Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier: t+uClrICWJnxufo5txTd866fLHJrBsDUsLa6vxB0CJU=
Subject key identifier: D3:83:35:9F:84:FE:10:03:AA:BD:0D:A4:C9:13:42:3D:6E:46:AA:6B
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 01969CACD528007B53D8361CBF7AD5465D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 19:01:34 +0000
Manifest this update: Sun 04 May 2025 19:01:34 +0000
Manifest next update: Mon 05 May 2025 19:01:34 +0000
Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: shUStL8koeLYw9e6jXx8OfpA6+b4fBqfVdmcVfCwMLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:d5:28:00:7b:53:d8:36:1c:bf:7a:d5:46:5d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: May 4 19:01:34 2025 GMT
Not After : May 5 19:01:34 2025 GMT
Subject: CN=d383359f84fe1003aabd0da4c913423d6e46aa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:13:83:10:a6:95:d6:56:eb:81:81:b6:d3:
bd:ed:85:27:ef:51:7b:80:e4:9a:15:ed:12:2f:58:
32:93:e2:d9:52:90:3d:4f:20:36:f2:b2:ab:2d:a5:
7c:37:39:bf:d5:77:f2:e5:bf:12:98:69:a2:17:51:
18:13:e2:e8:02:1a:37:dc:a3:2c:40:91:1c:02:6c:
a3:be:b3:1b:85:9e:22:81:34:27:39:c1:22:20:8d:
f1:f9:b0:a9:c2:46:40:33:bf:42:89:cc:c7:a0:18:
7e:da:fd:c6:09:65:f5:ee:e5:3e:6e:7d:6a:25:ab:
d2:cf:ae:ab:8e:a1:9e:0f:9b:26:e8:9f:a2:f1:07:
ba:6d:cc:48:86:26:4a:58:6a:22:47:c3:df:29:7a:
6c:28:f4:95:35:be:a8:72:15:a0:e0:f2:4d:42:05:
53:40:94:81:71:8c:5a:78:25:02:87:d7:65:2f:90:
c1:23:5a:2a:3b:63:93:6d:37:54:12:f7:9f:46:08:
d4:26:a5:a4:f0:72:cc:d7:ea:15:ce:d6:c6:c3:76:
c7:f0:c3:d0:d3:8d:3b:6e:43:60:38:d1:75:6c:fe:
7c:92:e6:f4:d7:cb:c1:95:67:3a:e6:3b:21:7c:d4:
0f:9f:ba:89:24:33:5f:a7:0a:69:a3:85:1d:6b:06:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:83:35:9F:84:FE:10:03:AA:BD:0D:A4:C9:13:42:3D:6E:46:AA:6B
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:48:01:fd:9c:a4:a0:82:55:38:88:7d:2e:1b:7d:9f:cf:d1:
a2:c3:11:8a:8c:b4:f2:47:51:d0:05:ea:5c:86:2d:2b:61:0c:
2f:30:df:a1:82:a4:1d:40:91:0e:a9:36:e8:0b:be:6a:b9:05:
68:fd:7b:ea:17:f1:46:d1:fb:55:ab:d4:02:ed:31:45:07:bd:
55:78:2c:82:4f:d5:8b:d1:5c:04:92:f4:dc:1c:6e:e7:f7:48:
6f:f7:0e:84:a0:05:9b:fb:10:9a:8b:e1:df:fe:be:d9:dd:f2:
d1:04:f0:9a:04:08:df:35:08:1d:74:2b:9c:f5:81:61:4f:58:
c0:bb:37:16:18:69:54:11:9b:f5:04:ce:f1:d0:22:d7:08:c7:
5a:a3:50:7f:a1:36:6d:c6:b5:db:55:4f:be:85:93:f7:5c:39:
07:4c:c6:22:32:71:e2:9c:93:e7:7e:db:b5:3d:22:83:42:cd:
c0:2d:1b:50:b7:0b:1c:e1:6e:b7:d5:ae:22:65:3d:09:a0:4a:
2e:66:48:6f:5b:75:68:19:68:6f:cf:1f:5c:67:9d:63:a5:d7:
2a:55:75:27:7f:a4:88:37:a4:7b:04:43:0e:f8:9b:84:9f:30:
e9:dc:8f:c0:74:11:34:b1:75:ef:6c:e4:43:b1:04:15:4a:50:
de:ed:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:11 2025 by rpki-client