Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
File: ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft (raw, json)
Hash identifier: bktTgoQArLlOEq/UF8hnbab7Y34pOjn2b2zlnGIKa9U=
Subject key identifier: 95:CA:C7:D7:EC:DB:E5:BA:87:FD:01:3B:EE:E3:96:25:8D:C7:2F:2B
Authority key identifier: 65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
Certificate issuer: /CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Certificate serial: 0196A79D775CAFA5DA07EDFA2A0CD1B4C764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
Manifest number: 1209
Signing time: Tue 06 May 2025 22:00:36 +0000
Manifest this update: Tue 06 May 2025 22:00:36 +0000
Manifest next update: Wed 07 May 2025 22:00:36 +0000
Files and hashes: 1: ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl (hash: 9YtN2XE+gEZwwsGly7K62BswzKycI3ZGtxFwh4xWaG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:77:5c:af:a5:da:07:ed:fa:2a:0c:d1:b4:c7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65282bf52bfb80f1106b3c0ecdfa1a5433305086
Validity
Not Before: May 6 22:00:36 2025 GMT
Not After : May 7 22:00:36 2025 GMT
Subject: CN=95cac7d7ecdbe5ba87fd013beee396258dc72f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:50:52:80:59:50:9e:9f:7c:b1:22:ad:76:
11:56:8a:da:38:47:82:51:fa:4d:a6:57:7e:0c:b2:
c6:59:84:f4:52:62:dc:8a:74:eb:20:0f:9b:24:5d:
e8:83:94:03:90:28:f3:49:22:91:17:7b:0f:51:4e:
1c:f9:c1:31:1d:5b:37:cd:2a:30:7c:9f:42:74:cc:
bc:bd:da:d0:66:aa:16:a8:1f:a7:9a:8e:0b:c2:e8:
35:3f:ce:98:59:f8:0e:5d:6a:0c:3d:a6:80:d4:da:
1f:7c:a0:da:5d:e7:39:53:9e:69:96:de:08:87:2f:
9d:73:c3:24:de:45:55:bc:f9:f6:c4:e4:da:ac:b7:
05:d4:22:c7:fb:a7:68:a0:ed:66:40:44:d2:50:e0:
68:ac:02:fd:ad:be:3e:9b:ad:9f:6d:c1:4a:39:cb:
35:ee:a6:7d:9b:45:0f:94:fa:57:4e:69:d5:2c:f1:
b0:e9:c6:7f:03:c7:40:de:a1:cb:78:a1:c6:65:ed:
25:4c:7c:7c:48:61:42:72:0c:49:e1:3f:75:04:32:
ed:3c:10:96:70:6a:21:65:d3:0e:26:46:75:05:16:
d5:6f:cd:39:06:f5:47:8c:f9:46:d8:85:e0:c7:b8:
4f:9b:21:d4:95:0f:13:4a:6f:d5:0d:c6:ca:b4:00:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:C7:D7:EC:DB:E5:BA:87:FD:01:3B:EE:E3:96:25:8D:C7:2F:2B
X509v3 Authority Key Identifier:
keyid:65:28:2B:F5:2B:FB:80:F1:10:6B:3C:0E:CD:FA:1A:54:33:30:50:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dc7e65-9b3b-4135-9db9-0c1e4fdfac5a/1/ZSgr9Sv7gPEQazwOzfoaVDMwUIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a1:5d:9d:f8:2d:ee:b5:d7:46:38:f4:ff:80:19:8a:76:ca:
8f:12:4c:2d:df:61:b0:ae:8e:9d:32:92:98:0e:67:96:cb:bb:
91:f4:13:ba:cd:ef:01:3b:d5:3e:11:58:3c:11:f7:37:48:5e:
8b:a7:71:44:f7:4d:ee:2e:1d:54:d9:da:b0:ed:6e:3d:2d:c9:
a0:15:26:f5:65:d6:5f:af:a3:2a:67:12:22:92:70:c2:19:24:
4d:58:fa:f9:87:1a:f3:e1:bc:14:dc:bc:b1:cc:61:72:3c:6f:
13:3c:f9:f3:2d:f5:14:2b:92:f0:82:85:58:a7:c2:cb:c9:6c:
28:e5:99:f5:98:39:bd:65:5f:62:c5:82:47:77:3f:32:ec:8f:
a3:50:eb:f1:f2:5f:8e:7d:c8:06:38:ce:2f:a6:22:7c:ad:e1:
e8:b1:b2:af:af:16:de:46:4a:ef:c6:80:97:4d:28:2b:cc:55:
08:20:bc:c2:90:11:68:39:4a:73:13:ab:e1:ef:f8:1a:23:d9:
c7:9b:57:18:51:f1:ec:a8:1e:09:ec:2a:21:42:30:07:db:9c:
b4:c6:f8:b7:2b:76:a3:e9:a0:9e:b4:6f:ad:54:a4:60:6d:47:
1d:df:f8:ab:3d:a3:bc:1c:43:e2:5b:e9:49:26:3c:b4:eb:aa:
aa:06:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:51:11 2025 by rpki-client