Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: YxOa8Gdd7i+i4nWi3z70+HbehKMqBNorYI2U/m4NjTI=
Subject key identifier: EA:48:D1:28:BB:1D:12:2B:22:D8:E3:62:64:AA:CD:1E:5A:F3:CF:17
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 01968359C1688AB28716F4364FC46FA7C4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 21:00:19 +0000
Manifest this update: Tue 29 Apr 2025 21:00:19 +0000
Manifest next update: Wed 30 Apr 2025 21:00:19 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: 1F9jn174m26IkzwYaFZxqi58GHrGzn13FIUAJdHFR/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:c1:68:8a:b2:87:16:f4:36:4f:c4:6f:a7:c4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Apr 29 21:00:19 2025 GMT
Not After : Apr 30 21:00:19 2025 GMT
Subject: CN=ea48d128bb1d122b22d8e36264aacd1e5af3cf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:9b:c8:6d:65:bb:ee:08:e8:60:ce:1d:e7:
2c:b2:d9:cd:db:16:b5:16:41:3a:35:a4:ca:70:95:
84:3f:b9:fb:67:e4:f7:ef:ba:94:fc:64:86:e9:70:
da:2a:95:37:e7:bf:14:45:28:d5:94:f1:98:28:04:
00:b9:e5:87:71:f5:d1:56:01:95:7c:03:2d:44:5d:
f0:8c:6a:4f:8e:c1:35:b1:b4:89:ee:7d:0a:7a:b6:
1a:3b:21:5a:0a:70:32:eb:a1:ba:76:74:c4:f7:1d:
73:ea:ee:11:99:fd:0b:8e:fe:fd:b5:be:d5:b9:f8:
b4:2b:b5:61:b4:71:41:03:3b:0c:c4:f5:27:9a:51:
3e:03:78:68:be:72:0e:38:7d:0e:2d:14:df:a1:cb:
e5:e3:61:68:fb:72:03:56:4c:c3:1b:72:98:5f:c4:
40:1f:5e:e7:de:47:47:27:72:eb:e8:4d:26:00:0a:
34:f0:03:b9:46:c1:87:78:b6:97:9c:11:ed:f7:40:
84:c8:a1:60:5c:0d:71:67:fc:c4:37:ab:ba:39:15:
ef:52:b0:ed:09:7c:9f:e7:67:f8:17:34:f2:28:2f:
3b:fe:c1:b0:df:60:b7:d0:73:aa:33:47:b5:17:de:
1d:dd:99:32:e6:cf:57:08:0d:36:2f:c1:cb:bd:b1:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:D1:28:BB:1D:12:2B:22:D8:E3:62:64:AA:CD:1E:5A:F3:CF:17
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a1:11:ad:fa:9f:13:27:68:c9:33:ca:35:b8:7e:5a:42:72:
0a:d7:5c:e7:4f:1a:16:a7:a9:35:9b:b5:77:55:cd:90:b3:94:
24:be:62:46:82:0f:48:96:cb:28:57:27:9f:a8:dd:92:35:df:
40:16:f4:fa:55:65:cf:2d:65:cd:43:81:ac:aa:d2:96:30:3f:
c2:b3:7a:b9:b2:41:94:fd:01:7c:a6:b0:70:ed:8f:54:7f:b1:
d8:1f:d9:18:91:83:15:99:e3:98:ab:73:53:1b:42:f0:36:4e:
4b:16:93:77:d0:8a:d9:b0:25:b2:03:84:c1:f2:c1:1c:5c:c1:
58:2b:ee:07:ee:eb:3a:1e:5e:46:1c:eb:ff:8d:8b:7f:8a:54:
8a:67:e7:01:e3:1f:8f:76:0f:c5:69:b3:9a:bf:fa:73:13:72:
8d:cb:da:f6:1f:d8:4e:b5:83:66:6f:99:40:cc:04:9e:2e:48:
98:5d:33:22:ca:d6:f3:f5:fe:74:da:78:f4:81:5e:4b:ce:44:
bf:05:d7:f5:b4:60:0a:c1:3e:b0:ea:85:a7:b0:ac:96:d3:92:
fe:04:dd:9a:3a:6a:77:c0:ba:9f:ec:8a:55:65:0d:70:8b:dc:
00:c3:a2:aa:dc:7e:22:a5:4b:18:4d:3a:7e:81:02:0c:80:e9:
8c:13:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:46:01 2025 by rpki-client