Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: p43dw5x6W8jLbtbf7PhknJ/r0Jsv7Q/T1ra0VL+/ntk=
Subject key identifier: B3:00:CC:9E:08:3D:E0:CA:F0:03:61:3D:12:6C:49:BC:2B:CB:BC:89
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 01968F284605F00AB6AA146D50ADBA50FABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0D19
Signing time: Fri 02 May 2025 04:01:43 +0000
Manifest this update: Fri 02 May 2025 04:01:43 +0000
Manifest next update: Sat 03 May 2025 04:01:43 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: zz5ol2xaChhg8w9SMYoypZh3Q/ep8Vnj3XYYh+gjsZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:28:46:05:f0:0a:b6:aa:14:6d:50:ad:ba:50:fa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: May 2 04:01:43 2025 GMT
Not After : May 3 04:01:43 2025 GMT
Subject: CN=b300cc9e083de0caf003613d126c49bc2bcbbc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:dc:e6:57:44:1d:b5:6c:d0:90:ff:2c:cc:
a5:60:d9:a1:83:11:6f:61:64:9f:e8:be:06:48:27:
d4:3f:d4:fb:77:a8:b6:79:e3:b0:0f:e8:6e:bb:3d:
9e:e0:4e:8e:e2:0e:34:21:00:ea:63:1d:e6:4c:f1:
82:43:46:85:3e:a2:dc:19:da:92:57:79:13:72:86:
4a:3a:44:19:e3:ba:c5:19:96:79:ee:07:bc:d1:54:
9b:5d:76:aa:c4:a8:89:04:2f:e0:4d:5f:62:e9:06:
b1:07:bf:0c:f6:7a:cd:22:6f:65:0f:a1:67:26:8a:
0b:63:8a:50:ed:cd:1f:19:6b:da:a9:ee:17:49:17:
2c:0f:c7:42:df:ab:f0:cf:72:fd:51:96:24:4b:50:
70:ec:4d:4b:af:10:35:d4:d4:c8:c9:7c:7a:ad:09:
25:f7:22:4c:4f:b2:fd:9b:df:c7:74:6c:b0:7d:3d:
17:db:14:53:1d:d8:4d:55:a4:ad:5b:5c:b1:73:4f:
c8:ae:ee:ec:a5:66:48:f5:fa:4b:19:9b:22:36:fd:
41:af:b4:52:31:e6:2e:f5:62:a8:e3:0a:1c:98:4b:
80:af:77:f9:79:99:63:a0:f0:30:62:c2:cc:fe:d1:
4e:70:2a:ec:e5:ec:06:30:22:05:fd:fc:d5:82:29:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:00:CC:9E:08:3D:E0:CA:F0:03:61:3D:12:6C:49:BC:2B:CB:BC:89
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a0:4a:5e:d1:f5:23:14:aa:c3:c2:ee:17:8c:41:3d:49:84:
70:36:1a:d1:b9:23:31:72:f9:e3:b0:54:9a:9c:fd:40:d3:ab:
fe:4e:bd:a8:e0:fa:75:9d:35:2f:bb:28:f6:95:52:29:86:c9:
e0:e1:1d:62:43:a8:c0:f5:6c:70:a5:7b:00:b0:ed:98:63:cb:
85:6c:8c:39:59:bf:b2:23:8c:83:ce:b6:7d:c4:e0:86:f4:e2:
2c:3f:be:01:d7:4a:1f:c3:3c:b9:5e:30:2b:33:18:1a:6f:a8:
6d:e0:ef:aa:d6:c6:a6:de:1b:85:fe:99:42:cd:42:21:0f:02:
37:94:1e:68:ff:f8:75:a1:2f:81:56:4e:0e:a9:0e:8b:0e:79:
c4:7d:ae:a1:14:c1:ee:c9:4f:82:f6:b2:d9:fd:8f:a3:cd:48:
f9:18:0a:d8:7f:16:40:8a:42:23:ec:c2:c2:ca:7a:82:4a:06:
0e:eb:ed:3e:8f:90:74:c3:07:2c:c7:80:8f:09:45:47:ac:8e:
c4:77:29:2a:dd:86:d5:26:b0:47:36:26:85:b5:28:86:f3:08:
4c:4b:dc:98:4e:16:2c:92:83:57:7b:7c:cc:e7:87:ab:29:e8:
f7:38:c0:15:cc:28:17:9d:8c:61:e6:d1:99:53:e3:54:20:fd:
84:76:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:08:28 2025 by rpki-client