Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: LjzDTahuviWxLt5sckI3VCc8WS2HmXx1+uRNka/1WNo=
Subject key identifier: 25:CE:B0:A7:A3:09:8B:D8:75:D1:4A:E1:D7:BF:EB:B3:0E:BC:37:BD
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 019676B1338440FD60D18E0BECF70CB292CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 10:00:46 +0000
Manifest this update: Sun 27 Apr 2025 10:00:46 +0000
Manifest next update: Mon 28 Apr 2025 10:00:46 +0000
Files and hashes: 1: gROQX262hBLEAaMQi9RZD0slHEs.roa (hash: KRs0pMeE32FkERm2kWqQrSa0jY8OZzctwZkQ2Bh+yr0=)
2: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: OWk0H1FaCFv0KlmnwlXuBE8tMxN+r/oXu9AcKd0FdWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:33:84:40:fd:60:d1:8e:0b:ec:f7:0c:b2:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Apr 27 10:00:46 2025 GMT
Not After : Apr 28 10:00:46 2025 GMT
Subject: CN=25ceb0a7a3098bd875d14ae1d7bfebb30ebc37bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:2d:4e:0d:d6:09:93:6d:2a:cd:24:a7:b0:
b4:aa:0f:05:0e:a9:ea:e0:ca:35:00:2c:ea:41:df:
af:81:ad:84:5a:6c:49:ea:e8:28:18:de:e2:ba:5b:
d7:c3:09:e2:ee:2d:cc:e7:cc:df:69:53:b0:10:1e:
e2:2a:35:94:46:37:6d:3f:7c:94:2d:e5:31:da:53:
02:70:01:b4:91:4b:97:e0:11:a0:37:53:da:d6:81:
25:01:c3:c5:df:30:95:54:d4:30:95:c6:50:be:a3:
63:25:1f:f7:43:a4:a6:79:f6:dc:50:0a:20:ff:04:
79:9c:ef:4b:78:a6:1b:80:ba:f9:5e:11:f0:ea:4a:
56:2d:32:d7:71:a4:f3:9c:9a:e6:fa:b6:64:9d:44:
9c:d0:ed:4c:3a:93:d8:25:94:e8:55:7f:e1:a0:86:
e5:af:34:99:6b:29:ca:e9:be:b8:06:37:41:7c:2e:
5a:30:3e:f6:4f:c3:97:2b:39:90:4a:c3:24:59:d0:
f7:d6:1b:2d:d6:1f:94:29:74:d6:75:f4:9e:0f:d7:
6a:dd:fc:37:a0:93:5e:11:31:4b:7e:74:bd:eb:02:
00:41:78:ce:55:3e:d1:72:32:21:77:1c:cd:04:14:
dd:c6:8a:18:6e:82:7d:39:fb:c9:5e:99:51:34:5f:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:B0:A7:A3:09:8B:D8:75:D1:4A:E1:D7:BF:EB:B3:0E:BC:37:BD
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4c:42:75:f2:24:b5:3f:76:cb:82:ce:dc:9c:2f:2a:19:ce:
9a:f8:35:06:13:a8:e4:c1:f8:b6:39:db:a5:6e:37:72:86:77:
62:a7:82:63:1e:38:fd:73:9a:51:15:b9:ef:aa:1e:40:5d:eb:
b3:f8:00:40:78:f6:fc:3c:af:1a:7e:cb:2a:fa:de:06:c2:af:
71:7c:ce:23:6c:07:20:0f:7c:65:a6:54:4c:ff:45:58:9b:0b:
7d:4c:81:80:8a:83:52:ec:e2:b0:be:a6:7e:f9:fe:55:b6:85:
1b:9c:27:d0:82:ca:a8:ec:c4:02:10:6f:80:ac:34:52:4c:0e:
b1:c5:db:70:72:a2:25:4b:f4:8c:c5:90:0f:78:2c:96:d1:5e:
2d:bb:6c:9d:a6:e7:78:78:d5:7a:af:9f:61:6d:80:08:b3:59:
19:8b:78:1d:f6:5c:65:97:6c:53:d2:80:eb:45:c6:e7:5e:b3:
7d:0c:c4:0b:56:de:ed:de:7c:02:a3:57:b3:88:ae:21:53:91:
5a:46:c8:dd:08:fc:66:80:cb:a9:9b:a4:c3:5a:67:21:1a:e0:
73:fc:0f:70:44:90:bd:ef:81:d0:c1:ab:6e:9a:22:47:7b:31:
8d:23:ca:14:1c:42:a8:51:f5:6d:01:06:50:30:d0:46:dd:46:
66:87:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:32:52 2025 by rpki-client