Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: vIWegIBYjd499LlTxap6+8+jgadj1Kg1DgBSLu8PvoE=
Subject key identifier: 82:B6:3B:F3:A2:60:C1:8B:04:A3:99:E1:E7:76:35:C2:85:94:B9:D2
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0196771ECB4E39E8539448D2C8A045BB9577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 12:00:28 +0000
Manifest this update: Sun 27 Apr 2025 12:00:28 +0000
Manifest next update: Mon 28 Apr 2025 12:00:28 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: v23lFIw4nxT1-duGpgMU0lSEXsw.roa (hash: 2n1Sc1V33Lym9tDfU6XAMI/RVBz4882qQ4ovgAYz3MY=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: Dow9VkXkIyfSlsvvE0kD4IPHJQCHMyqbuWxCHLh0vrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:cb:4e:39:e8:53:94:48:d2:c8:a0:45:bb:95:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: Apr 27 12:00:28 2025 GMT
Not After : Apr 28 12:00:28 2025 GMT
Subject: CN=82b63bf3a260c18b04a399e1e77635c28594b9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:25:28:ac:e3:6f:59:05:59:fa:1f:86:93:
86:4a:31:6d:59:da:65:f9:9c:89:8a:b8:36:6e:ec:
02:7d:fa:bb:62:70:de:a8:61:ee:0f:73:1f:9d:62:
6e:c8:b2:54:01:01:34:b3:a1:bf:cf:dd:01:9b:a8:
14:d5:f6:7b:1b:5b:07:43:07:d0:36:b2:e4:27:d4:
bc:85:8f:e8:07:a7:72:f2:85:40:7f:c8:37:cb:1a:
dc:ab:fb:17:c3:3a:5d:1a:bf:5c:de:f3:ce:c6:d0:
8e:ff:2c:52:56:82:20:d2:1e:ad:2b:32:c1:44:c6:
d2:1c:d9:a3:4f:aa:58:5e:46:dd:4d:34:4a:45:90:
a1:7d:76:7d:4e:24:8b:17:fd:47:b3:20:bd:7e:16:
8a:ca:88:8e:49:54:28:ef:b9:81:71:53:35:55:19:
91:33:03:8e:7f:9f:95:14:65:2e:cc:54:f2:40:db:
4e:71:3e:d2:d6:8a:b0:1f:f5:90:58:6f:08:1f:da:
65:51:c6:52:61:68:d8:34:f5:7d:7a:8f:c2:aa:35:
05:20:e8:78:1f:3f:e4:46:5c:ea:62:79:e4:22:09:
64:63:79:06:68:66:8c:fb:c6:da:35:06:af:08:68:
85:7c:54:8c:d1:6f:a2:ce:01:ac:9f:a3:06:bc:c4:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:3B:F3:A2:60:C1:8B:04:A3:99:E1:E7:76:35:C2:85:94:B9:D2
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:39:54:2d:6c:a2:b2:39:bd:2a:ea:f0:61:0d:fe:16:97:44:
b1:53:9f:9a:54:cd:33:c1:89:77:4a:d9:dc:3c:34:68:5f:f3:
6f:34:94:6d:bc:b0:e4:f8:1f:a0:3a:1e:62:9d:5c:7a:09:fd:
50:28:9a:33:09:d2:27:c9:47:dd:cf:ec:47:87:24:e2:36:56:
be:63:b6:32:fa:79:30:2e:9d:67:83:10:07:a3:2a:db:6b:61:
86:36:c9:88:2d:13:8b:88:41:53:34:7e:07:74:8b:cd:18:8a:
9d:29:1e:ab:e5:39:4a:85:6f:d6:81:6f:38:1b:a0:1d:4a:3a:
89:7b:7c:15:22:df:ad:17:89:c1:51:88:e1:3e:71:34:5d:d4:
58:44:d4:32:88:1b:7e:fb:fa:f4:be:87:d8:39:65:01:6b:7b:
31:6f:ab:c0:99:53:a2:d4:6b:34:33:b3:01:43:a9:e5:ea:8c:
b7:3f:9e:de:ea:4a:09:03:08:24:99:f5:e2:a8:b1:3f:6b:e3:
64:8c:b7:b3:35:31:a0:a9:ad:73:37:73:88:d2:76:f3:e7:ff:
e5:25:8a:e4:07:40:cd:05:f9:90:2b:94:72:f7:93:e3:bc:b1:
55:06:ac:1d:d0:ed:d5:7d:5c:43:91:04:24:67:9e:2c:13:2b:
75:7e:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:22 2025 by rpki-client