Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
File: ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft (raw, json)
Hash identifier: HP4URP4HjogQkkL4cyGy55u1KJe4+jWd1lD08a7UEZ0=
Subject key identifier: 04:A9:E0:5A:34:AE:46:DB:E1:EF:24:BA:98:FB:D6:D1:C2:19:50:81
Authority key identifier: 65:D4:D9:22:28:6A:84:5F:46:1F:EF:1F:53:D3:20:CD:2E:EF:72:8A
Certificate issuer: /CN=65d4d922286a845f461fef1f53d320cd2eef728a
Certificate serial: 0196D5F6C26C4188316E0380A0DC5FBD91D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
Manifest number: 0F09
Signing time: Thu 15 May 2025 22:00:40 +0000
Manifest this update: Thu 15 May 2025 22:00:40 +0000
Manifest next update: Fri 16 May 2025 22:00:40 +0000
Files and hashes: 1: ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl (hash: KkBD/iHt/go4bREdfAHU03DHL8CG6Tgqppyy+peTRW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:f6:c2:6c:41:88:31:6e:03:80:a0:dc:5f:bd:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d4d922286a845f461fef1f53d320cd2eef728a
Validity
Not Before: May 15 22:00:40 2025 GMT
Not After : May 16 22:00:40 2025 GMT
Subject: CN=04a9e05a34ae46dbe1ef24ba98fbd6d1c2195081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:30:bd:e0:cd:64:c7:24:04:8f:eb:03:da:
5c:83:38:06:06:a8:57:19:83:6d:ab:c7:f0:b6:b3:
44:dd:e3:e4:8e:aa:fe:36:62:c4:fd:ec:94:24:cd:
29:89:29:15:82:c6:62:5e:33:89:42:d7:06:a6:cc:
ba:73:b4:e3:d5:bf:bf:61:82:5c:f6:6c:8b:a8:fc:
78:b1:3f:ad:f6:6a:15:11:61:30:bd:e1:f8:6f:fd:
e4:09:8c:d8:b4:87:90:73:92:da:18:2b:ec:9e:b6:
e7:d1:f7:cd:92:0e:a7:36:00:85:4a:59:d0:78:9c:
ec:d5:bc:a5:5d:20:ed:ba:15:c2:f7:b0:07:16:e6:
69:32:de:e2:03:1d:26:af:ef:c3:7f:9d:c8:e3:9e:
b8:05:87:b9:c9:c2:46:0a:c3:cc:8d:80:84:c6:35:
f5:5a:ac:79:d2:c9:fe:c9:48:1c:36:96:8b:3d:32:
4c:e2:9b:85:a9:68:f1:cb:96:ec:85:22:0c:27:97:
dd:3e:ea:05:61:13:f7:9d:2f:5f:22:49:e9:e7:21:
6f:7f:79:29:57:0b:0a:9c:3b:d2:c0:1e:b1:a3:73:
b7:a0:2c:dc:34:2e:8c:76:75:5e:3e:92:f9:67:49:
6b:2e:ed:dd:e2:5d:c8:1d:6e:f7:44:99:ee:d7:23:
68:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:E0:5A:34:AE:46:DB:E1:EF:24:BA:98:FB:D6:D1:C2:19:50:81
X509v3 Authority Key Identifier:
keyid:65:D4:D9:22:28:6A:84:5F:46:1F:EF:1F:53:D3:20:CD:2E:EF:72:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9c:19:aa:18:4e:e6:37:fb:da:b5:f5:92:81:5c:73:35:60:
2a:4e:0c:d6:1d:36:4d:f5:53:49:4f:ba:2d:46:9c:e2:dd:b7:
1d:28:7a:f8:30:53:23:3a:7d:4a:e3:c7:bb:47:8d:20:32:33:
fb:3a:d9:9f:fe:9c:79:ed:8e:d3:2b:07:d2:8f:a5:fd:b0:0b:
78:bb:35:04:e5:ac:64:db:c7:cd:25:e0:e7:a1:82:f6:1d:29:
9a:4f:8a:5e:56:c9:65:ce:22:32:6f:db:d7:0b:16:51:08:4a:
b5:39:40:4a:dc:69:54:25:09:2f:a0:3b:10:86:a9:94:c5:b1:
32:d6:b7:69:f8:e7:c3:c4:5c:14:24:b2:f6:4f:be:b3:9f:0e:
6e:eb:d9:56:90:24:99:6f:81:1c:9b:31:ad:a1:4e:5c:cb:ec:
d6:8a:5e:a8:da:6c:07:36:cc:62:06:4b:07:c6:4f:8b:dc:53:
e7:ff:2d:f9:5b:6c:69:29:6f:f2:7a:94:dd:e1:20:3d:ac:a1:
03:98:67:9f:d4:1c:f6:dc:45:87:de:80:38:82:4f:9b:15:17:
28:0f:96:95:f5:ee:99:0a:1c:bc:1a:f2:05:89:d9:d9:b4:bf:
19:8d:0b:cf:e7:15:0d:47:a2:fe:95:06:15:c3:22:cd:df:37:
86:44:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:29:26 2025 by rpki-client