Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
File: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft (raw, json)
Hash identifier: jSNfAXIopuZXwXyA3tN+g8+geBeV7oJLkiBkn5YpKM0=
Subject key identifier: 5C:25:8C:82:4E:6F:C1:16:37:4B:75:04:1E:03:1B:5F:77:F9:87:55
Authority key identifier: 67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
Certificate issuer: /CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Certificate serial: 0196C984D887B6BF7A29DB77FADD046F4D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 12:00:48 +0000
Manifest this update: Tue 13 May 2025 12:00:48 +0000
Manifest next update: Wed 14 May 2025 12:00:48 +0000
Files and hashes: 1: Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl (hash: Tyqr4I6NalVBxFnIwXF7aZMiO1jBPS6oOHdeIBpyWS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:d8:87:b6:bf:7a:29:db:77:fa:dd:04:6f:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f649ff6c7b9758f420b1edce07a4ed373837c0
Validity
Not Before: May 13 12:00:48 2025 GMT
Not After : May 14 12:00:48 2025 GMT
Subject: CN=5c258c824e6fc116374b75041e031b5f77f98755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:dd:ed:76:89:71:41:31:5a:99:c9:92:03:
10:88:8e:e8:af:25:d9:a9:46:6d:97:b7:3c:41:bc:
27:5e:6c:b1:a0:1e:37:b0:2a:0e:6d:74:e0:dd:dd:
75:91:d6:f3:47:5e:87:ef:c2:f4:b6:6b:14:fb:18:
70:f4:f1:fd:ab:a3:7b:64:af:63:74:92:d2:ce:43:
90:6b:e1:56:9e:9c:47:44:7b:bc:1f:8e:0e:93:a2:
3f:64:52:fd:5b:9f:17:b4:3a:36:8c:60:95:a5:fb:
17:87:4a:59:7c:b1:5d:29:89:5f:03:73:84:6a:d5:
f1:7c:40:5e:33:8e:58:5e:0e:fc:3f:fa:4a:67:81:
18:41:db:b9:c5:de:e1:ec:0a:0d:a2:7c:94:0f:5f:
ef:95:57:97:27:ae:d9:5b:9c:9c:38:4f:42:8a:98:
bc:e7:97:ea:75:8a:1c:db:b4:c5:e8:0d:4d:34:ed:
c6:51:86:d1:ae:11:f8:c6:cc:bd:d1:97:a4:2e:8a:
a3:35:90:87:b3:1e:98:8a:9a:45:61:de:cd:40:44:
fd:5f:22:1c:2f:bf:20:71:85:b3:c3:19:c0:7c:f0:
a1:4a:0c:cd:c5:f2:00:25:af:45:e9:75:fb:5f:54:
f3:95:50:a9:66:76:b3:fe:8b:cd:c1:11:1e:4a:54:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:25:8C:82:4E:6F:C1:16:37:4B:75:04:1E:03:1B:5F:77:F9:87:55
X509v3 Authority Key Identifier:
keyid:67:F6:49:FF:6C:7B:97:58:F4:20:B1:ED:CE:07:A4:ED:37:38:37:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9d0c21-69ef-40bf-8611-0f2c3967da9c/1/Z_ZJ_2x7l1j0ILHtzgek7Tc4N8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:74:cf:9a:a5:87:bd:4a:7f:7d:eb:69:92:d0:1d:4d:d6:
6f:be:c4:63:07:5e:af:26:da:a5:59:e8:1a:48:14:1d:94:c3:
36:16:56:f4:c3:33:68:4d:20:d6:e0:3e:ec:82:bc:b3:7c:c8:
d0:a7:f6:10:b5:27:ff:98:39:e9:67:9e:2b:91:21:fa:d1:38:
83:bd:68:21:3e:40:ae:8c:f1:72:d2:6d:b9:d9:75:7d:e9:6c:
69:d9:94:06:3c:bc:50:fb:b4:fa:e5:8a:19:03:f6:3e:e5:e0:
c9:08:2f:bd:ac:19:52:c9:42:37:e8:ba:84:e0:e4:0b:b9:ef:
88:f8:7f:3b:41:eb:1d:a2:3a:23:89:60:e9:96:f9:a7:f0:a5:
39:5f:d2:08:45:71:d5:97:40:f5:6e:8f:ee:f8:29:af:15:fd:
6a:38:a8:fc:3b:b2:0c:4b:65:14:0f:d3:52:35:2b:58:7d:00:
01:50:a1:d1:f8:f2:99:0a:95:4d:11:49:d0:45:ff:86:44:78:
22:a9:52:bc:87:51:e9:ca:e6:f7:97:d9:99:b2:0b:9d:be:ca:
89:f1:ee:b6:9a:39:38:35:bb:68:23:db:05:9d:1f:dc:20:18:
40:02:cb:67:00:fd:e7:de:c0:b6:6a:54:da:85:d0:85:bf:94:
e4:12:41:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:12:22 2025 by rpki-client