Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: 9xdMwxos1wRCYPJSapmuug1jYzSbPnalRs+97RJ2D/Y=
Subject key identifier: EE:85:F8:54:4C:B5:C5:36:CE:E8:A2:9A:DF:76:FA:B2:FB:65:ED:7D
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 019695CDEAB1BD42ED38D266D4D6CFB0CC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 0DF3
Signing time: Sat 03 May 2025 11:00:22 +0000
Manifest this update: Sat 03 May 2025 11:00:22 +0000
Manifest next update: Sun 04 May 2025 11:00:22 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: sl4rTCGsN/5z7vb5hCTWEFiV1FzYRrQ8kQ2Q/ANtyY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:cd:ea:b1:bd:42:ed:38:d2:66:d4:d6:cf:b0:cc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: May 3 11:00:22 2025 GMT
Not After : May 4 11:00:22 2025 GMT
Subject: CN=ee85f8544cb5c536cee8a29adf76fab2fb65ed7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:7d:3c:cf:03:ac:7c:de:96:99:20:33:2d:
7a:01:e0:32:11:92:b4:95:8a:cf:3a:7e:b2:f1:01:
b1:59:08:4a:1e:80:05:de:aa:e0:a4:49:81:e4:2a:
e7:d0:66:3b:6c:2a:4c:ce:8f:26:8d:e9:a8:11:7d:
2b:93:86:5b:0c:76:dd:68:88:c2:38:29:5e:94:64:
8c:64:42:64:75:74:ec:d1:9a:d2:ea:56:1c:49:62:
21:2b:67:c3:8e:38:63:81:2d:96:b4:82:2c:ab:3d:
f1:48:cd:d3:73:44:8b:21:47:94:bd:53:03:39:59:
93:62:11:eb:72:93:b8:42:1a:4b:ae:e3:d2:74:a7:
ce:fc:c6:66:d0:dc:f7:25:b0:98:b4:bf:de:71:cb:
8e:6a:3f:71:0e:ec:10:40:02:4a:14:bc:e8:c5:d3:
ef:53:94:9b:60:06:c3:1e:8f:a4:0d:4c:32:1d:75:
ed:1a:65:3f:2b:82:b7:c9:9c:ed:87:45:8a:63:54:
ca:4d:ac:2e:64:f6:d8:77:fb:ee:48:81:9b:e5:3a:
52:65:09:38:2c:f2:d3:11:aa:bf:a2:9b:09:ae:ef:
97:1d:50:a1:ed:2d:8f:ec:d2:f0:bd:9b:b8:7a:bd:
e1:54:46:b4:58:de:9c:99:aa:7d:66:f3:e3:ed:13:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:F8:54:4C:B5:C5:36:CE:E8:A2:9A:DF:76:FA:B2:FB:65:ED:7D
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a7:e4:30:8a:d6:10:ec:55:a1:cd:c5:20:bf:9b:cb:ea:86:
e8:23:5c:fd:34:a8:4b:76:db:61:bd:3d:01:83:f1:63:db:33:
9b:50:41:cb:94:a3:ce:d8:0e:d0:e5:e3:32:e1:a8:70:ea:f1:
60:56:fd:da:85:9b:ff:e5:06:06:fb:9f:d8:10:e6:ec:60:38:
fa:d9:88:23:4c:0e:23:df:ea:18:be:1b:c5:d5:3c:40:3a:cc:
f3:31:4f:14:c9:11:e0:18:68:3d:63:08:e7:b8:2b:74:b3:97:
51:01:4b:0f:6b:d9:23:bc:22:e0:07:bc:76:ed:ce:d0:7c:17:
b9:77:53:ed:e7:ba:64:a8:c2:21:8c:3a:5a:4b:f4:59:d4:3c:
63:7e:8d:2f:9f:5b:49:46:67:90:13:1c:60:d8:5a:79:39:a4:
d0:fe:9b:27:6b:de:df:ad:fb:2f:f1:3c:8b:db:c8:9e:3e:27:
b1:c8:b2:93:3a:a7:a9:fe:7b:0c:b0:7e:b2:a3:50:c2:d3:4c:
3e:0b:85:4b:26:a1:cf:8b:eb:5c:86:09:e3:e8:f6:4b:ec:35:
f0:84:fd:4d:03:00:43:49:5f:84:67:0d:5a:a3:a7:50:fa:a5:
c6:8a:2d:39:56:f6:44:4f:84:26:92:e4:5c:33:3d:7f:6e:e4:
54:1b:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:51:44 2025 by rpki-client