Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File: mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier: 5HWL9bKHx9YvZaArBVY6bogn0DgsGtr3pn7C1W8L580=
Subject key identifier: 23:17:06:D7:A6:7E:E8:BF:FB:3C:EC:7B:05:1C:DA:A1:64:53:17:64
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer: /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial: 01968210D77916E2E0CA03EA96D896B1CE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 15:01:03 +0000
Manifest this update: Tue 29 Apr 2025 15:01:03 +0000
Manifest next update: Wed 30 Apr 2025 15:01:03 +0000
Files and hashes: 1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: Nyt5kHRMyqWcws4arBJH1UTErGoeaYYpPHo5fih/rz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:d7:79:16:e2:e0:ca:03:ea:96:d8:96:b1:ce:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Validity
Not Before: Apr 29 15:01:03 2025 GMT
Not After : Apr 30 15:01:03 2025 GMT
Subject: CN=231706d7a67ee8bffb3cec7b051cdaa164531764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:b1:47:f8:c5:31:e5:af:87:d7:32:5f:47:
35:c5:17:9f:e4:41:c0:db:71:1f:39:c5:30:7a:24:
67:3b:43:0b:f6:46:58:55:8c:78:2f:b5:d9:5e:9c:
ea:48:b6:6b:ef:d6:d7:cb:fd:61:d3:c8:fe:88:bb:
d8:1f:77:2d:99:68:27:c1:a9:3a:ef:8d:1e:8d:8c:
de:0a:48:20:32:e1:c9:f7:81:cf:ed:34:fe:ef:c2:
dc:ef:1c:f9:a0:46:76:3b:9a:35:c0:7c:bf:a5:8b:
69:70:90:4f:fb:87:97:d4:9d:3e:47:da:20:b5:fa:
f4:fa:91:80:2b:cd:e7:e7:3c:b0:e0:d0:23:da:0d:
05:b1:cc:61:d4:93:51:0f:3e:64:ec:0d:40:84:3f:
e4:7b:c0:36:51:49:33:99:07:a1:3c:da:7d:e2:7a:
3b:5c:93:b7:eb:aa:40:0f:d5:54:56:7a:a0:2d:6d:
d5:4e:e5:87:f1:c6:a2:fd:ee:44:0a:88:0a:79:85:
98:82:1c:4e:df:e8:da:aa:3d:7c:53:51:6c:95:11:
96:c8:22:0c:f6:d3:8f:37:e3:ca:94:0f:6c:2b:7f:
87:1c:03:16:b1:b2:f1:99:28:cb:6a:8d:b9:1b:08:
9a:bb:60:a8:4f:e9:b0:3e:0e:6b:f9:74:b7:fb:e8:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:06:D7:A6:7E:E8:BF:FB:3C:EC:7B:05:1C:DA:A1:64:53:17:64
X509v3 Authority Key Identifier:
keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:4e:a6:c0:0d:05:97:50:74:41:b2:c3:98:c1:29:ca:0a:
02:b5:96:43:b1:39:c8:02:e0:e0:05:ea:39:f6:ad:c3:10:d0:
a1:c3:33:ac:d9:ac:3d:c0:04:2d:b0:08:06:d9:1f:52:17:35:
7c:07:35:db:cf:80:e1:10:65:4d:a6:f1:28:65:61:94:d1:f0:
51:b8:96:25:6b:59:72:df:50:97:8c:89:fb:b5:f3:d7:de:dd:
74:5f:f3:b2:2e:1d:07:9b:46:00:df:28:68:7f:44:93:c1:03:
63:0f:19:d0:76:07:d0:b0:25:2c:65:34:74:3c:a2:f3:91:38:
93:bf:f5:bf:8c:35:88:e1:47:31:e9:69:6d:95:a9:24:69:c3:
70:c0:b7:6d:22:bf:6e:68:d2:0d:43:c5:a9:a1:08:36:8c:9f:
a2:68:1f:e1:e4:4e:70:78:a9:d6:ec:51:8a:c4:e8:0d:2d:a4:
49:33:21:f0:f9:d1:b7:38:7b:bb:98:25:ee:81:b3:20:36:4d:
ce:4b:ad:ea:f5:8a:4e:e2:fb:6b:09:10:8f:93:1e:c4:14:a5:
e8:b9:65:1b:5b:20:11:fa:9c:04:38:e6:4f:b9:1a:78:aa:e3:
a0:00:95:18:0e:1d:ec:2d:e1:08:44:8e:63:89:10:cd:b0:d7:
44:4f:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:29:41 2025 by rpki-client