Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: kNEuWA8q4rY9QuMnunzM5e5NYvFuOC3XZNbAdq4zZh8=
Subject key identifier: 69:E4:B3:71:11:47:FA:BF:06:8F:F7:C3:3A:EC:DE:94:32:DC:7C:8C
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 01967F461D7707023848127979287F01418D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 146A
Signing time: Tue 29 Apr 2025 02:00:23 +0000
Manifest this update: Tue 29 Apr 2025 02:00:23 +0000
Manifest next update: Wed 30 Apr 2025 02:00:23 +0000
Files and hashes: 1: lUKZFEQR5YFLyzQjNbMEJSbndmc.roa (hash: Ev1zfRFSrBx+hG5oLqV3IujShWJmSxI4j5cxDJLVNpw=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: j4B4q9dIah71b76fLnoWPZ40OKXxxwyaTbkidihdZqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:1d:77:07:02:38:48:12:79:79:28:7f:01:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Apr 29 02:00:23 2025 GMT
Not After : Apr 30 02:00:23 2025 GMT
Subject: CN=69e4b3711147fabf068ff7c33aecde9432dc7c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8c:b3:67:96:75:17:bb:15:3e:4f:31:31:6d:
be:c5:e7:85:04:d7:08:5e:93:f9:5c:69:8c:aa:9c:
67:f3:1c:8a:fc:2e:8a:6e:ac:1d:13:24:70:60:0c:
56:79:ac:92:03:b6:44:28:6a:6b:92:9d:31:44:db:
ea:c2:5f:49:6f:ec:4c:52:f7:31:5f:25:8a:b2:17:
81:c6:31:60:98:55:53:3c:ae:53:ea:d5:28:77:4e:
dc:2d:1c:c0:9e:e6:6d:e3:43:e9:cf:fe:49:28:1d:
db:dc:1f:f0:74:31:3a:83:76:78:d2:b8:77:32:51:
ba:61:9e:5b:04:f7:3c:d9:2b:22:6d:90:aa:5b:74:
6f:f4:a2:f9:c6:47:24:92:fe:22:4e:76:59:60:47:
84:4c:17:b4:25:3c:17:7f:4d:fa:91:69:b0:d5:e9:
e2:ae:1e:51:57:3f:c0:04:a1:e5:83:51:f1:24:d6:
e9:26:0b:0a:9b:8d:67:3c:e2:50:65:61:8a:a8:1b:
b4:f7:98:68:56:18:09:9a:44:a1:54:02:35:4e:3f:
71:ff:af:55:cb:00:c1:f9:a5:c4:cf:fb:64:ac:35:
34:aa:38:f1:88:2e:25:d8:11:9d:29:1e:2f:4a:dc:
07:cb:c0:2d:02:14:11:09:69:3a:45:58:d7:17:f9:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E4:B3:71:11:47:FA:BF:06:8F:F7:C3:3A:EC:DE:94:32:DC:7C:8C
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1b:ed:f2:cd:74:bb:f6:a2:c4:72:f2:e8:24:01:64:65:a3:
11:31:15:18:80:64:f4:f6:53:04:77:c7:67:96:75:e2:66:e2:
8e:ee:0d:99:81:df:8f:fb:15:ba:b6:ae:01:34:74:0e:0f:4d:
8c:41:e5:0e:28:70:b4:41:33:28:a9:f3:af:58:4b:d2:42:da:
04:7a:da:a6:5d:56:51:c5:0b:bd:df:fa:9f:41:0c:1b:1f:df:
22:7f:b1:6e:4c:19:cf:94:5e:30:37:07:df:c5:8b:b5:66:87:
74:74:a6:f1:e7:ca:78:5c:2d:33:4f:05:ba:fd:9a:46:b3:86:
1b:7e:dc:dc:69:f2:e1:af:88:18:9b:a5:d8:3f:d2:df:e1:8d:
43:cf:59:a8:fe:47:2f:6c:59:e1:88:6d:85:d9:46:40:0a:7f:
0a:1e:c2:54:3c:e1:bf:67:fb:0b:e0:bf:8e:3c:4a:a3:a2:e7:
ec:00:0a:49:c4:15:55:65:85:46:fc:50:7a:38:2a:65:4f:13:
ea:25:c4:7e:e8:ab:b2:9d:01:74:dc:3f:c1:ea:12:05:5e:50:
2e:ad:97:bb:2d:7c:1f:6f:aa:01:7c:7a:eb:df:44:ad:16:0b:
04:0b:32:ab:2e:db:cd:a9:32:ad:8b:b7:d1:28:1d:46:d1:28:
6d:da:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:12:20 2025 by rpki-client