
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: VzRrTdMx3/RBpzfdzyakK89zMIvWyO4o3o9T2ObEyQU=
Subject key identifier: 38:1B:85:74:05:AA:1B:68:A6:94:EC:EE:BD:1B:79:FD:89:00:70:B6
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 01968B4A7B01E8D3B077A24B3AA41F3EEEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0B15
Signing time: Thu 01 May 2025 10:00:36 +0000
Manifest this update: Thu 01 May 2025 10:00:36 +0000
Manifest next update: Fri 02 May 2025 10:00:36 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: KhYavDMoF+iY23ra2VSbOegFry5eIp3BzlCvQA5vGEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:7b:01:e8:d3:b0:77:a2:4b:3a:a4:1f:3e:ee:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: May 1 10:00:36 2025 GMT
Not After : May 2 10:00:36 2025 GMT
Subject: CN=381b857405aa1b68a694eceebd1b79fd890070b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:2e:14:0a:b8:22:5a:72:4c:2c:08:2e:42:
eb:4c:ea:89:93:e8:ec:bd:d7:c2:1b:c3:a5:57:14:
2e:67:06:ee:2f:48:d9:37:96:c9:b4:9a:79:ad:b8:
8a:64:27:c8:8d:47:90:25:01:73:f0:31:87:1a:78:
53:4f:ae:8c:ba:88:13:69:5a:2f:91:9a:b1:72:83:
f3:d0:24:ca:68:29:1c:87:6b:34:18:c8:b5:96:86:
a1:6f:52:80:f9:9d:cb:bb:1d:2f:77:e7:5b:78:1b:
43:86:79:23:4d:d5:f2:78:a9:b9:12:53:04:d0:dc:
fc:35:71:aa:e9:5d:05:32:88:e1:b1:27:7c:46:4c:
07:b4:fd:c0:e7:ea:e8:61:01:2a:1f:d2:b8:39:95:
40:37:bb:7d:2e:0d:e0:54:0f:9a:62:3a:0b:81:d9:
d8:fd:b6:8f:ff:7c:b4:ac:72:f6:c3:44:44:1e:60:
9b:06:4b:50:38:27:99:01:43:fd:5f:98:bc:d6:4f:
a7:ad:3e:25:aa:ff:e2:da:b0:a1:9f:46:6e:b9:52:
ae:cf:e4:e3:d1:49:87:d0:f9:54:a9:c0:fc:8f:87:
da:fc:93:d7:42:cf:f3:1b:3d:31:0e:35:7d:a2:34:
26:77:03:19:f5:3e:b9:f4:3e:c7:b1:42:b7:f2:91:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:85:74:05:AA:1B:68:A6:94:EC:EE:BD:1B:79:FD:89:00:70:B6
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2b:16:5c:72:06:a5:ee:c8:30:d9:4e:7b:88:cb:a7:d1:2d:
8d:9f:24:8c:9c:e0:78:0e:f1:e0:5e:d9:4e:42:e8:69:1b:50:
96:50:dd:e4:74:3e:1d:0a:2d:ed:19:7f:8e:57:8a:21:f9:28:
ea:bc:82:61:37:d8:c7:e0:d2:f6:49:c7:74:7a:32:b2:cc:9c:
5e:0a:c6:c8:11:a1:32:7b:aa:c0:36:60:25:b2:32:65:45:18:
34:73:8c:28:e5:c1:52:e3:e6:55:9d:e3:45:06:42:04:aa:e2:
39:b6:71:9b:e7:83:df:d0:55:60:65:15:d8:5f:2b:69:2e:db:
17:92:e2:b4:ad:47:7b:76:44:21:fe:bb:e8:0b:7d:70:15:80:
28:77:1e:76:03:29:46:99:0a:6f:b8:d1:24:e7:29:46:2f:a0:
b0:5d:40:41:d3:76:d5:b4:0f:b3:dc:37:88:9b:64:a0:77:5a:
75:1f:e8:b2:b4:be:02:18:e9:f2:50:af:72:7d:88:73:2d:c0:
99:03:a0:b8:61:bc:b0:c6:7a:bf:40:8e:bb:c9:41:b6:8f:3f:
63:cd:73:97:9b:ce:f0:b1:7a:a0:af:8f:69:e1:45:aa:69:18:
0a:cf:bf:7f:c8:4d:ff:0b:96:78:e2:40:19:59:01:d9:9a:8b:
8d:4f:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:02:31 2025 by rpki-client