Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: cis3dTRZShNa19omzHKFi0TQWdTC78RlS4h22uvpN8M=
Subject key identifier: 86:63:D8:BD:90:D3:6B:22:F8:6E:26:BC:52:97:2D:B5:CF:EF:10:C4
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019674C28418140BA00EE2DCBB11734CD911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0B02
Signing time: Sun 27 Apr 2025 01:00:26 +0000
Manifest this update: Sun 27 Apr 2025 01:00:26 +0000
Manifest next update: Mon 28 Apr 2025 01:00:26 +0000
Files and hashes: 1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: k9hC9+2xXfEIpaYDcXyXMVuKKcnHaTsIU2sivjUrQws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:84:18:14:0b:a0:0e:e2:dc:bb:11:73:4c:d9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Apr 27 01:00:26 2025 GMT
Not After : Apr 28 01:00:26 2025 GMT
Subject: CN=8663d8bd90d36b22f86e26bc52972db5cfef10c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:b4:fd:d6:ea:60:00:90:d1:d4:67:d5:b2:
0c:d3:34:6c:8d:26:8d:63:3f:fb:8f:0a:37:06:37:
db:11:13:ad:42:74:da:f6:31:ad:29:8e:e2:3f:d5:
90:7f:7d:d6:00:53:80:7b:64:be:4f:4f:41:10:e9:
5b:43:b7:1a:cf:bb:e6:74:b4:d2:13:42:f3:b8:b6:
0b:9b:cc:64:72:df:4d:97:f0:d2:8c:a5:7d:28:48:
7f:04:00:22:4c:6b:44:13:36:51:67:15:37:dd:3e:
b5:98:85:b1:bf:5b:e9:33:40:17:e0:d5:19:47:3f:
bf:e5:84:f6:99:45:ad:fb:82:0c:91:97:e2:39:9a:
5f:1a:69:0f:5b:10:4b:fa:a6:29:ad:b6:71:05:50:
cf:07:3f:f4:67:e0:c6:8d:01:16:0c:92:41:a3:f5:
2a:a7:20:77:e8:d2:43:d0:4c:b1:9f:fb:9b:a3:11:
2f:12:18:9c:57:0f:a1:5e:ac:da:84:36:f8:27:43:
53:11:da:66:9d:6f:49:57:88:bc:1b:6f:5d:33:f7:
7e:2f:15:06:de:de:63:5e:c4:51:3d:d2:4a:99:f8:
8e:ff:3d:5c:d8:3e:49:11:61:f1:6e:e3:e9:6b:71:
93:5a:bd:04:3b:9d:71:b7:70:28:a1:00:82:80:70:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:D8:BD:90:D3:6B:22:F8:6E:26:BC:52:97:2D:B5:CF:EF:10:C4
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:00:95:36:87:80:c3:95:48:80:45:a3:8c:3c:df:8d:1c:a1:
92:26:e9:6e:41:70:3b:00:c1:45:30:07:97:1b:28:4a:e4:01:
b7:80:a8:d7:1b:66:2c:94:e1:a0:e0:14:f8:41:97:d2:8a:c9:
96:4c:01:8f:f1:18:de:f3:35:00:97:35:a7:4c:4e:c1:8d:6f:
af:86:26:48:c2:b3:08:e7:53:7b:cf:8e:27:d9:0c:42:4e:67:
b3:c5:65:ab:f1:f0:c2:ed:4e:43:55:fe:11:ba:36:97:37:a3:
cd:eb:96:63:0c:55:8c:15:e4:36:20:d5:e2:c4:cc:9a:1f:4f:
c1:b3:ff:2c:48:f5:55:6a:48:8c:14:0f:a1:8c:36:80:43:cd:
4e:86:2b:20:b2:bb:f6:84:d1:fb:15:77:4f:c4:5c:72:6b:6b:
b4:d5:e0:10:8c:12:ab:b7:48:40:f2:41:b3:58:ac:8c:74:c4:
d4:a5:e9:d1:aa:f6:0e:c4:cc:0d:ff:77:50:50:e2:ed:a5:3c:
e0:f3:76:4d:58:87:ad:95:97:4b:95:5b:a9:e9:74:a1:77:e4:
14:ac:33:47:90:74:2e:fb:21:61:20:2b:50:1f:f9:17:b7:e0:
84:6f:47:8f:0c:da:ea:a4:35:50:2c:17:b6:a7:9d:f0:ca:c9:
5a:2c:40:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:05 2025 by rpki-client