Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft
File: zrxhguhz_3oDHIiV79xXw2hx3XI.mft (raw, json)
Hash identifier: qeOOGB+PK+tvYoaGGR9452ocOkKwThngdPi53kK5L80=
Subject key identifier: CD:93:89:1C:BA:4A:F3:23:D1:45:9A:83:08:C8:F0:B4:AC:1C:01:EC
Authority key identifier: CE:BC:61:82:E8:73:FF:7A:03:1C:88:95:EF:DC:57:C3:68:71:DD:72
Certificate issuer: /CN=cebc6182e873ff7a031c8895efdc57c36871dd72
Certificate serial: 01968F283B0E086F3E130C13AE37D3682D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft
Manifest number: B0
Signing time: Fri 02 May 2025 04:01:40 +0000
Manifest this update: Fri 02 May 2025 04:01:40 +0000
Manifest next update: Sat 03 May 2025 04:01:40 +0000
Files and hashes: 1: zrxhguhz_3oDHIiV79xXw2hx3XI.crl (hash: 9yWsaPR8Nl/yi9t4laQsVCqjYqORStGIN1LESuN9GiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:3b:0e:08:6f:3e:13:0c:13:ae:37:d3:68:2d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebc6182e873ff7a031c8895efdc57c36871dd72
Validity
Not Before: May 2 04:01:40 2025 GMT
Not After : May 3 04:01:40 2025 GMT
Subject: CN=cd93891cba4af323d1459a8308c8f0b4ac1c01ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:e9:e5:74:c1:0c:91:72:ad:34:ad:69:6b:
c8:20:f9:90:17:3c:66:01:e2:72:6f:c1:ab:8b:ca:
92:02:56:a4:ed:d9:9a:f3:29:2d:69:2a:94:ab:ca:
04:b6:5b:2a:1e:46:47:a4:dd:1b:8a:f4:6a:51:f0:
49:b7:3b:28:02:3c:4f:ca:6e:64:78:ae:1f:3a:f7:
8e:31:cf:02:9d:59:ff:9b:e4:98:3c:4e:c8:cb:ff:
4c:58:33:d0:d3:c9:bf:57:92:1e:a7:de:b8:f0:ea:
f7:a9:3f:1e:27:8f:02:c8:a9:a9:1b:6a:c4:64:f6:
27:3d:ae:83:c4:66:2c:ed:42:4c:dc:be:aa:3d:54:
ff:e0:6f:15:79:eb:e1:04:ab:a0:c1:66:cc:1d:92:
4c:6d:97:31:a0:b3:a8:52:ea:2f:44:0b:72:9c:5a:
28:2a:5d:54:9a:b5:17:05:e1:40:63:d5:2c:9d:4b:
41:1a:ab:23:af:fc:1e:16:e5:7f:a6:e8:36:e3:3a:
7c:17:c0:53:c2:57:b4:62:45:7a:bd:19:53:73:12:
99:b3:2d:d2:8a:9d:5c:7e:ca:e8:4a:0f:02:87:1f:
44:f6:51:2e:d8:41:4e:10:2b:92:c7:16:3f:33:ea:
3f:06:8e:fc:c0:91:69:66:31:a8:4c:a6:e4:e2:f7:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:93:89:1C:BA:4A:F3:23:D1:45:9A:83:08:C8:F0:B4:AC:1C:01:EC
X509v3 Authority Key Identifier:
keyid:CE:BC:61:82:E8:73:FF:7A:03:1C:88:95:EF:DC:57:C3:68:71:DD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:69:c3:23:96:46:c9:43:b4:69:e5:df:eb:ce:12:41:74:f5:
55:95:c6:45:d1:1b:bb:9f:f5:ed:8b:88:51:5f:40:74:b3:d2:
d8:2f:14:91:6d:8a:37:8e:be:6b:52:56:fa:73:62:a5:3f:47:
0f:1b:8e:3f:44:b9:cf:c8:fe:b6:57:29:ff:0f:11:14:bf:30:
f5:a2:68:4c:2d:60:81:09:fb:8c:3e:c9:d0:69:8b:43:10:1a:
da:0a:3c:e3:57:8b:ab:1e:fc:51:00:99:bf:9b:0d:1d:12:e8:
39:6c:76:45:f4:3c:ff:b5:cc:9b:c3:5b:72:c2:16:11:0e:28:
0e:5d:40:ed:f7:19:c6:d1:1f:5a:e3:73:5c:77:5a:86:26:cb:
de:29:72:b2:01:98:91:3e:f6:b2:5c:1f:67:91:4c:d9:55:de:
40:7f:c2:c1:6e:85:b7:b2:33:87:d2:bb:0f:80:fb:a3:06:bf:
0e:5a:b0:3d:98:15:69:f0:40:63:8f:1b:d9:55:01:5a:a0:74:
16:2b:3d:fa:1b:e7:3a:69:88:77:34:ee:68:8b:8c:d2:c8:1c:
7b:68:48:de:d2:0b:85:11:4c:68:e4:5b:6d:25:ee:96:cf:30:
f8:8c:4f:46:31:77:cf:41:3d:a1:32:39:21:15:c6:e0:81:fc:
10:a4:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:13:51 2025 by rpki-client