Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier: Zjg2aRBfjhaViIIgeVpwbtLx/+SCJjENsm4ieAMBKFs=
Subject key identifier: 55:86:CA:F9:D8:B6:BA:F7:25:2E:AC:B5:E2:11:E4:C7:C1:D0:E7:EF
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer: /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial: 01969F08B718B8882C9B9B7DCAC738E4D90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number: 0BA5
Signing time: Mon 05 May 2025 06:01:10 +0000
Manifest this update: Mon 05 May 2025 06:01:10 +0000
Manifest next update: Tue 06 May 2025 06:01:10 +0000
Files and hashes: 1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: Et+ppu1Uul19c45tdUCAO+eTHvn++CanhbH7zNze8so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:b7:18:b8:88:2c:9b:9b:7d:ca:c7:38:e4:d9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Validity
Not Before: May 5 06:01:10 2025 GMT
Not After : May 6 06:01:10 2025 GMT
Subject: CN=5586caf9d8b6baf7252eacb5e211e4c7c1d0e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:fd:ae:88:aa:1f:9d:3e:ee:83:94:0c:c4:
e0:76:1b:67:4a:41:17:f3:8f:ee:bb:56:f3:55:04:
c7:90:68:33:02:0c:a6:60:03:f1:84:46:b5:63:4d:
49:c7:07:ff:5e:1e:13:6c:94:8d:4e:5d:a8:1d:66:
73:5e:9c:eb:b7:1c:e3:97:ff:41:1d:f6:34:01:9d:
37:dd:7f:46:d5:89:44:cf:28:57:67:bc:bc:93:1e:
d4:fa:d7:3b:a8:6a:6d:14:76:15:8e:c0:1d:82:6d:
42:97:70:32:38:f9:9c:42:dd:c0:81:64:da:36:7f:
f7:eb:37:81:47:3c:5f:5c:1e:91:85:cf:5b:2e:07:
aa:18:30:cd:e2:7d:43:e3:0b:2b:dc:71:13:7d:b2:
ef:22:3e:7f:e8:71:2c:1f:9e:dc:74:17:fa:90:07:
b0:ee:4d:c0:e6:56:f9:f5:01:d3:d2:ff:3b:05:6b:
e0:e7:55:13:e6:de:6b:82:0c:75:b2:a4:57:63:88:
39:50:41:a6:16:2b:57:94:d5:71:5e:c5:71:b3:d0:
bf:ec:61:38:db:3e:ec:e3:ab:32:36:6d:d3:ad:c4:
e1:6c:0c:01:8b:22:dc:7a:6a:99:70:4c:72:eb:04:
f9:50:76:dc:0d:c2:b9:fc:58:ee:94:05:8b:19:63:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:86:CA:F9:D8:B6:BA:F7:25:2E:AC:B5:E2:11:E4:C7:C1:D0:E7:EF
X509v3 Authority Key Identifier:
keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a1:75:99:e6:ec:9b:ba:df:c2:ef:7f:cd:38:f0:27:c1:3e:
ec:39:e3:b8:3d:85:d3:a2:68:89:32:40:b4:34:50:36:d3:4e:
00:12:67:06:02:48:45:52:b3:22:61:78:c6:df:f7:77:fe:9e:
8f:03:8c:8d:5d:e7:14:6e:2f:5e:ce:a3:37:d0:a2:7c:a5:0a:
0c:3e:71:54:06:87:13:8e:74:92:e0:ef:10:e2:74:bb:30:b4:
fb:cb:d4:d3:ad:87:cd:eb:d9:f5:e0:2d:a6:ab:2c:88:df:03:
97:08:f5:2c:d0:4b:0e:87:dc:b1:e6:f8:4a:78:23:51:b3:c9:
e9:7e:41:94:70:8a:2a:a3:b2:45:0c:b3:0e:b6:6d:6d:ec:49:
27:d5:05:f3:c4:54:1f:22:47:d8:c1:91:2a:ee:99:0a:19:55:
9a:02:3d:c4:c8:12:6f:e2:20:36:7c:43:d2:a8:6c:2c:cd:6b:
36:3e:cb:fb:1e:d1:2d:3d:7d:cf:57:6a:bc:8d:3a:e6:68:ed:
2a:f6:36:27:b8:a2:0c:1e:66:cf:83:af:23:12:bf:d9:31:ee:
3c:6a:68:d5:3b:0d:5f:a9:41:d1:69:e1:27:f1:50:4e:3d:af:
2c:3e:02:c7:83:9c:41:88:cb:34:04:4e:81:91:be:b7:a7:eb:
c3:3b:1a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:04:40 2025 by rpki-client