Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: rXOHSL277lUCKUIDtdYBwFPm4gnXi8rYFfdz3oYsnQM=
Subject key identifier: 33:36:EC:51:43:18:C4:F1:7E:63:1E:87:B9:34:1D:47:3E:84:BF:98
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 0196BF6F9A113D2C7C4637E85CBA40E4F2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 1235
Signing time: Sun 11 May 2025 13:01:24 +0000
Manifest this update: Sun 11 May 2025 13:01:24 +0000
Manifest next update: Mon 12 May 2025 13:01:24 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: lu7hGmOHoIVCtIIXXHgzvXzmcjgS1lnmeNiSgoL14uo=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:9a:11:3d:2c:7c:46:37:e8:5c:ba:40:e4:f2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: May 11 13:01:24 2025 GMT
Not After : May 12 13:01:24 2025 GMT
Subject: CN=3336ec514318c4f17e631e87b9341d473e84bf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:39:87:5e:c6:e1:b7:04:13:57:c4:f9:ff:
1a:a7:c6:e5:45:5d:ff:61:3e:1f:58:84:07:b6:76:
11:f9:97:5b:1a:c8:66:15:f9:9f:85:99:fb:eb:d1:
04:03:d5:33:d4:ff:c9:9c:93:fe:c2:f8:d5:79:88:
79:83:17:9b:a1:21:a8:fd:1b:7a:68:cd:66:f3:ec:
62:76:32:90:8f:1d:e3:ec:6d:cd:1e:aa:bf:e8:d9:
bc:be:2d:95:32:a6:a1:d4:b9:68:18:b3:83:57:b0:
cc:35:4b:f0:b5:a5:86:b1:9a:b0:a3:27:10:45:e6:
27:e4:05:72:b0:01:23:54:e3:58:dc:ea:eb:00:6e:
1f:9d:0b:53:2c:5f:5e:f6:92:68:ae:6e:78:11:d7:
81:3a:6a:ad:de:9f:36:66:5f:b7:e4:76:36:2d:52:
94:b6:8d:ac:63:7a:9d:19:01:3c:58:2d:db:d2:5d:
fd:85:f9:f6:01:db:81:0a:9b:72:c4:b6:c8:b9:e2:
b2:a0:91:d6:b3:df:a9:a4:d8:d8:9c:95:21:57:f4:
80:30:c5:8c:c5:06:84:74:a3:30:a7:d4:53:54:12:
73:c2:ee:2e:44:0c:be:da:6b:19:30:2b:4c:70:fd:
b3:da:cf:a0:f9:db:b8:42:79:83:53:57:f9:06:1d:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:36:EC:51:43:18:C4:F1:7E:63:1E:87:B9:34:1D:47:3E:84:BF:98
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ee:63:0b:43:78:ef:64:55:a8:20:9b:23:5b:64:9c:7c:e9:
e3:be:3d:41:40:a8:2c:a5:73:fa:f0:bf:aa:02:1a:b0:cd:aa:
c0:3d:fc:51:ca:45:e9:ba:d7:0d:b1:44:0b:4b:09:21:4a:5a:
be:81:ef:34:5c:85:26:7a:e2:eb:63:f9:59:93:b0:4f:99:27:
75:3f:89:a5:89:5c:b1:d8:6b:e6:d5:ca:5d:fb:9c:dd:07:f1:
bb:0a:b4:df:b6:9a:27:44:fd:d9:ae:19:57:19:83:6d:06:03:
11:81:c4:19:33:37:3e:eb:24:fd:3d:6b:15:d3:38:6d:04:d7:
e2:ef:7e:e3:81:d7:da:ea:ed:5e:8f:66:00:91:54:06:cb:e8:
a5:39:0f:c8:d9:21:3f:2f:83:8c:49:16:e5:5a:4d:8f:e1:17:
64:de:65:6d:97:c8:5a:53:ee:97:ce:d6:cd:ce:08:3a:ad:5e:
ce:95:af:c8:e0:a8:d0:5e:65:41:e6:85:f5:17:57:d1:c1:a7:
1c:e8:fa:ca:be:a8:c8:6f:60:a3:12:01:32:39:5d:9c:08:5b:
7c:5a:b6:8f:d1:3e:1d:bb:30:08:30:5e:3d:e1:a2:46:36:05:
38:46:5d:7c:5d:d4:9b:89:de:ca:d6:15:d9:90:b5:f1:64:53:
fb:c3:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:29:37 2025 by rpki-client