Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: eoTGcvtl1Jfu7uUZNDVEXOotHA13fJs5SkxTC9UvcN8=
Subject key identifier: DB:64:31:94:31:39:85:68:3A:35:4B:B0:64:F2:7A:72:D9:5A:86:3C
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 0196760C096AE221AB2F067DE78EEAAC0B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 14A1
Signing time: Sun 27 Apr 2025 07:00:22 +0000
Manifest this update: Sun 27 Apr 2025 07:00:22 +0000
Manifest next update: Mon 28 Apr 2025 07:00:22 +0000
Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: d84dJu23ZJSKWrdFa7apo/5l86OvOCq5LVxgT5hFVHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:09:6a:e2:21:ab:2f:06:7d:e7:8e:ea:ac:0b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Apr 27 07:00:22 2025 GMT
Not After : Apr 28 07:00:22 2025 GMT
Subject: CN=db643194313985683a354bb064f27a72d95a863c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:eb:c2:1e:1c:b6:d2:49:39:f1:12:f5:70:
9e:a4:1d:cb:76:9d:3f:bd:5f:6a:d7:4d:dc:fd:b2:
f7:87:f1:cd:9b:b3:53:07:db:68:76:f6:17:66:2b:
52:de:e7:f5:68:bd:1f:c9:8c:bf:c1:7f:05:96:30:
55:7b:ce:83:ec:e2:00:0f:0c:5e:ca:37:d3:b7:e0:
a5:2b:4a:ee:ad:ee:52:55:d3:1e:79:38:b7:65:98:
c3:bb:75:9e:24:4f:f5:e5:3a:ed:29:83:9a:92:ee:
ae:ab:f4:3e:7a:f8:57:ea:e4:91:a6:81:fa:1a:6c:
a1:db:11:06:0b:e9:f6:31:6d:3d:58:ed:8e:2c:03:
29:44:ec:f0:f7:1d:af:60:ff:67:3b:e0:3d:04:c5:
6f:12:c7:2f:ec:c7:92:12:ab:4e:5b:27:98:98:a5:
78:85:0f:9c:f6:ef:d5:90:dd:de:77:45:18:32:de:
1d:c1:02:d9:51:40:c2:dd:ae:3b:8e:d0:40:28:6d:
eb:f7:18:e9:15:c8:98:2a:11:d4:a1:86:d8:c1:10:
59:2e:e0:46:6f:1d:d5:c6:bd:5c:b7:f7:20:98:8f:
f9:e6:ff:75:70:7c:96:03:41:8d:84:35:7f:1e:3c:
30:a8:50:9f:a9:c7:f9:d6:a7:16:4c:63:1c:12:49:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:31:94:31:39:85:68:3A:35:4B:B0:64:F2:7A:72:D9:5A:86:3C
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b5:f9:b4:90:b1:41:b7:26:1b:b4:51:94:15:af:df:6f:bc:
67:e8:df:2b:a2:db:bf:52:fd:8e:37:a5:3b:cd:2f:1c:04:b1:
69:25:be:91:0e:90:82:84:78:7c:77:06:cb:01:6f:aa:fd:d4:
b2:05:70:f3:23:fd:a7:80:70:0e:eb:41:41:c3:e1:41:55:86:
83:6e:91:e7:98:6a:9e:a4:03:f5:6a:ab:5d:1c:97:a9:f2:6a:
7e:b2:eb:d9:76:52:6e:d1:69:6a:d7:2c:c6:f1:11:bf:a9:f6:
9c:61:21:a5:e2:db:0c:0c:7a:3a:96:0b:5f:e5:65:12:cd:e3:
e3:41:8b:bc:6a:ea:b0:c5:87:27:cd:02:93:ab:14:2b:46:cb:
1d:15:c6:2e:95:96:cb:ba:e1:49:67:c0:a9:f8:1a:cf:17:80:
a9:b0:4f:e7:3c:24:63:e3:7a:3d:d8:2e:04:96:11:e9:20:d2:
ee:c5:0c:74:83:36:c1:36:74:ff:ae:2b:ce:d7:e0:1d:b8:3c:
7c:ef:53:ea:8e:1b:cb:9a:42:32:64:3c:3d:16:85:fd:6d:1c:
51:d4:5a:ae:78:09:dd:40:6e:cc:8e:47:51:0f:21:9e:9d:ba:
42:38:40:00:e9:82:24:00:16:ae:d5:6f:9d:cf:a0:59:a9:dc:
33:dd:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:46:53 2025 by rpki-client