Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: EZJXh19hg4IjNlfdJ0JhRbqEwS9jeMKMX/nXAPSkTU0=
Subject key identifier: 75:8D:94:33:FB:C8:21:09:FB:59:ED:BC:D7:55:C6:B3:48:8D:42:CD
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 0196BA12066254F1B49A9F8E4DA7E3BB6C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 08F5
Signing time: Sat 10 May 2025 12:01:05 +0000
Manifest this update: Sat 10 May 2025 12:01:05 +0000
Manifest next update: Sun 11 May 2025 12:01:05 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: Uypp4u7H9jXg5gv4XzjlikJwYfzAjmXr4RD0Q3unjJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:12:06:62:54:f1:b4:9a:9f:8e:4d:a7:e3:bb:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: May 10 12:01:05 2025 GMT
Not After : May 11 12:01:05 2025 GMT
Subject: CN=758d9433fbc82109fb59edbcd755c6b3488d42cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:63:fb:06:60:60:b7:07:75:d7:cd:d6:a6:
63:ae:f0:3b:b6:65:17:02:d8:e5:de:3c:fe:d8:48:
59:05:11:1b:f6:89:d8:1d:4c:0c:fb:87:c9:5d:08:
57:e1:18:28:58:d3:2b:0d:7c:33:a9:86:b1:30:37:
9c:84:98:78:69:bf:30:59:8d:3f:28:ea:ab:6c:da:
4f:48:50:c2:c5:4a:8e:c8:cf:69:e6:0d:5b:a2:cf:
17:32:6c:fa:b5:92:0e:18:19:6b:28:99:9d:3a:8d:
02:ed:4c:a2:1e:01:b3:c5:e3:a5:20:12:ad:3f:0f:
55:69:29:8f:77:06:65:7e:71:44:58:f6:f1:5b:f2:
65:fa:89:bf:68:5f:1b:24:47:62:b9:e6:2a:a9:28:
b2:7d:61:57:10:44:0b:2d:a4:96:0f:c1:7d:ed:02:
5b:ee:2a:2a:ce:43:31:2a:45:56:f1:8e:b7:39:e2:
61:59:20:fc:98:b0:4d:bd:13:08:85:2b:df:2a:93:
f2:6d:01:02:6e:f3:56:65:5a:9c:db:08:52:8c:c7:
80:8c:4e:20:a5:eb:8f:8b:12:fa:de:74:3e:9b:2c:
09:f0:b6:d7:ba:23:85:ba:36:a9:24:ab:e5:a5:93:
7c:b1:d8:87:97:c5:7c:96:eb:37:f1:d2:b1:c6:19:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8D:94:33:FB:C8:21:09:FB:59:ED:BC:D7:55:C6:B3:48:8D:42:CD
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f7:5f:c3:c4:00:1e:91:b5:5c:c1:f0:c1:91:13:c6:98:92:
6d:27:ca:25:1c:b4:d3:04:27:ba:49:18:1e:1a:19:fd:59:73:
f7:9b:46:e7:ea:1b:de:59:97:69:bf:ef:e1:0f:9c:02:c0:e4:
20:82:b2:43:5a:ed:0e:59:e2:91:c8:55:f8:b7:b5:26:8b:14:
46:34:d4:94:18:93:c6:ee:3f:4c:ca:2d:d9:d1:f1:42:5b:5a:
23:35:8a:a0:8f:de:37:4e:5b:d1:a1:71:73:80:16:0f:6e:9a:
ad:ac:05:58:c5:65:d3:bb:60:b5:bc:92:da:10:ff:ed:19:c9:
22:57:b4:8e:64:ec:34:9c:13:95:9b:29:11:c2:06:86:91:b2:
1f:d4:e3:3d:2b:40:f5:c1:6d:df:fd:fd:91:a3:9a:42:ad:79:
5b:ce:88:e3:3d:02:92:5e:15:6f:cd:8e:f6:1b:83:f0:c4:39:
f3:a4:81:43:48:a6:5d:ba:a1:bb:15:e8:fd:9a:0f:18:be:23:
47:4d:d5:b8:50:73:5d:1d:59:a6:5a:a5:fc:e2:31:d9:70:e5:
5c:97:0d:09:73:bc:d0:a1:e2:e9:bb:8e:5c:8d:0d:01:d2:71:
88:c7:62:8f:17:aa:ef:51:d0:87:31:2d:6a:78:af:63:c9:31:
e3:8c:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:09:25 2025 by rpki-client