Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: XMOnXVzVjO18pUO0tmExoVHkIpc2O+cPB8eTu+GhH9w=
Subject key identifier: 83:66:74:40:EA:A0:0F:8B:C0:7F:22:18:3D:6C:59:08:E8:ED:2F:50
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 0196759E9F76AEBDF7F4FA352DD3143DD8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0AC1
Signing time: Sun 27 Apr 2025 05:00:51 +0000
Manifest this update: Sun 27 Apr 2025 05:00:51 +0000
Manifest next update: Mon 28 Apr 2025 05:00:51 +0000
Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: /vr1+IQzbCseoe6oeX7NbJeCmMqrAsrdng6+Ydn25bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:9f:76:ae:bd:f7:f4:fa:35:2d:d3:14:3d:d8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Apr 27 05:00:51 2025 GMT
Not After : Apr 28 05:00:51 2025 GMT
Subject: CN=83667440eaa00f8bc07f22183d6c5908e8ed2f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:ca:0f:f0:7d:d7:54:6e:60:5f:24:b9:bf:
d4:85:a9:b3:a4:d4:9c:61:08:d7:b8:13:a1:be:05:
4f:36:dd:71:3b:69:9e:30:f8:3b:bc:f5:9d:56:53:
98:ba:82:ba:5b:cc:29:e6:54:a6:92:9a:aa:30:6e:
11:1d:6e:25:0b:29:f9:36:16:17:ff:5b:69:20:08:
35:1e:d2:7a:d7:8a:30:3f:93:7e:63:5b:26:49:ad:
e3:58:09:f9:aa:cf:18:50:87:49:de:24:ee:48:93:
18:e1:2b:29:e0:9f:9e:da:dd:b2:b8:f9:a3:d1:10:
59:dc:b1:68:9b:4b:06:76:26:25:d1:af:46:20:01:
3a:fc:93:b6:7a:7a:c6:d3:63:fd:65:a6:ff:8f:7f:
9b:60:52:b8:69:3b:4e:cd:58:8d:2c:dd:99:ef:63:
41:a6:57:6f:63:94:cf:3d:29:b0:10:6e:cb:af:b5:
42:ef:1f:96:5e:c6:24:7b:40:65:68:55:45:a4:84:
bd:13:80:02:ee:d8:3f:16:36:7d:72:1b:6b:8d:0b:
ac:a8:47:d3:10:6c:01:ad:3b:ac:03:a0:95:45:a2:
f2:9a:3a:2a:3b:93:7f:bf:ad:b9:26:01:b2:da:19:
80:91:60:de:08:2d:60:26:37:3d:7a:4b:2d:99:22:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:66:74:40:EA:A0:0F:8B:C0:7F:22:18:3D:6C:59:08:E8:ED:2F:50
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:97:4b:ea:d5:da:9a:f5:b7:b6:2e:6b:37:2f:f9:3e:20:bc:
79:bb:62:b0:a9:bb:de:8c:c9:7c:a4:8e:f9:37:85:8b:a8:68:
80:93:cd:9c:cc:c8:6c:a5:6f:6a:8a:be:7f:e2:ca:b1:e6:e7:
94:8c:89:65:cf:38:ff:36:40:9e:fd:20:f7:2d:ee:7a:75:d0:
de:93:36:55:7a:c2:2d:9a:18:b2:c2:d5:04:30:16:46:e0:47:
83:63:26:4e:ef:75:ed:6c:35:95:d1:f3:98:64:b0:8f:34:83:
42:c6:bf:9b:26:14:f3:a6:99:76:bc:84:f6:a1:e5:a4:63:23:
71:7d:77:bb:9c:af:80:fc:ad:b2:f6:bb:cc:16:ce:a9:50:a3:
be:ea:24:f1:e2:a3:42:83:48:1c:c0:56:40:aa:57:2e:05:c0:
69:48:f3:a0:96:3b:da:11:bc:ce:f5:e8:a8:df:83:3c:61:94:
03:d1:89:6d:a5:e1:51:6d:ac:b8:da:7b:43:94:ba:aa:cf:76:
5d:fd:c5:90:f8:db:e5:c0:db:f0:bf:7b:76:4e:67:50:dd:63:
e7:84:80:1f:d9:e7:3e:72:91:48:4f:0f:48:6c:0d:44:28:0e:
d6:26:a2:ed:4d:09:7f:24:49:e1:50:5d:c6:cf:26:bd:50:e3:
5e:81:1c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:34 2025 by rpki-client