:3d:
ea:8f:b5:f9:51:54:64:4b:99:54:32:23:4d:00:89:a6:25:b2:
f9:bb:9e:d5:2f:de:bf:9c:a0:66:2f:39:1c:b2:97:2d:af:0f:
ba:31:c2:97:be:1a:ed:a6:d9:4d:a9:1f:d1:68:df:3d:99:f8:
12:47:ed:ac:c7:df:c3:cb:f6:1b:d8:28:8c:ad:0d:8b:f8:b0:
be:cb:d8:1d:1d:8f:56:73:b2:f0:bc:c5:10:10:c8:cc:15:4a:
ed:60:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:48:56 2025 by rpki-client