Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: QlJ1p2rjhUnYWkpfou0HS5R8zi6muYHJED+2PNSk+qU=
Subject key identifier: 26:DB:B9:05:3D:F3:C9:3C:6D:05:32:FD:F4:09:96:03:03:55:A1:2F
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 0196748BB9BD6585330615DEB1E5F17CC7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 00:00:35 +0000
Manifest this update: Sun 27 Apr 2025 00:00:35 +0000
Manifest next update: Mon 28 Apr 2025 00:00:35 +0000
Files and hashes: 1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: ENKHUftVaZ6DsAmGcm3ZHGTA1XbI5gYRpL4/ZS/pW/w=)
2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:b9:bd:65:85:33:06:15:de:b1:e5:f1:7c:c7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Apr 27 00:00:35 2025 GMT
Not After : Apr 28 00:00:35 2025 GMT
Subject: CN=26dbb9053df3c93c6d0532fdf40996030355a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:63:70:f4:ae:e8:d8:23:c0:76:bb:3e:1c:
41:9f:14:ef:f2:1e:28:e4:bf:3e:9a:34:99:48:0f:
ff:46:36:c0:10:24:8f:92:d0:9f:1b:1b:95:dd:10:
81:e7:06:96:fe:5d:d5:23:d6:bb:64:ae:8a:b2:b2:
4b:ec:31:e0:7d:11:d3:d2:b7:c3:a6:fb:b9:82:90:
d7:7b:5c:57:d6:6b:e7:5f:be:cb:eb:f7:63:dc:bb:
1c:90:f4:ad:20:c6:0c:87:25:4d:51:84:2c:ad:6c:
77:84:5f:81:80:dc:e4:f1:29:c4:bd:a1:85:c2:56:
4f:23:a7:12:9c:98:24:36:6b:38:7f:7f:64:f0:a2:
4a:46:25:d8:15:11:30:06:6b:68:70:e3:4f:5d:12:
04:20:92:e1:87:39:2e:3d:2b:ab:2a:2c:02:ae:41:
59:63:ce:63:0b:dc:61:98:9f:de:0f:e4:69:77:a0:
49:05:b2:a1:87:8f:37:e5:ac:b0:9a:cf:fb:6a:0f:
30:2f:0e:7b:cc:3f:87:35:8a:fb:82:67:51:e3:7a:
5a:93:a0:16:f1:90:11:b7:80:4c:0e:93:52:a1:a5:
8f:6b:f4:fe:9a:f8:19:09:a6:7f:34:ab:5f:c9:42:
63:a1:3e:58:cc:78:e4:41:9b:81:40:ee:c0:58:55:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DB:B9:05:3D:F3:C9:3C:6D:05:32:FD:F4:09:96:03:03:55:A1:2F
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e0:90:aa:c9:e5:00:9e:cd:ce:5c:3c:3e:f4:79:0d:20:42:
4c:17:9e:5b:fd:f3:00:27:d0:3c:85:15:5b:1e:b1:ac:66:7b:
c3:1b:bd:e6:4c:ba:25:6c:cf:2d:26:10:5c:45:4d:29:00:b4:
82:10:f8:19:13:ec:96:15:f0:b3:dd:5b:c8:c2:8d:ac:a8:5c:
59:76:e5:50:47:09:77:83:e8:66:a5:fa:6b:c8:57:41:24:5e:
85:eb:a1:f7:85:75:56:9f:a1:06:f8:ce:e3:59:0a:e1:9e:c6:
30:38:f5:3a:f9:46:04:dd:8e:2f:ad:49:15:b0:11:79:27:87:
06:f0:9a:92:27:0d:94:ac:92:b0:67:aa:df:49:dd:ed:66:ac:
4a:d4:5e:29:97:e9:e4:0f:2b:b4:55:a2:67:08:28:c1:9c:49:
8d:1c:f5:61:81:57:2e:25:78:c7:8d:d5:9e:c3:ab:b0:9a:4f:
5d:30:14:2b:72:34:8c:0c:47:f0:cd:42:44:39:c3:8d:44:f2:
36:0c:93:d2:1b:22:1e:c8:6b:77:80:ea:aa:e4:75:26:aa:32:
9b:ca:78:45:37:b5:e2:12:47:5b:c7:2e:48:86:b0:af:f3:db:
b6:71:8f:b2:d0:c8:e0:77:af:40:18:21:db:28:3b:8e:4d:08:
01:80:af:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:25 2025 by rpki-client