Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier: KQtdWYn3pnYCHBXW5qJAeTKojQAU0+2GhPwfp8Cusko=
Subject key identifier: 3E:E6:7E:C2:B9:6D:42:89:FA:2F:5A:A8:4B:FF:79:6D:29:37:F8:3B
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 01968511373CDB4CE36714A30F9B2D98C833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number: 0B12
Signing time: Wed 30 Apr 2025 05:00:20 +0000
Manifest this update: Wed 30 Apr 2025 05:00:20 +0000
Manifest next update: Thu 01 May 2025 05:00:20 +0000
Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: q2UZXFMzljAlCYS7ZABqPNWD60Jmypos4KrMJxrqNOM=)
2: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (hash: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:37:3c:db:4c:e3:67:14:a3:0f:9b:2d:98:c8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Apr 30 05:00:20 2025 GMT
Not After : May 1 05:00:20 2025 GMT
Subject: CN=3ee67ec2b96d4289fa2f5aa84bff796d2937f83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:76:5b:4f:2f:c0:8c:b4:ba:94:7d:bb:ed:
19:56:14:d7:b7:ff:22:c2:20:ef:ae:d8:49:a8:fe:
d0:0d:85:b4:4b:13:f8:04:f6:92:b0:cb:1a:fc:42:
7f:7b:aa:92:c0:b7:ba:bb:e4:17:b8:21:12:96:f2:
7d:31:bf:0f:4b:20:25:10:2e:99:b5:e0:59:ee:89:
08:9f:17:bf:43:9a:7b:1b:da:8c:4f:4e:87:ce:d9:
93:24:19:e3:fa:a5:a5:3a:83:d4:e2:29:c8:a0:56:
5c:7c:c3:4c:b2:b6:a1:1b:f5:36:7c:af:2a:ff:88:
01:6e:fc:89:b7:ab:fd:2d:58:b4:cd:3e:48:54:06:
67:f0:b2:fb:92:ef:ba:9a:75:ad:f7:74:99:45:6c:
ac:81:c8:c8:2e:c0:9c:38:67:1f:2a:98:56:ce:b2:
da:ea:55:d2:62:9c:d9:a9:1b:e0:9c:63:65:bd:a6:
47:6e:c6:72:60:8e:c3:b1:5d:3b:24:ef:3b:44:4b:
12:67:b1:a9:f2:cb:71:e9:51:23:eb:00:81:a8:92:
09:14:70:94:03:1d:af:59:ca:5c:e6:95:68:4d:ec:
4f:31:5b:7a:cb:73:81:ca:82:66:37:32:87:19:cb:
14:5c:36:16:43:87:26:26:1b:66:1f:ef:f1:b6:46:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:7E:C2:B9:6D:42:89:FA:2F:5A:A8:4B:FF:79:6D:29:37:F8:3B
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4a:da:1a:67:6c:8f:22:7c:80:7a:de:ea:0e:97:6b:1c:cc:
d9:36:44:3c:d3:20:89:f6:bb:3f:75:59:41:2d:80:80:25:69:
ab:45:19:e8:9f:7f:56:78:53:55:ae:7a:51:d3:1b:9c:08:75:
86:f7:31:42:af:ba:1d:35:20:8a:49:60:f2:44:c6:4d:30:69:
4f:33:35:88:b7:81:b4:14:cc:84:4a:d1:70:5d:ff:3b:c7:91:
8f:da:ab:03:e1:0f:f7:ea:8a:8b:63:38:7d:6f:b9:87:fd:89:
a2:44:54:d8:0b:83:61:5b:62:d1:ea:76:7e:27:ae:32:4b:90:
53:73:47:af:91:52:10:fb:0b:b6:ae:eb:af:fc:64:03:81:64:
30:6e:af:0c:21:8a:85:09:03:81:03:8c:26:e5:9d:49:12:4b:
fc:2c:3e:a7:e9:d3:1a:fc:04:3c:35:aa:1c:65:97:eb:51:23:
ce:fc:4c:e2:4a:05:e1:83:3c:09:33:58:78:2f:32:ee:f8:c1:
b0:24:db:cf:84:02:ef:e3:43:50:06:14:6f:40:74:74:54:f0:
8b:1a:eb:88:80:5e:3d:30:72:e8:82:b9:00:66:5d:8d:03:47:
ef:cc:0e:25:7c:02:cd:f7:f8:82:bb:1c:b5:55:bc:61:1a:d3:
6b:4a:62:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:45:41 2025 by rpki-client