Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: H2XvHm01Hh4hDjvOu+K/0EROqxkPK1euuP5G+8JeTKU=
Subject key identifier: 84:30:A1:22:B6:B8:5C:46:F5:0F:A4:0E:1B:AB:D2:4A:FA:45:B0:5C
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 0196BD494E67502A6F3B97B9752FF00A0048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 03:00:20 +0000
Manifest this update: Sun 11 May 2025 03:00:20 +0000
Manifest next update: Mon 12 May 2025 03:00:20 +0000
Files and hashes: 1: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: gw28HQ4V09NlyaJj9CHpM2QaquHtRJFNQQxmYPzfJfc=)
2: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (hash: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:4e:67:50:2a:6f:3b:97:b9:75:2f:f0:0a:00:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: May 11 03:00:20 2025 GMT
Not After : May 12 03:00:20 2025 GMT
Subject: CN=8430a122b6b85c46f50fa40e1babd24afa45b05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:1a:19:a4:d7:a2:c2:37:37:52:8d:ff:48:
3c:f3:70:bd:99:b3:73:3f:4f:c2:83:ca:e7:53:61:
35:b8:90:d9:39:ed:93:b7:45:1c:fb:43:64:8c:8b:
02:f7:e2:51:37:92:f0:73:44:f6:06:5f:6d:f0:b9:
09:c7:0f:9b:ee:bd:18:fc:e3:ae:d8:1e:47:79:86:
28:ae:c0:ae:63:af:6d:70:75:ff:cc:26:56:0c:7d:
05:7d:52:36:22:53:70:71:0c:c9:61:4b:2c:70:84:
dd:f6:88:50:f0:82:77:14:7d:42:7c:a9:9d:0f:9e:
f1:d1:d3:c9:4f:c5:f1:08:5d:71:09:e7:5a:12:e5:
4b:7b:3f:0c:13:5a:3b:d2:07:3f:e4:58:1a:7d:02:
c8:d3:d7:ad:e9:f2:b4:cd:ad:42:97:23:83:29:94:
9c:e1:ad:64:eb:ac:37:56:96:3c:43:69:24:32:36:
50:0d:f8:ee:fa:db:1a:52:f2:79:df:70:08:10:48:
1a:ec:1e:d7:9b:d0:94:6a:3c:5f:3d:ba:d2:df:9e:
ae:a9:6a:86:90:1a:44:84:f6:19:03:c2:60:10:ef:
8d:ff:40:ad:08:a9:42:c7:5b:ed:c5:ff:09:f5:4f:
98:b7:bd:26:7d:2c:11:51:f5:4e:4d:28:2b:0b:1c:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:30:A1:22:B6:B8:5C:46:F5:0F:A4:0E:1B:AB:D2:4A:FA:45:B0:5C
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ff:a7:f1:73:44:d2:47:72:e6:ee:c6:a7:d9:80:61:ab:81:
0d:28:a6:2b:48:53:b9:e5:da:d6:59:ef:b4:bb:e1:e3:60:e6:
ea:ee:70:45:89:dc:3b:bc:d6:8c:56:7e:38:56:ce:d0:65:dc:
66:31:c1:fa:56:2c:1d:7d:4b:54:5f:aa:a4:71:3a:f5:11:f3:
a4:c7:53:fa:a0:46:8f:65:a6:f3:43:9a:40:ee:a1:4a:69:18:
81:cc:89:93:64:fb:e2:7e:40:01:e9:69:3c:e3:5c:ef:dd:6c:
57:6b:65:49:f4:9b:f7:02:4f:19:19:f5:cd:ec:6d:d5:f6:6e:
2d:21:64:cc:27:67:f8:d9:1f:17:b4:32:89:3c:58:73:34:2c:
91:24:ac:87:36:c2:f1:71:96:44:ba:36:03:c2:cb:ef:81:6f:
4c:b8:c8:ed:45:50:aa:28:1e:9e:b1:ee:9b:75:e3:08:0f:0d:
d2:91:80:11:9d:82:3b:14:ac:ee:f3:c3:02:ec:7e:68:44:aa:
d4:48:53:ed:ec:a0:8b:b8:d4:0c:42:98:ef:aa:23:c6:0b:4e:
33:f6:46:07:16:34:0f:7e:6e:54:40:12:d3:ec:ed:8b:fc:17:
d5:48:8d:a6:9f:41:47:fd:87:6d:9a:6e:74:53:8e:f1:68:97:
c9:f8:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:29:13 2025 by rpki-client