Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: QBGTJTO1rLFGE3VYSgRXELFyzyf/MLOxFss6c/fZLGU=
Subject key identifier: B4:4F:42:A6:DF:41:8A:5D:E2:65:03:F8:AE:5A:16:03:4C:90:D9:72
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 01967F0F79182F0C6B2E9A75A3B4F1771BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 01EB
Signing time: Tue 29 Apr 2025 01:00:42 +0000
Manifest this update: Tue 29 Apr 2025 01:00:42 +0000
Manifest next update: Wed 30 Apr 2025 01:00:42 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: tz125MdDZxCnhNkRTgM/qlcRgZPe/laDzr7D7eAI3sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:79:18:2f:0c:6b:2e:9a:75:a3:b4:f1:77:1b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Apr 29 01:00:42 2025 GMT
Not After : Apr 30 01:00:42 2025 GMT
Subject: CN=b44f42a6df418a5de26503f8ae5a16034c90d972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:ee:8d:ea:48:4d:50:c4:c3:79:ed:c3:c1:
22:6b:06:52:1d:c8:95:1d:1c:eb:02:3b:89:4e:c6:
b3:ac:58:c9:5f:71:3e:d6:5e:c8:35:73:9a:b8:6e:
40:0f:c4:78:1a:57:51:e7:72:01:f3:b4:72:af:f5:
a1:6b:f1:3b:17:90:54:44:7e:55:10:c7:69:dc:d9:
18:1e:3f:d0:9a:6b:68:c5:54:04:49:09:9d:0b:4f:
a4:5f:d9:4c:46:09:d2:c5:c9:75:cc:92:8c:bf:aa:
00:79:c6:c0:71:9c:d1:77:c2:af:ee:17:4f:a6:61:
99:b9:ba:ed:ba:e2:ff:a9:be:68:04:f9:a8:9a:3a:
9b:b2:7a:03:4d:39:2e:2a:09:67:f3:2a:36:a3:2b:
f5:0c:84:2f:a3:eb:6c:66:53:60:0c:bd:38:f5:67:
32:fd:5c:18:73:b4:05:60:c3:19:f6:a9:6a:bf:6d:
42:28:7d:f4:2d:54:39:dc:98:68:c1:4f:05:22:98:
2a:13:25:9d:b7:bf:02:6f:89:b6:de:ab:21:22:c0:
26:93:75:41:ea:b2:9c:be:c1:f6:24:50:19:1e:9c:
7e:0e:df:0e:e8:42:c1:ec:52:a0:db:fe:a3:3d:ff:
a0:6a:b6:33:6e:85:9a:3b:fb:18:1f:dd:d8:2b:13:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4F:42:A6:DF:41:8A:5D:E2:65:03:F8:AE:5A:16:03:4C:90:D9:72
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:34:32:f6:f2:f5:b5:b7:2d:0a:77:e4:af:ed:30:37:4e:f8:
15:e9:74:e7:bb:df:e8:c1:02:a7:8a:1c:ec:dd:b7:22:61:27:
68:1b:60:a7:0e:76:67:bb:95:de:47:00:2c:a0:c7:69:19:ac:
ef:e4:47:41:eb:d9:d0:a6:59:8c:ac:7a:2f:0b:a0:d3:13:c8:
24:8a:24:ab:9d:e7:a5:e3:f3:0a:65:96:63:5d:bd:6a:df:74:
49:b5:31:01:02:3b:9e:e5:56:78:15:fe:4c:e5:b0:77:09:4d:
95:36:ba:13:a4:05:c0:e4:6f:ad:65:a4:96:a8:6d:7d:58:bd:
e5:5f:85:4f:af:bc:6b:14:9d:8f:1f:26:74:e0:b0:92:08:2f:
03:3e:25:bd:e8:35:2f:9e:1f:e5:5e:02:cd:5d:c0:a5:14:11:
ab:5c:c0:a3:8b:12:1d:67:69:d4:f9:ce:03:ad:19:7b:be:c5:
e6:9f:e6:d2:10:4d:89:25:8f:65:ec:7a:60:b2:74:86:81:62:
62:ff:7a:76:00:93:3c:4c:b3:cd:c9:d1:30:1d:ca:df:c4:7d:
f5:11:cf:0c:df:99:2f:e2:5a:eb:c2:7d:3c:51:79:dc:db:33:
74:82:b7:a0:b4:96:e2:08:c0:a5:80:d3:ad:10:ed:17:1c:aa:
a8:95:dc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:55 2025 by rpki-client