Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: cBK4R8XyZ7DGw16HBGlmfpA1yAnmKw/Yj/MsOKsgE4E=
Subject key identifier: 53:E0:D2:87:1A:E0:B6:4A:FB:2F:7F:36:29:A8:51:47:FC:9F:12:30
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 0196C15D29625A3A35ADFD4747F618682762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 22:00:30 +0000
Manifest this update: Sun 11 May 2025 22:00:30 +0000
Manifest next update: Mon 12 May 2025 22:00:30 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: Evq07H1SRHKcOd4mIE9uJJGnn1hQoHeMNQcMwqpKNxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:29:62:5a:3a:35:ad:fd:47:47:f6:18:68:27:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: May 11 22:00:30 2025 GMT
Not After : May 12 22:00:30 2025 GMT
Subject: CN=53e0d2871ae0b64afb2f7f3629a85147fc9f1230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:75:74:36:19:4b:3f:fd:83:4b:cd:35:bd:
db:b5:c8:16:c9:0b:a0:20:01:8d:bd:b5:f0:da:24:
51:66:8c:1f:10:3b:43:0f:21:6f:b7:d2:a0:a5:a5:
7f:dd:aa:e9:8a:27:67:86:ea:ab:61:0a:ad:5c:ca:
48:d2:c8:8d:98:cd:2b:18:98:b4:fc:ce:b0:e5:cb:
88:e4:68:19:66:5b:b4:03:a0:fc:a8:53:96:0d:07:
75:43:be:5c:68:c2:a0:1d:8f:c6:9a:bb:ea:e9:7d:
af:e4:c8:c7:02:24:ca:ff:0d:7c:f5:8e:f7:21:d0:
b1:dc:34:1e:7a:37:e0:e8:9e:d0:4d:6d:32:1c:4e:
6f:de:33:11:a2:60:5b:96:e4:d3:2d:af:eb:a3:1c:
23:90:34:2b:93:6a:85:c3:f3:2e:dd:41:cf:1f:44:
5d:81:3f:b7:8e:a4:f9:e6:9d:9e:9f:c9:66:8b:7b:
e5:95:38:60:3a:60:0c:db:ae:7a:a2:ac:74:aa:c0:
83:73:8f:6c:d6:9e:74:d4:03:b6:3d:81:74:96:23:
9a:ad:1d:26:95:49:92:dd:0d:dd:83:56:c2:6c:fb:
75:53:cc:47:5f:f3:2e:d0:ee:df:84:42:cc:dc:b0:
fe:39:68:0e:3d:49:ff:b4:2f:8f:31:c8:e4:21:e3:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:D2:87:1A:E0:B6:4A:FB:2F:7F:36:29:A8:51:47:FC:9F:12:30
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d1:ac:4b:f9:79:aa:5e:b6:76:16:74:a5:d7:65:97:46:d7:
59:ea:42:c2:3b:73:d5:be:07:69:e8:26:e1:ad:78:36:c6:56:
9b:ab:f1:6f:9c:a9:75:47:8d:22:f0:25:58:a7:f4:c7:82:be:
bc:2e:58:a7:72:c3:f7:35:a8:31:32:7f:c5:ef:60:fa:ea:2a:
c8:53:26:00:51:ac:70:e1:13:42:e9:86:84:22:71:fa:a4:2b:
85:90:10:e1:35:a6:96:06:aa:5f:d1:81:8f:b1:40:1c:cd:e8:
0d:4b:f1:df:38:6f:88:9d:de:8a:d7:b8:54:36:dd:9c:44:58:
c2:6b:98:b8:98:50:71:d6:ac:7b:50:f6:69:69:46:4f:89:42:
22:4a:94:9d:2e:fa:a0:03:f4:15:a7:c4:94:ce:b7:73:cb:81:
75:9e:e1:0d:4a:45:58:ed:72:40:0f:30:67:2c:e3:9d:29:59:
5b:c5:a4:00:cc:2c:29:78:ea:40:85:e0:64:4f:86:e0:7f:7a:
58:ac:88:dd:aa:c1:6d:d5:aa:5a:7c:f4:7e:44:f4:68:8a:40:
13:4f:fd:a7:26:70:49:e6:f0:d7:b8:ec:bd:71:5e:4b:0b:1f:
84:46:fe:47:20:4b:97:ae:81:dd:03:82:0f:b2:24:1b:55:30:
24:16:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:34:55 2025 by rpki-client