Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File: ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier: Xe08CwGjG11WfEsRk0hzy45xRgQnhV9YzNT0vzc+E6M=
Subject key identifier: EA:34:6A:F9:D9:BF:6B:31:04:D6:BC:76:32:42:6E:34:E1:82:1F:DF
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 01967BD7C11CF11B873DB7C87A8513362DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 10:00:59 +0000
Manifest this update: Mon 28 Apr 2025 10:00:59 +0000
Manifest next update: Tue 29 Apr 2025 10:00:59 +0000
Files and hashes: 1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: IgRCUrR/hpg1Hx8NiFybJyNwYNT5k5AxncQRfuzU0ks=)
2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:c1:1c:f1:1b:87:3d:b7:c8:7a:85:13:36:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Apr 28 10:00:59 2025 GMT
Not After : Apr 29 10:00:59 2025 GMT
Subject: CN=ea346af9d9bf6b3104d6bc7632426e34e1821fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:0b:8e:55:bc:85:a0:6c:40:8c:1d:a8:26:
b6:65:97:db:fa:c0:64:b2:20:4e:da:17:dd:e4:de:
c6:89:bb:b7:50:56:56:5e:ab:74:bc:8d:92:d8:be:
51:79:01:e9:18:45:b6:07:76:3a:1e:cc:ff:0f:4f:
27:fb:90:3a:0b:87:f0:6b:15:28:1e:a5:e0:fb:b3:
54:34:de:26:31:f3:26:25:a6:e2:0e:70:a9:b9:69:
5a:90:95:33:ac:53:0b:61:65:06:b7:78:5c:6f:10:
c9:29:68:c2:ed:22:a6:d8:53:92:02:58:eb:a5:3c:
ff:85:c2:1f:28:71:2c:55:62:01:b4:a9:23:a6:9d:
a1:ba:3f:de:47:01:f2:e1:ba:0c:17:0f:84:b7:3d:
b7:a7:57:e2:9b:c8:2d:6c:c1:3f:cc:b6:cd:cb:a8:
c8:e8:f0:6b:7d:22:bc:2c:7a:e8:5f:f0:21:67:e5:
53:a6:3b:6c:c3:21:e2:0e:d7:5a:b2:a7:ff:21:e7:
cf:11:80:23:bb:9a:cb:fb:d8:19:b6:87:27:a3:3b:
c3:e8:2e:01:d9:ca:51:85:26:04:31:90:a1:13:f1:
07:87:be:27:b5:b0:94:58:67:c1:31:ea:1b:22:53:
27:90:15:6a:38:79:b1:5a:42:d0:31:8f:d0:e1:c0:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:6A:F9:D9:BF:6B:31:04:D6:BC:76:32:42:6E:34:E1:82:1F:DF
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cf:78:46:ef:27:3e:6f:b9:d5:42:e5:ea:42:73:d3:5e:ca:
2c:95:5e:af:90:e3:d2:66:e7:c8:2a:45:eb:af:ac:07:0b:b0:
b1:86:3c:2f:2b:09:4c:b9:24:b8:9b:73:80:b8:d6:06:1d:19:
d6:35:b4:93:29:e1:e9:d8:49:ae:98:1d:39:4c:c3:70:fc:9c:
49:7d:e3:c3:6a:a2:19:16:bc:dd:ce:04:2e:5b:b5:06:70:87:
ee:0d:3a:3d:54:49:ca:95:0e:14:57:af:84:33:6a:63:6d:08:
42:0b:e1:8f:91:cd:96:21:18:04:bd:a6:b9:d0:89:54:3d:3c:
3b:ec:c1:18:85:28:02:7e:64:d2:54:a3:23:ca:34:53:f8:9f:
a6:e2:8a:09:95:f6:fd:a0:00:f4:30:09:99:66:18:f5:89:ca:
18:95:09:92:9a:b4:e2:69:77:0d:4c:24:93:0f:11:cb:ce:41:
7b:03:10:2d:d9:d7:d1:1e:fd:b9:be:e5:b5:28:fa:09:eb:f8:
45:af:e6:df:2d:05:4a:cf:4d:38:7b:4b:6c:b4:49:7f:19:b7:
84:84:ba:d9:35:3b:95:74:47:3f:02:4d:b8:2a:eb:a3:a8:53:
fd:53:bc:cb:81:ad:94:03:46:9f:94:58:6c:0f:f9:1b:36:30:
96:c8:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:31:58 2025 by rpki-client