Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: G/UMnBEeWxXzvMsUPU0+ymhCoQvPm43uZwgu7G5lEb4=
Subject key identifier: DC:20:D8:18:9B:80:68:4A:65:62:4E:B2:B8:EE:AF:F5:D1:A4:EF:B8
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 01968D3943EABC0ADB0D9645A31AFCB843D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0D18
Signing time: Thu 01 May 2025 19:01:02 +0000
Manifest this update: Thu 01 May 2025 19:01:02 +0000
Manifest next update: Fri 02 May 2025 19:01:02 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: bnx1+WW51gmcEXp/OqE9ExcxVg62PfmxsBBIP9sK+M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:43:ea:bc:0a:db:0d:96:45:a3:1a:fc:b8:43:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: May 1 19:01:02 2025 GMT
Not After : May 2 19:01:02 2025 GMT
Subject: CN=dc20d8189b80684a65624eb2b8eeaff5d1a4efb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:c7:56:db:23:93:a7:b7:0b:47:e9:69:f8:
24:27:05:12:90:b2:65:ef:e1:63:22:af:bf:b4:24:
f9:93:5c:36:32:07:4b:95:91:59:20:a0:33:08:1f:
18:aa:32:42:c4:89:eb:53:ab:f9:4a:96:e2:dd:78:
c7:bf:3d:7f:fb:14:d0:06:b9:6f:40:55:03:a2:92:
0a:b5:13:6b:bd:5f:03:83:b6:08:7c:91:6f:ac:26:
10:42:4c:f8:a9:12:39:9a:4c:3f:0f:9f:42:f6:47:
58:a1:0e:96:7c:49:0b:90:0a:fa:a2:7c:11:3e:d3:
1e:a5:eb:b8:55:70:9e:f9:1c:68:73:a6:ad:c5:a8:
5d:68:a3:4b:d4:bf:c9:e8:a7:aa:a0:24:97:29:a2:
cb:62:ec:66:13:0a:70:67:af:c5:13:61:34:54:38:
62:6c:7d:5b:fa:6e:8e:8c:66:62:72:e0:9a:c7:9b:
01:65:ed:d8:6b:f1:24:5a:4c:33:fb:e0:c6:90:5c:
4e:54:1e:2f:73:f7:0c:79:44:dd:54:b5:e3:36:e0:
4d:fa:ec:75:bc:7a:db:2c:9e:1a:8a:9d:13:44:5e:
3f:6f:b6:82:28:70:44:4d:3d:1d:1e:bb:8a:28:a9:
4c:4a:3b:85:87:8a:e3:fc:a5:4e:53:0d:3a:dc:75:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:20:D8:18:9B:80:68:4A:65:62:4E:B2:B8:EE:AF:F5:D1:A4:EF:B8
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1d:29:ea:de:2c:26:46:a9:19:fc:5b:8f:c7:0d:ad:de:6d:
15:bd:6d:1e:6b:0d:46:c0:c3:2c:5b:42:5b:70:7b:85:9b:f5:
ae:9a:b3:7f:74:87:99:6a:af:da:f0:d9:19:7a:96:4e:a8:33:
f6:37:54:15:10:57:40:ec:45:99:94:a4:81:77:bc:7d:0a:16:
7a:23:dc:66:dc:ce:c8:10:5b:9c:27:80:0a:56:26:10:92:b7:
d2:7b:e4:fe:02:a1:8f:b2:a9:17:85:d5:31:4a:7a:55:91:1d:
70:6a:e2:35:94:ab:a2:b4:23:5a:2e:7f:ac:8b:54:ea:5e:14:
70:c4:d2:79:b7:e9:87:5c:9d:98:7f:64:a9:77:d7:e8:71:c6:
67:44:04:f6:5b:03:7e:1a:63:12:a2:16:fb:df:13:48:f1:0a:
e4:fc:67:a0:52:12:ef:d3:09:40:6d:17:07:e9:0a:32:06:9a:
5e:30:1f:63:3d:6f:21:33:11:f4:72:31:af:4d:b9:15:4f:b4:
00:2b:e1:c5:04:ed:b3:0a:9c:7e:f8:d5:f5:f3:e4:b2:8e:41:
d0:09:96:bc:cd:0c:23:5a:fe:97:e7:05:6e:7e:1b:56:3d:4a:
99:b7:d7:f6:3b:6b:b7:f8:ca:b9:d7:44:3e:d0:23:92:cf:33:
97:d5:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:19:41 2025 by rpki-client