Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: urONOZfR7T46/jDh9a6g1v3RtpFn9gnYimBATddksbA=
Subject key identifier: A1:82:5B:38:65:BD:79:11:C0:60:C2:1F:5D:5F:92:F5:30:AC:0D:4B
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 01969F082E32D7790A01D2D47BFEC94EE920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 088D
Signing time: Mon 05 May 2025 06:00:35 +0000
Manifest this update: Mon 05 May 2025 06:00:35 +0000
Manifest next update: Tue 06 May 2025 06:00:35 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: hDGkc/gNJdZH+LyEB+/AhCfTH403pyPz6M3GIY0rtoY=)
2: eL1SH2o6BFV4SrOkUUf29xtUS08.roa (hash: JmkdJoGyIMkBw++B3F+N+a79o3z14Hcd0LecLEcyOis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:2e:32:d7:79:0a:01:d2:d4:7b:fe:c9:4e:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: May 5 06:00:35 2025 GMT
Not After : May 6 06:00:35 2025 GMT
Subject: CN=a1825b3865bd7911c060c21f5d5f92f530ac0d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:35:94:5c:5e:43:1f:97:2a:7a:ba:35:6e:
d0:e8:c9:9a:98:b4:01:e5:95:cf:a8:cf:d1:8d:64:
db:09:b9:c1:f0:2a:47:9b:db:ca:50:05:5d:c9:f1:
a2:41:a9:54:e1:72:2c:6e:67:16:ad:c2:f5:ba:c9:
84:a1:4a:90:21:da:cd:7b:25:17:95:ce:a0:00:6b:
ff:39:eb:ae:87:6b:be:5a:a1:11:a5:f6:d1:65:e4:
73:7b:63:a0:e6:6c:87:7b:e0:3e:52:7a:56:0f:62:
bd:77:23:98:67:ab:41:c0:3d:a4:85:bd:fe:9f:55:
23:6d:d0:f7:c4:16:61:01:8d:9c:49:14:95:86:dd:
b9:3c:6a:6a:c9:8b:1d:27:63:39:0a:c7:bc:e1:da:
ec:69:86:1e:9a:61:86:f6:a2:18:24:91:4f:bc:73:
a4:0d:1b:52:33:1d:bb:b2:85:c7:dd:23:5f:3f:02:
e8:88:33:45:fe:6d:3b:6e:ec:45:6e:b1:25:e3:b2:
6f:72:d4:bf:08:a1:fd:66:56:d6:14:2a:34:b8:e8:
d1:53:c2:9e:15:07:9c:94:de:8d:d1:eb:91:53:ba:
7b:c5:37:c7:98:fb:cf:99:d9:c6:0c:83:30:fd:79:
99:c5:87:29:89:ae:64:d1:a0:13:f1:00:8d:6a:5b:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:5B:38:65:BD:79:11:C0:60:C2:1F:5D:5F:92:F5:30:AC:0D:4B
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e9:ed:03:c2:14:87:a9:94:14:7a:18:46:08:b5:d0:21:3c:
31:99:1a:25:fc:53:63:9b:00:ca:9e:d3:22:fc:65:1b:33:51:
10:34:1a:e1:31:54:a5:62:87:1b:7b:21:8d:40:38:3b:5b:21:
31:89:7f:5e:b4:3b:b0:77:58:13:c4:de:83:a9:f1:c8:9c:f0:
25:62:b5:6a:b1:7a:47:61:e8:fc:86:7e:56:39:b8:98:e0:ea:
01:8e:94:54:e0:c3:75:d3:39:b2:e5:48:89:83:48:74:7b:c8:
d9:d7:f8:e6:3f:cb:1c:1b:73:49:f6:a2:1f:5f:01:1a:95:63:
aa:41:91:a5:80:52:72:0b:d2:e8:25:bf:e4:97:cd:5b:5a:0c:
b3:65:d3:1d:f1:23:33:b3:3e:04:38:44:8f:74:06:db:3e:2b:
b5:2a:88:6e:b1:66:c2:bc:be:cb:92:18:b5:e4:ae:da:af:f0:
d8:ee:d2:d9:5f:03:03:40:1c:f3:79:59:7a:04:52:5f:17:6b:
16:1f:52:2e:52:14:77:bb:6f:7d:a9:6b:ac:63:1e:24:5c:dd:
9c:57:9d:b5:01:64:e2:96:ad:5d:09:2a:bb:2e:3c:f3:de:66:
df:6e:f5:06:4c:dd:c6:72:62:f0:77:6b:cd:63:6b:26:75:a0:
94:50:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:52:58 2025 by rpki-client