Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: I8fZPAJ5w3dI8N2qvPq8qtJyxpVPLvD64ruel/FxRLU=
Subject key identifier: 3C:1C:4B:29:AB:7E:BF:88:ED:12:F7:4F:68:A3:F7:71:AD:65:F8:AB
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 01967A8E124D2337B849E65895FCA8346557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0B5E
Signing time: Mon 28 Apr 2025 04:00:53 +0000
Manifest this update: Mon 28 Apr 2025 04:00:53 +0000
Manifest next update: Tue 29 Apr 2025 04:00:53 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: 6TuffeLd//0HqB/uRBkgco7Tjbyd/5CLB+i9TvTAp90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8e:12:4d:23:37:b8:49:e6:58:95:fc:a8:34:65:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Apr 28 04:00:53 2025 GMT
Not After : Apr 29 04:00:53 2025 GMT
Subject: CN=3c1c4b29ab7ebf88ed12f74f68a3f771ad65f8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:85:03:40:86:ce:5a:22:cb:5f:00:bf:d8:
31:b5:ce:09:7e:52:23:5b:3d:7f:82:f7:25:9e:d3:
e2:38:16:5d:8d:bd:4d:9f:e0:38:53:a2:27:92:82:
27:50:ca:99:59:46:be:3a:49:58:a8:5f:a7:ed:eb:
e3:86:5a:49:4c:b9:b3:a3:88:de:53:6b:8b:85:e5:
9f:d2:21:b3:1f:e8:28:ac:ea:da:64:1d:e7:c4:95:
6c:07:59:8a:f3:c2:11:a4:48:be:b1:84:8d:78:42:
17:33:13:8a:e1:05:91:45:e8:17:59:8b:c7:1e:4b:
57:4b:e8:d2:40:ba:38:d9:a2:08:7c:14:93:85:e1:
e1:b0:5a:8b:a4:0c:ba:39:2b:3e:1f:42:39:24:59:
65:08:78:c5:e6:d9:07:a7:29:8f:7c:a5:2a:35:9d:
a5:10:74:e2:e7:4d:cf:12:4a:7f:5c:b4:32:2f:72:
68:bd:78:c5:35:dd:01:d8:1c:21:86:2b:60:5e:ab:
b1:c5:47:6b:8d:91:72:40:ca:a5:df:8f:3e:65:dc:
14:ab:e0:df:a1:54:a6:b1:19:1d:02:e8:28:de:83:
b7:b8:0c:87:cf:b5:95:d1:5c:03:73:33:35:af:78:
e3:14:73:6f:88:a5:1d:6b:92:bc:d1:ba:49:9e:a0:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:4B:29:AB:7E:BF:88:ED:12:F7:4F:68:A3:F7:71:AD:65:F8:AB
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:17:0d:9a:e4:a3:27:22:23:fe:76:33:da:4b:63:ee:25:
41:5d:36:73:8d:5f:65:95:06:fa:39:ff:7a:3f:4a:a3:bb:ca:
b0:76:6d:10:5c:2c:f6:b4:38:de:b9:b8:0c:39:e7:3f:94:4b:
1c:72:b1:ae:0c:0b:c4:4a:ab:49:d0:82:d7:13:c9:f4:22:e4:
2f:3c:b0:f8:56:42:77:49:8a:c4:cd:67:c9:be:cb:82:e7:8e:
53:31:f6:2f:81:a6:88:1c:8b:a6:f0:ba:77:ff:68:f9:75:97:
bc:e3:82:41:45:79:c0:5e:15:43:77:fd:bd:cf:d6:62:9b:74:
54:cf:0a:c6:17:26:5f:d0:5e:ec:a6:3a:1b:0b:98:f9:4b:27:
80:94:0e:f2:2f:e4:46:8e:e6:ce:6d:f1:5c:1e:8c:12:30:10:
31:c1:8a:89:98:aa:45:79:e7:64:f0:7c:9c:6b:e3:f2:51:86:
fd:4c:78:c1:61:68:e7:a3:69:2a:c0:79:4b:34:c7:0f:1b:64:
3a:61:51:6c:84:14:05:d5:93:86:f5:0e:c6:a2:14:6b:fa:ce:
ad:c4:28:33:d4:97:e2:d2:c6:07:86:44:74:4d:70:ef:9e:8b:
6e:02:11:97:42:2d:93:63:88:a5:6c:15:fa:9c:55:d1:a8:6d:
f7:7c:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:44:57 2025 by rpki-client