Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: B5brj/U2nx1HaljeuwvliwM499D10uz4rVfldydag4c=
Subject key identifier: B5:07:7B:AE:53:4F:3E:94:86:93:4B:29:EA:0D:43:77:30:2B:B6:B8
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 0196B822F29DD6F57BBD62C2B940DB53CC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0C52
Signing time: Sat 10 May 2025 03:00:19 +0000
Manifest this update: Sat 10 May 2025 03:00:19 +0000
Manifest next update: Sun 11 May 2025 03:00:19 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: GUMrJuqjQHoTSQJABLNMOUVCguIsqJ67Xhm8L0cR3lE=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:f2:9d:d6:f5:7b:bd:62:c2:b9:40:db:53:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: May 10 03:00:19 2025 GMT
Not After : May 11 03:00:19 2025 GMT
Subject: CN=b5077bae534f3e9486934b29ea0d4377302bb6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:d1:d6:0e:bc:4d:34:eb:22:96:23:ee:b2:
b1:ff:a7:9e:4a:01:ed:88:36:2a:8e:46:47:b0:90:
74:e6:55:50:0a:84:5b:12:da:ed:81:52:6a:9e:2c:
5a:7b:21:b8:e7:39:34:ac:42:c1:df:07:ee:c1:03:
3d:e5:e7:a1:7e:48:d2:1e:fe:2a:bc:54:96:45:42:
2a:6f:18:dc:d8:16:ab:84:69:a4:f4:16:a4:6a:b5:
69:67:08:91:53:31:9d:fa:ed:ca:d1:46:45:bc:6e:
c4:37:c8:76:97:95:63:f8:c4:62:13:40:28:86:c5:
c4:4f:b4:1c:89:24:44:dd:1e:98:5f:3d:b3:c4:ad:
69:a7:31:25:e9:70:9a:ae:04:00:7b:c4:bb:be:9b:
b3:2f:ec:df:d8:9b:70:91:7a:64:14:8c:ff:19:c6:
f9:6c:f9:a7:9c:e2:31:51:87:14:f9:bf:94:55:98:
c1:61:5f:fb:96:03:a4:01:24:7d:fd:8b:d5:37:f3:
d3:ec:cd:77:da:65:a5:b5:09:93:17:9c:90:15:e5:
b7:cb:4f:b2:48:7e:25:4d:15:22:fb:aa:0d:83:ec:
5f:79:9d:cd:6e:21:ee:1e:b5:4b:c7:db:bd:4d:58:
47:13:a5:07:39:c1:de:a5:d2:4b:7b:f7:00:e8:5b:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:7B:AE:53:4F:3E:94:86:93:4B:29:EA:0D:43:77:30:2B:B6:B8
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:47:17:96:13:67:ca:e3:ea:69:86:c2:a7:01:8f:8a:2e:a1:
b3:d5:4c:66:9c:c3:32:67:da:ca:bb:b7:62:7e:9d:91:c5:4f:
ce:03:cc:2e:ff:e2:1b:64:87:24:5a:52:a5:ee:9e:75:bd:6d:
7a:bb:4f:ee:af:3f:47:7b:1e:d6:0e:09:1b:91:4b:a4:91:06:
e3:a1:7f:97:f7:36:1a:61:1b:12:88:84:3c:b5:82:49:f9:e1:
e9:ed:1c:bf:fc:7d:1a:58:f5:05:9b:62:bc:b0:5a:cd:06:45:
56:fc:7d:6d:4a:80:27:1b:9a:71:08:4a:2e:1e:55:75:46:c8:
e4:20:76:68:07:90:ad:1d:02:d6:cf:f2:6a:de:10:a9:76:9f:
c5:c2:a4:e8:93:65:93:a3:51:0f:38:36:18:cc:45:68:16:d5:
1c:65:1a:09:cf:40:18:7d:0f:c3:83:ca:d5:8f:f3:6b:f5:dd:
dc:62:a1:0d:fa:9c:48:11:65:18:53:89:d5:1e:e7:d8:51:79:
c3:cd:79:41:d0:0e:e7:ca:10:b7:9e:63:ae:cb:36:06:16:84:
b5:0a:94:90:bf:25:32:f5:3d:b3:3b:e4:f4:c2:29:a4:f6:41:
7c:92:83:80:e3:9c:5c:f9:5b:dd:c2:66:87:23:5b:3c:54:42:
b5:99:4f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:07:45 2025 by rpki-client