Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
File: ZboV1Huk9EgnZEctjZcUah67v4Y.mft (raw, json)
Hash identifier: JM/7ZQ6a5K49R89x3cKwFxdxAlc2dXrFyZ7MVQlfrIQ=
Subject key identifier: 59:39:CE:76:D2:70:66:92:FD:79:44:77:6B:00:18:EB:B7:75:52:25
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 0196CEAB0769D22C6B4BEB36BF6AAEB4AAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
Manifest number: 1544
Signing time: Wed 14 May 2025 12:00:37 +0000
Manifest this update: Wed 14 May 2025 12:00:37 +0000
Manifest next update: Thu 15 May 2025 12:00:37 +0000
Files and hashes: 1: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (hash: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=)
2: 6To_-SlMxz3YG0ptLY8TCmc3uqU.roa (hash: uJB/UZHKN4C9IojJMtedYn8sR+djAWZ0k/CyzWBoJ6E=)
3: ZboV1Huk9EgnZEctjZcUah67v4Y.crl (hash: T3UoRv1YcBZKzm/9pNL0VTyk9LQZjYxqbbRKfjikZSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:ab:07:69:d2:2c:6b:4b:eb:36:bf:6a:ae:b4:aa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: May 14 12:00:37 2025 GMT
Not After : May 15 12:00:37 2025 GMT
Subject: CN=5939ce76d2706692fd7944776b0018ebb7755225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:55:f0:8a:f4:60:ef:fb:89:7d:55:e6:b5:
68:4d:db:93:a7:47:50:fb:c0:fa:50:3a:d1:16:f0:
2a:72:ae:68:35:5a:44:c8:e8:af:93:6d:a9:63:8e:
1e:8d:84:5a:1f:16:d5:1b:2a:b4:b4:18:f7:0c:65:
dd:6c:41:6e:98:ff:6a:40:a2:73:b6:53:87:b3:f6:
1e:35:17:7e:62:8d:ee:48:eb:f3:1e:a5:23:49:97:
f9:ed:4f:16:69:47:8e:cf:21:ff:00:ca:85:b8:52:
57:64:54:7d:b7:ae:53:f9:2a:73:6b:9f:de:66:8a:
f3:dd:c2:be:3e:7a:bf:77:34:08:e5:33:f1:77:03:
55:d8:21:38:73:95:31:28:81:72:a2:b1:69:aa:26:
08:aa:48:40:83:ad:f8:fe:5b:6f:2a:72:5f:87:ad:
2d:28:da:8b:a7:69:cd:ac:ef:28:15:67:0c:73:a5:
53:3f:59:a0:92:0a:aa:51:b6:26:c7:d7:40:15:d9:
89:ea:f2:94:de:65:f7:40:64:f7:5a:1b:11:ec:cd:
9b:b8:c0:42:8c:ba:27:ea:9f:fd:c3:2c:46:44:64:
60:90:ae:ce:c0:be:f7:70:2e:5a:e1:47:e7:be:a0:
12:e6:a8:61:72:b6:42:1c:2c:70:b8:59:67:09:48:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:CE:76:D2:70:66:92:FD:79:44:77:6B:00:18:EB:B7:75:52:25
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:66:44:8c:09:c4:a1:ca:b1:1c:fc:4e:e8:88:6d:cf:51:6b:
6b:73:69:f2:6f:a2:91:f2:5b:86:5e:94:db:98:2d:61:d2:79:
f9:ef:01:f0:31:b6:12:4f:6f:f6:cb:c5:fa:ed:c7:94:2b:05:
e1:e1:f8:a6:30:d9:de:97:66:96:c6:d5:65:2c:73:7b:f6:69:
a4:6f:33:7b:e2:bd:b7:b5:da:22:89:39:77:9f:4a:f7:d0:c5:
46:96:53:b2:4b:e7:40:59:65:60:1c:01:7a:9b:31:39:9a:ed:
3b:d4:b3:b1:40:04:53:58:f0:d6:79:24:d3:8e:37:e4:45:34:
ae:41:c9:74:62:2d:cc:b3:eb:90:ff:fa:4d:77:98:e1:bc:65:
6d:66:78:39:a9:c9:07:f5:91:8b:de:be:dd:e0:fe:30:53:de:
3c:b4:5d:7d:81:49:c0:3e:1d:8c:45:f8:4c:3c:20:93:34:bd:
69:0c:a5:4b:f3:1d:96:81:71:39:6d:9e:dc:51:3b:64:56:ee:
0d:b7:3f:e0:09:aa:e9:cb:ae:0e:00:44:93:39:8a:64:8d:05:
a6:da:56:f4:fa:2f:f3:e4:f4:2c:5e:76:a2:d6:b0:7c:ef:53:
fd:98:7f:18:b8:70:f8:4c:a3:fc:9a:1a:c1:8f:c7:26:9c:c8:
5a:37:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:23:24 2025 by rpki-client