Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: xSjkbVFJ6wwSl4/CK1v7MtfVOzgjPsNuKfKvzA4BDPk=
Subject key identifier: E1:03:78:99:CE:9A:ED:BB:75:BD:A1:F4:26:56:87:7A:96:EC:FC:58
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 0196D852B8168BBE83D4F976ED26A9435964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 0238
Signing time: Fri 16 May 2025 09:00:21 +0000
Manifest this update: Fri 16 May 2025 09:00:21 +0000
Manifest next update: Sat 17 May 2025 09:00:21 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: PN8TzYM3QTjOqBrtcxfVQ4xCsF05WCxZLxa5Gr+FVBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:52:b8:16:8b:be:83:d4:f9:76:ed:26:a9:43:59:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: May 16 09:00:21 2025 GMT
Not After : May 17 09:00:21 2025 GMT
Subject: CN=e1037899ce9aedbb75bda1f42656877a96ecfc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:a9:ed:4b:a3:49:b8:c3:52:e5:a3:21:77:
87:59:6f:16:bc:9c:81:d5:b9:85:c4:0e:fc:79:c8:
3b:d1:30:60:fa:9c:18:01:58:10:47:b6:50:4f:68:
3e:77:91:15:6a:b6:e9:04:03:1e:33:82:41:0f:9e:
05:95:c2:b7:cf:6d:aa:64:57:6f:65:9e:68:03:2d:
e4:f8:a2:e2:b2:df:9b:32:7f:cd:e2:63:48:df:ad:
58:35:95:e9:fd:85:e9:be:8a:f8:cf:31:c7:b5:7a:
d1:f9:9e:d9:7f:dd:bd:f2:01:e5:88:a0:cb:03:c1:
69:90:f5:3a:9f:81:f0:6e:43:c5:fe:fa:d9:83:df:
36:29:95:d8:80:c8:9e:7e:7b:eb:aa:52:a1:87:ea:
bd:04:ee:d7:dc:d6:9d:b4:83:62:9e:0d:4c:93:96:
a0:19:b6:b2:20:4a:2e:f6:eb:61:97:9e:23:84:a6:
fa:3f:8b:74:33:41:56:e5:7b:51:6b:46:c7:2b:5c:
0d:b8:0e:db:73:3f:99:81:31:26:44:41:78:f7:bd:
d6:50:d3:56:e2:a9:92:24:c0:4b:79:77:91:59:fb:
1c:05:07:67:db:75:14:bd:9c:56:91:6a:23:f8:32:
7e:5b:b3:67:4c:c7:bb:4d:ea:3c:1e:83:4c:9a:39:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:03:78:99:CE:9A:ED:BB:75:BD:A1:F4:26:56:87:7A:96:EC:FC:58
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5d:12:e5:f7:a7:0e:48:65:19:85:92:92:65:11:42:92:43:
71:0b:9c:9e:9d:18:74:cd:6c:34:48:d2:69:e2:3a:77:69:b9:
e2:66:40:04:b5:e1:18:71:32:e5:ef:30:d1:4d:21:0f:49:17:
a2:25:78:03:11:c7:3b:d2:85:c3:80:15:91:22:29:88:4a:39:
26:4e:51:01:f6:64:0f:aa:6e:85:15:01:92:b4:67:55:9f:75:
67:31:a6:47:f6:18:e5:79:ed:2a:0d:53:8f:5d:34:5c:78:b9:
cd:12:f9:88:4d:96:9c:07:ba:f8:77:49:2a:9b:b0:ee:5a:2a:
49:d1:58:b2:df:4b:e3:3d:80:ad:68:f1:53:cc:55:9e:49:3a:
68:16:e3:b5:63:6a:29:0f:94:54:33:c0:78:54:7e:ad:68:a8:
f9:85:ec:2f:04:3a:f5:2c:ba:d5:90:49:f3:74:eb:42:10:b1:
76:44:4a:e9:3a:c4:94:73:36:4c:1a:2c:85:9a:14:d2:08:c4:
28:67:d5:d7:ad:4b:f8:80:27:bc:73:39:6e:62:ae:f2:8b:e6:
2d:b6:cb:fd:de:e7:7e:de:88:74:28:63:cc:dd:8a:05:c9:bb:
6b:ad:c3:66:55:c1:a5:cd:bf:78:a9:b9:db:db:b2:fe:25:2b:
77:df:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:14:38 2025 by rpki-client