Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: eWQ8bxxtuYSNOj/eKhJz5SgBf52C/8aycYIN+5qmUeQ=
Subject key identifier: 33:C7:EA:B0:96:74:D2:06:A9:29:29:56:62:88:C0:B7:4A:55:AA:11
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 0196D8F8157BE5E4A497CD529BD8BB561E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 1202
Signing time: Fri 16 May 2025 12:00:59 +0000
Manifest this update: Fri 16 May 2025 12:00:59 +0000
Manifest next update: Sat 17 May 2025 12:00:59 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: iEu+08Y8fH/iMkeHwnRNMSiEOtRqB7uPUYvNi8QeWOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:f8:15:7b:e5:e4:a4:97:cd:52:9b:d8:bb:56:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: May 16 12:00:59 2025 GMT
Not After : May 17 12:00:59 2025 GMT
Subject: CN=33c7eab09674d206a92929566288c0b74a55aa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:06:ed:3b:ed:5c:65:eb:d4:a8:14:5f:d7:
0c:06:7a:08:b4:2d:eb:ac:2b:dd:1e:65:e0:ee:f1:
4f:a4:bc:59:98:d7:44:8f:3e:86:ef:b8:e3:df:11:
63:19:82:c9:b2:3e:cb:6e:f4:32:98:90:27:23:a0:
80:49:89:b4:67:ff:20:93:5d:e0:fe:a5:dd:df:f9:
ae:aa:27:90:9f:8c:60:f5:37:0f:81:43:74:b4:4d:
39:36:e5:f2:ee:b2:41:e5:46:ff:b7:65:1b:0b:f8:
d1:bf:87:4c:0c:e4:c4:26:72:a7:b3:c8:e2:45:21:
35:4c:21:fe:9c:02:e6:5f:ff:e1:07:00:04:f7:25:
be:36:39:33:b1:d4:cd:ff:18:2d:cb:aa:fb:3d:6b:
cc:96:d9:ec:28:13:28:9b:65:71:0c:df:8e:69:08:
6a:0d:78:6f:65:56:17:92:2d:64:ee:cf:b8:8f:4c:
79:42:32:d1:24:1d:a0:fa:e6:69:00:d0:fe:72:33:
ab:38:a6:50:1a:cf:29:64:2c:2d:6c:d8:37:4f:7d:
60:e4:b6:bf:f7:80:02:e8:cd:85:0b:e2:45:c2:2a:
0a:2a:48:b6:03:d0:f4:fb:ab:5f:f2:38:4f:ac:65:
a8:16:f1:7a:df:fe:49:75:52:14:a0:ae:cb:01:97:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:EA:B0:96:74:D2:06:A9:29:29:56:62:88:C0:B7:4A:55:AA:11
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:45:5c:fd:43:8b:9f:da:78:21:3e:74:b0:b2:61:21:1b:f2:
c2:3c:5a:a5:33:82:31:ef:0d:ec:7f:65:22:fd:40:29:99:22:
c5:ba:b4:15:be:c5:38:ea:36:93:19:d1:97:0e:97:22:74:e1:
1c:16:00:b8:24:02:cd:76:cb:07:e5:a8:6c:61:5a:04:01:00:
52:5e:28:4e:49:1d:27:6d:55:09:f9:3d:1d:a1:74:44:21:8f:
3f:78:6d:f2:ff:59:91:f9:ae:07:4a:da:e9:00:4f:8a:81:75:
be:61:58:be:94:cb:bb:6b:c3:af:84:b0:99:34:bb:e8:e4:a2:
f7:45:cd:1c:f4:70:5d:bc:e7:34:21:b6:4c:6c:34:3c:d5:fd:
6a:d1:3b:79:95:a1:ae:9d:b8:29:22:12:ff:99:40:45:8b:b5:
68:9c:2f:a5:b2:f3:9f:2b:15:f9:d0:b7:bb:79:4f:42:c8:f2:
10:25:20:28:d8:72:42:10:ac:b8:d7:8d:7c:87:a6:8e:c2:d4:
a3:6d:cd:51:f8:22:9f:61:a8:0c:7c:79:48:50:c2:8b:a1:61:
c5:08:25:7c:47:7d:dd:af:eb:d7:9e:95:9a:5a:91:e7:70:ff:
ef:19:6d:ea:e4:18:65:0c:2e:65:dc:39:d6:39:42:a5:6a:76:
6c:8f:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:11:18 2025 by rpki-client