Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier: 7ZxdZbPLuOKnFs2LJp5Y3/Xbo8uzJ9PG6Pq5QWodU1Q=
Subject key identifier: 1C:A3:DE:92:F4:78:0A:A2:2D:F2:03:57:61:9B:09:9F:9F:F1:9E:3C
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial: 0196B7B5D1693CFA1B520D7D6FB8483103B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number: 0A25
Signing time: Sat 10 May 2025 01:01:08 +0000
Manifest this update: Sat 10 May 2025 01:01:08 +0000
Manifest next update: Sun 11 May 2025 01:01:08 +0000
Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: 73V1r+lta5JV36Gee2BAT5TfyNE2jhcTifqEoJF2WAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:d1:69:3c:fa:1b:52:0d:7d:6f:b8:48:31:03:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Validity
Not Before: May 10 01:01:08 2025 GMT
Not After : May 11 01:01:08 2025 GMT
Subject: CN=1ca3de92f4780aa22df20357619b099f9ff19e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:86:8b:e7:1c:05:c6:75:4e:b6:ef:b1:5e:
ad:e8:ad:a7:1e:6b:59:6f:f7:0f:7f:7a:af:66:da:
2b:cd:67:ed:a2:c6:e2:ba:4f:7f:a3:87:94:ed:14:
cb:53:93:b1:37:34:05:c1:88:ee:8c:c7:89:ee:e7:
9e:e9:8b:44:37:5b:fc:e7:33:19:77:c3:96:29:f7:
ca:d8:a5:6a:71:71:33:fb:f0:f9:93:5b:7f:75:e0:
22:f9:7d:ff:1f:02:87:db:f0:cf:2a:ba:26:90:18:
30:d8:61:7d:f3:10:43:5e:f9:e4:40:d1:f8:35:70:
ea:46:4e:08:c0:c3:1e:9c:98:4a:1a:dd:7d:1e:00:
3b:75:6b:1b:de:59:3b:82:5d:7e:94:c3:39:7d:54:
0d:25:6d:7a:2f:f8:4c:c3:1c:69:32:dc:50:c9:e3:
1f:28:69:f6:b0:2d:c5:51:15:b4:1f:3c:57:d0:51:
ad:ab:25:97:48:8c:57:f8:d8:5d:9e:59:36:67:92:
1c:36:3d:4f:f8:ae:e4:9a:31:49:eb:79:5d:75:8a:
64:da:22:4b:d2:ea:57:31:ca:cd:9d:ec:8f:66:b6:
8d:0f:7a:f1:69:ec:c0:f9:23:8a:c2:9c:d8:4e:d1:
19:6c:05:15:cf:32:f6:14:ea:f9:82:68:43:51:e1:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A3:DE:92:F4:78:0A:A2:2D:F2:03:57:61:9B:09:9F:9F:F1:9E:3C
X509v3 Authority Key Identifier:
keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b9:d0:3b:a6:8c:19:81:13:ba:ec:e1:46:5b:64:c4:a7:6c:
0f:09:9c:26:5c:9a:d0:ab:4c:1f:56:ae:da:63:cb:b5:e0:db:
d9:d7:f7:db:84:02:2b:7a:31:9d:a3:7a:a6:36:38:98:4b:2b:
40:96:36:d6:65:06:37:62:ae:70:48:52:be:82:4d:a3:16:24:
2e:5d:d1:0f:4c:c2:55:b1:29:a9:f0:d9:43:b8:1b:9a:76:7d:
d5:64:e6:12:98:63:44:46:1f:51:76:aa:61:8c:d9:73:4c:fc:
21:32:f5:de:eb:e5:b6:8d:3b:1e:de:3a:23:2d:7f:3b:f4:87:
99:c0:1a:a7:27:b8:8e:30:11:e2:2c:e4:45:07:1c:47:18:86:
09:a2:31:94:ba:f8:43:b0:65:42:e6:ed:54:76:be:46:31:23:
fc:43:33:fd:5c:f2:15:53:82:36:55:f7:e0:30:70:47:0e:c3:
c3:74:43:a0:b4:a4:05:47:cd:7b:ac:59:cd:78:26:f5:10:e9:
ab:0e:f9:8c:aa:10:c2:ae:c5:e0:f3:f9:9f:b7:40:2f:37:b8:
f4:a4:c9:9d:d0:1e:1e:1f:3f:e0:af:ce:57:dc:3f:01:d1:4f:
15:93:57:bf:a3:f9:a0:4d:b2:fc:16:02:9a:c2:0d:28:05:c4:
5a:ac:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:41:31 2025 by rpki-client