Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: nBWOAR7DIy0n+71ctrvo+9HgK0VBH7VMXwt1coKknIg=
Subject key identifier: 91:66:BA:7F:A4:60:C3:D2:17:3A:30:40:48:8A:D8:4A:11:26:7C:20
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 0196771EC92D155F0038E01A3D6C9E9BE374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 04D8
Signing time: Sun 27 Apr 2025 12:00:28 +0000
Manifest this update: Sun 27 Apr 2025 12:00:28 +0000
Manifest next update: Mon 28 Apr 2025 12:00:28 +0000
Files and hashes: 1: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: Kmym8tcCn3mUk1pB9HKDt6tc/IXovvI4VTQoC7aIrxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:c9:2d:15:5f:00:38:e0:1a:3d:6c:9e:9b:e3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Apr 27 12:00:28 2025 GMT
Not After : Apr 28 12:00:28 2025 GMT
Subject: CN=9166ba7fa460c3d2173a3040488ad84a11267c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:8f:8c:ae:91:32:c1:24:9e:41:50:47:dc:
2e:85:53:d6:26:ba:b9:05:8f:c6:85:b7:0d:e3:c2:
1b:b0:d2:4e:37:f2:ae:8a:7c:43:90:37:d7:22:ae:
2d:25:4d:81:b0:09:54:bc:d6:e6:c0:71:9d:6c:c9:
0d:63:2a:ed:07:db:23:5b:7a:e0:92:88:a9:e9:14:
e3:5f:91:99:08:ff:8f:bc:18:f3:38:0e:39:2d:dd:
aa:30:2f:d5:86:9c:a3:2a:33:a9:ad:d6:ee:9e:2e:
41:2e:06:09:be:77:37:7f:6e:0a:eb:96:27:e6:b2:
13:58:30:f5:e7:5b:0a:a2:99:f6:5f:b7:a0:ba:58:
a1:a9:0c:c7:52:5f:9b:ad:53:b2:d5:71:1c:52:c8:
5f:96:d1:d4:c9:12:b9:96:94:d9:37:78:94:a3:3b:
6f:de:76:6e:0d:66:04:45:9a:e2:03:df:48:38:c0:
53:4e:06:6e:4f:a8:1b:fa:a9:0d:fa:62:01:e0:8b:
b0:b6:d1:f3:23:cb:18:0f:77:6c:c9:f5:31:4c:38:
c7:4a:7b:a2:71:f7:9b:a5:08:ef:dc:79:35:9b:27:
c5:42:b8:cd:41:4e:ab:57:f0:8d:73:71:0a:d0:0e:
24:da:30:11:23:5e:e5:8e:24:20:e5:b2:c1:63:c8:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:66:BA:7F:A4:60:C3:D2:17:3A:30:40:48:8A:D8:4A:11:26:7C:20
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:e3:51:18:ab:85:9c:2b:ff:32:4b:4b:0c:3d:96:27:c5:
30:cf:25:ed:3f:de:79:a4:b4:f4:c9:14:b0:74:76:ff:3a:4a:
14:8e:cc:e2:68:24:00:7d:d5:c1:09:00:fb:a2:08:a8:dc:cb:
2c:78:bd:03:c5:fa:cb:80:dc:21:44:3e:38:82:84:2a:8f:4c:
05:fb:6f:5e:b5:8b:ca:d1:91:7f:ca:08:10:d9:00:3f:18:70:
49:c2:11:2b:60:7b:58:cb:9a:d1:ff:53:bf:a4:31:bf:0a:f9:
c1:55:2e:69:d2:68:86:53:37:66:25:f1:ca:24:e3:58:40:f5:
c8:09:ee:9c:90:c7:22:23:fb:0a:95:a4:54:0d:b2:c3:a5:b1:
a5:38:46:f9:78:8c:8c:30:06:48:80:c3:b4:46:96:f3:8c:bc:
c8:27:82:34:f7:4f:f9:97:54:3e:76:93:e0:4f:86:c9:15:0a:
51:05:55:2c:bb:7c:d2:21:3f:b1:75:48:ae:8e:59:cb:09:9d:
9e:01:ab:94:ee:c2:19:71:cf:bc:da:37:ef:a8:eb:f8:a6:f8:
34:07:64:ae:e6:87:a4:ac:89:62:e2:5f:b8:8a:aa:8e:b0:cb:
a4:f6:bf:3f:eb:97:d0:10:42:4a:39:e3:e1:63:7b:63:ff:ee:
96:5f:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:24 2025 by rpki-client