Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: 6X7xBiXUg0bk54/FJcIrrwtlIN8bmAsQM+UH6z4TFFo=
Subject key identifier: 79:3A:73:FD:D6:E6:B9:4A:FA:95:6C:BA:C2:01:14:96:44:8D:FE:32
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 019680FE15C27D6BCD8D6E9AC5AA65852A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 10:00:57 +0000
Manifest this update: Tue 29 Apr 2025 10:00:57 +0000
Manifest next update: Wed 30 Apr 2025 10:00:57 +0000
Files and hashes: 1: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (hash: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: 9cT/04vWrvSsHbscF4peSWtOGw4og07uHZgC7Ey3k+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fe:15:c2:7d:6b:cd:8d:6e:9a:c5:aa:65:85:2a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Apr 29 10:00:57 2025 GMT
Not After : Apr 30 10:00:57 2025 GMT
Subject: CN=793a73fdd6e6b94afa956cbac2011496448dfe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:58:73:35:8a:db:72:b2:0e:a0:88:8f:00:
88:90:95:e2:41:0d:6f:b1:1e:21:bf:65:08:05:26:
cf:d2:22:4c:ed:bd:c8:70:b0:99:78:9d:46:57:e3:
9d:01:20:38:bf:2b:96:6b:cb:25:11:83:94:98:ef:
67:0b:4e:4e:41:69:f9:c5:78:09:0d:b2:74:25:84:
ec:c0:a7:21:54:45:cd:b8:12:98:27:da:6d:ee:90:
80:d2:19:6a:44:92:5d:e6:6c:f4:7d:1b:8a:31:f3:
6d:3a:00:24:8d:30:6a:7e:1d:e5:39:85:85:94:54:
73:09:95:de:d3:c4:03:3a:dc:2f:61:d3:7d:e9:d5:
f6:60:b0:6b:87:35:0f:8d:ab:fe:a0:f4:b4:b9:e2:
6b:a6:68:c7:2c:54:c0:e5:51:6f:3a:b0:59:37:1a:
71:cf:a8:ba:bc:3c:73:57:eb:21:b3:34:8a:3d:21:
8e:06:f9:84:a9:1c:2e:7e:43:cf:78:28:4a:e7:d7:
b2:05:4b:b4:f3:66:fc:16:85:48:84:fd:49:06:54:
ed:0b:2f:ec:ed:f6:60:3f:ba:81:a9:65:6e:d4:a5:
7a:d3:7d:d3:d6:98:2d:ec:9e:ea:76:d4:8b:ba:d1:
86:d6:f6:21:ed:fc:9f:b7:25:1e:cb:51:bc:76:e9:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3A:73:FD:D6:E6:B9:4A:FA:95:6C:BA:C2:01:14:96:44:8D:FE:32
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b4:fb:6d:f0:f8:a3:a3:cc:fe:23:f4:c7:74:e1:2c:73:1f:
14:3f:fa:03:c4:2f:24:94:88:8b:24:89:96:fb:1d:13:96:15:
c7:6f:17:b4:e2:53:7e:ae:f7:6e:ff:02:fc:48:7e:44:50:eb:
02:c4:cb:73:bf:19:9c:99:1f:e1:76:0b:96:e9:54:85:ce:a8:
4f:ae:4f:c2:8e:d1:fb:9b:8b:aa:e8:75:e8:d7:38:5e:8c:47:
c8:c8:0f:27:50:70:10:8c:49:73:03:42:2e:64:b4:80:cf:e4:
a0:cb:cd:a2:1e:f8:dc:3d:9f:73:79:bd:a4:71:32:3e:ed:cb:
17:c6:ee:75:7d:ca:8c:d1:2a:c3:dd:d5:ed:0e:2e:7a:38:ab:
16:83:53:51:26:64:f1:e6:b1:6f:52:86:00:d3:b0:b8:10:b3:
95:7d:19:69:b0:91:ab:a7:8a:a2:92:42:c8:99:09:c0:06:8f:
f2:cd:d8:82:5c:59:99:17:87:b6:71:93:3e:3a:50:70:14:a5:
f4:66:8c:82:6f:1f:1d:50:46:cf:d2:3c:bc:ee:3e:23:56:11:
24:97:9d:1b:ca:69:a5:4c:0e:93:c8:01:e3:13:ca:92:15:0d:
33:98:d9:3b:0e:d5:39:e8:ce:e3:4e:c7:f5:7b:9d:7d:06:54:
13:7e:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:11:52 2025 by rpki-client