Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: +h7ZsWZ4leUjwPnC9dWcvh9uYPk89JD4FOWzoF2iZ6k=
Subject key identifier: 10:CE:2B:B4:5C:47:0F:DD:46:2D:0B:C1:A3:D9:78:C7:DB:ED:28:81
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 0196A6541EBDB11FCE1ACA08811D256FB312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 16:00:52 +0000
Manifest this update: Tue 06 May 2025 16:00:52 +0000
Manifest next update: Wed 07 May 2025 16:00:52 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: LoGHJpKjO8rvnT6gN63NIW8t1QD0BQRI8yPWn8A6eC4=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:1e:bd:b1:1f:ce:1a:ca:08:81:1d:25:6f:b3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: May 6 16:00:52 2025 GMT
Not After : May 7 16:00:52 2025 GMT
Subject: CN=10ce2bb45c470fdd462d0bc1a3d978c7dbed2881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:b9:53:b5:50:66:9d:e4:3f:5f:1c:bf:e8:
85:02:6f:00:e8:dd:1b:b1:c3:f1:6c:e5:5b:b6:f2:
df:bd:55:64:d8:25:b0:e3:ce:de:59:da:a7:6d:8c:
63:52:ee:db:56:5e:08:c0:cb:0e:6c:e2:1d:4f:d2:
42:00:ae:d6:09:bf:3d:8e:c7:6b:1e:9b:7d:75:51:
f4:5b:19:39:c7:ad:86:d1:f2:27:5f:c9:a2:88:d2:
5b:b6:ef:c0:ea:c8:97:e1:30:7c:ad:2c:6e:4a:4f:
10:c9:4a:fd:4c:96:79:4f:ec:91:84:92:16:7b:f8:
a8:e0:9c:ca:e3:be:d7:60:b2:12:9e:a5:88:ac:de:
44:a8:27:33:df:68:54:7a:ed:12:37:1f:2f:6a:2b:
5e:a7:45:6d:19:39:5b:1a:30:73:9d:89:5b:7b:ce:
5c:1c:8b:91:6d:71:92:d6:41:f0:1c:d2:80:a1:7f:
43:e3:ca:f5:9a:6a:ac:0d:8e:f7:37:4f:dc:14:66:
de:67:4e:04:bf:fc:f9:92:a5:1e:af:72:cd:20:90:
70:f5:41:e5:8d:89:41:30:cc:1b:2d:3a:28:a7:cb:
94:04:87:84:1a:b0:1c:a7:93:36:3b:43:d1:04:0e:
ad:fa:43:b4:14:e7:3a:ee:a3:e4:7a:69:18:2f:23:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:2B:B4:5C:47:0F:DD:46:2D:0B:C1:A3:D9:78:C7:DB:ED:28:81
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6c:69:94:c2:ca:a0:de:34:78:87:1e:f4:41:e3:05:3a:c5:
cc:f9:b8:d4:2f:4b:6c:f6:4b:9e:05:02:5e:f2:d7:f8:08:22:
de:06:5f:13:18:6c:c3:0e:13:de:54:26:d6:9d:67:48:b6:b0:
ae:ba:59:60:dc:a7:cb:a9:ef:e3:55:b8:5b:91:90:ac:b4:f9:
ae:9a:20:be:cc:7a:4a:04:3d:54:06:18:24:fb:8a:df:c6:7a:
ab:69:f2:04:9e:e3:aa:db:e1:62:7f:4a:d4:3d:ae:cf:a5:22:
a2:4c:41:a4:8a:ed:10:3b:06:73:16:45:86:58:d2:12:2f:49:
6d:54:99:ea:e4:a1:2d:c0:c5:57:b3:1c:66:83:be:69:a3:13:
97:cb:1a:6f:e2:08:40:2e:12:44:de:fd:81:d5:e8:5a:36:9b:
73:4c:55:5a:cc:b5:95:97:c4:3b:76:a8:d1:fc:94:fc:c3:d8:
b2:46:96:83:99:0e:7e:db:68:e8:de:36:92:af:c6:20:15:19:
f5:1f:91:92:31:99:60:4f:6c:e1:8e:52:65:5b:98:89:8f:6e:
a3:b4:a0:98:ff:c6:2d:97:f9:94:58:dc:21:f1:09:fc:c6:eb:
73:9f:3b:82:dc:bc:c0:cc:b8:29:0d:9e:86:8e:d2:bd:c2:41:
d1:1c:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:10:34 2025 by rpki-client