Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
File: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft (raw, json)
Hash identifier: vgv1/qy+iDCds0y3WCaoVYxY7hKv9JVR/3ZssI8CTZI=
Subject key identifier: C6:22:C3:C9:E6:E5:6C:2D:CD:D1:85:F3:EE:62:60:17:86:10:EA:AB
Authority key identifier: CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
Certificate issuer: /CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Certificate serial: 0196748BF20D3884C7EE8641EF2BB4B38B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
Manifest number: 011D
Signing time: Sun 27 Apr 2025 00:00:50 +0000
Manifest this update: Sun 27 Apr 2025 00:00:50 +0000
Manifest next update: Mon 28 Apr 2025 00:00:50 +0000
Files and hashes: 1: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl (hash: RBJ0qdCNIqOuOAjiN84gDCadmrqx6+YYZfVkpsVIiJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:f2:0d:38:84:c7:ee:86:41:ef:2b:b4:b3:8b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Validity
Not Before: Apr 27 00:00:50 2025 GMT
Not After : Apr 28 00:00:50 2025 GMT
Subject: CN=c622c3c9e6e56c2dcdd185f3ee6260178610eaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:3c:71:be:5c:36:6a:81:8a:60:1a:b3:3c:
b7:c1:8d:9c:d1:4d:b6:35:4c:10:2f:9a:57:1f:bb:
60:f3:65:09:ad:3e:52:25:c3:23:d6:6f:e3:33:e5:
d7:6c:f7:ae:4a:f8:54:29:73:2d:7f:1d:0d:8e:6c:
9b:51:d8:02:c2:3a:75:e4:3f:36:b5:9f:61:a5:c0:
0d:f4:e3:93:e6:b5:f6:12:00:79:24:dc:b6:05:73:
a5:07:e3:e7:5e:b2:27:27:d6:0e:f2:4b:2e:cf:13:
56:4a:3c:d7:2d:50:90:c0:31:e6:e1:ce:56:d7:20:
48:fe:bd:b6:66:11:67:de:05:95:bd:03:c1:1f:e1:
14:52:ce:88:bc:fd:c5:e8:0f:4b:d6:66:7e:9c:31:
49:1c:c0:8c:6c:77:3f:2f:53:fe:15:95:98:35:62:
1b:b7:58:d3:01:d4:6d:55:96:3b:33:f9:b4:76:c6:
00:80:0f:82:fb:67:72:1a:34:28:da:08:59:d6:e8:
f4:f1:46:77:2c:2d:67:c0:8a:ba:ac:04:d5:95:68:
2e:dc:2e:9e:4b:98:35:7d:9e:a7:8e:b8:b1:e2:5f:
da:b3:45:0a:79:6e:53:f8:49:29:e6:6a:43:d4:c1:
76:26:46:6e:46:81:ab:db:e9:b9:62:ea:c4:fc:75:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:22:C3:C9:E6:E5:6C:2D:CD:D1:85:F3:EE:62:60:17:86:10:EA:AB
X509v3 Authority Key Identifier:
keyid:CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:07:35:97:f7:4a:9b:39:ea:50:e6:19:05:58:74:a6:44:
dc:dc:62:84:8e:ae:12:92:8d:6c:92:7b:b6:f7:f7:b4:de:d3:
24:5c:e6:e7:2f:3b:21:ed:31:57:37:08:e7:1a:a4:c5:9e:8f:
9a:25:ec:4a:64:35:5b:c9:82:f9:f2:57:38:0b:be:42:36:cf:
44:b0:6f:68:dd:ad:7c:a5:bd:16:5e:b9:6c:4b:36:cc:ff:72:
67:a0:b3:b2:85:00:83:60:94:9f:20:88:e0:3e:f8:2f:e6:85:
51:8e:ba:a4:34:99:02:61:f4:24:54:ce:f2:fa:02:fb:e8:33:
95:28:ec:33:7d:42:46:08:6a:a5:51:19:54:03:8a:d5:4d:89:
98:53:f2:49:3c:3f:b2:dc:1d:ed:df:7c:d9:6e:93:d1:1f:69:
c3:34:54:09:07:71:80:06:39:59:f3:0d:e6:6d:09:ef:1c:59:
2a:84:1e:67:00:4d:67:30:0f:a9:55:69:e9:a6:ad:49:7f:c2:
db:10:e4:ed:a2:cc:e3:ca:e1:36:1c:7d:26:8d:0c:17:82:54:
dd:04:fe:fc:23:1f:c3:71:56:54:72:0d:c8:25:b4:08:3d:54:
e0:24:ce:80:b9:1a:d3:69:16:eb:8c:bd:d9:40:6f:45:9b:40:
7a:ae:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:36:36 2025 by rpki-client