Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: V0wJ0uYe47UeFUjeTI8CDFW1X9BuoA+GdtNkIMymcAo=
Subject key identifier: 52:DD:C2:2D:48:32:CD:6B:F9:37:F9:9D:CD:11:1F:D1:A4:A3:2C:2C
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 0196759E73F74D04350706776D0E2099D52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1522
Signing time: Sun 27 Apr 2025 05:00:40 +0000
Manifest this update: Sun 27 Apr 2025 05:00:40 +0000
Manifest next update: Mon 28 Apr 2025 05:00:40 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: wUG+HO3718UrT2okbSSb4LodNZrgBFlPY8uSU9qLTek=)
2: VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa (hash: Ey27v1VSvBG1kOCOG9N8A9sC+9f+2KfQyTxQVT7GEW4=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:73:f7:4d:04:35:07:06:77:6d:0e:20:99:d5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Apr 27 05:00:40 2025 GMT
Not After : Apr 28 05:00:40 2025 GMT
Subject: CN=52ddc22d4832cd6bf937f99dcd111fd1a4a32c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:8a:54:0c:af:91:f8:6b:82:9f:57:36:24:
24:9a:4d:6c:cb:38:69:c9:63:3b:0c:3c:26:b8:34:
c7:35:be:2e:a1:cf:ea:0d:69:c3:b4:b9:02:bb:33:
11:65:91:70:82:76:73:5b:b0:0a:e8:11:32:8c:9c:
1c:c3:01:d6:d0:cc:93:d2:d4:43:89:be:60:1a:84:
1b:80:40:6b:46:20:2f:a7:d8:41:98:a8:64:c5:22:
fc:56:45:05:1c:18:5d:30:8e:81:66:2d:ea:01:74:
71:47:98:9b:84:00:94:b0:0e:1f:0d:f7:87:a7:6a:
40:b0:62:d4:6b:a3:e1:18:c8:7b:66:6e:dc:59:45:
e2:91:e4:77:b2:ba:c1:0d:82:64:ae:50:d4:8d:9a:
2c:cd:84:f5:dc:dc:31:be:9b:f9:b3:aa:a9:23:66:
49:20:61:66:a6:b4:02:17:eb:1b:fd:b6:ef:2f:50:
ca:5b:1b:0d:41:1b:1f:c4:5d:cc:32:b5:c2:06:6d:
72:0f:55:5b:a9:7c:0c:1f:cb:96:31:f5:11:3f:dc:
84:9f:9b:e5:8e:88:d6:45:e7:51:0c:91:24:a8:2f:
5f:9a:fb:81:6f:9a:d0:a3:07:50:cd:a5:e5:92:8b:
30:5e:5d:6f:a7:11:f2:2b:9b:c8:e7:d3:da:c3:35:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DD:C2:2D:48:32:CD:6B:F9:37:F9:9D:CD:11:1F:D1:A4:A3:2C:2C
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1a:db:40:4d:d3:f2:b9:96:01:c3:c3:4d:69:8c:42:17:10:
31:6f:f3:25:6d:c5:11:94:1c:31:2c:e7:cf:b8:7f:5a:c3:55:
33:ff:62:a1:77:da:11:a4:97:ab:92:61:d4:bb:68:78:90:f0:
e8:85:3c:7c:1d:9b:72:7d:0b:87:d4:1e:43:11:35:53:98:d0:
94:4e:9a:c9:f6:e1:28:f3:45:fc:de:19:05:90:2c:93:d9:38:
4c:a7:42:02:a9:1d:32:3e:19:fa:42:40:88:e5:f1:6e:26:2e:
a5:26:81:fd:77:e1:11:73:91:9b:c5:17:36:89:cf:b4:ee:c6:
bf:f7:48:49:fb:63:53:5e:d4:d5:7b:ed:76:69:08:a5:57:ec:
e2:8c:8a:fa:7d:5c:dc:93:aa:7b:dc:be:3c:e3:c2:18:17:be:
3e:c7:12:ec:f0:db:55:fb:74:1e:28:eb:b1:b6:c1:ea:3b:c8:
e0:cd:d9:86:07:79:17:da:63:6c:8a:38:af:48:c8:a7:5a:68:
73:38:4a:db:58:9a:60:1c:76:a5:10:25:f0:d0:1a:f3:df:bc:
92:a0:70:a4:b7:83:fc:a6:df:20:73:2f:d4:ad:41:80:55:f5:
8e:c6:a5:9a:b6:52:f2:c1:48:68:5f:00:86:65:d4:b9:c1:95:
51:15:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:53 2025 by rpki-client