Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier: eyXxhLAMp+rbCaO2lkoyjXK4JyWvIHN7vGnZwLwa7Sg=
Subject key identifier: 83:C5:8F:74:3D:6C:98:4D:4A:79:D5:80:8C:0F:6D:D6:D0:5B:9A:BB
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial: 01967EA1C655565883737EFE038814BC2307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 23:00:53 +0000
Manifest this update: Mon 28 Apr 2025 23:00:53 +0000
Manifest next update: Tue 29 Apr 2025 23:00:53 +0000
Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: jD63oLsHAqUVydvnKIDFDARpo/rxGowwuGPwgjR57RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:c6:55:56:58:83:73:7e:fe:03:88:14:bc:23:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
Validity
Not Before: Apr 28 23:00:53 2025 GMT
Not After : Apr 29 23:00:53 2025 GMT
Subject: CN=83c58f743d6c984d4a79d5808c0f6dd6d05b9abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:e0:82:b3:ee:a3:a3:a9:5b:d0:bc:cc:6f:
5a:04:47:39:cc:e4:3f:4c:44:91:89:d7:5d:fe:f2:
94:bb:92:49:e7:6f:b6:67:da:ce:9c:c9:18:ec:c5:
a8:63:45:6b:53:5a:9a:e6:8b:78:b5:8d:5e:ad:98:
58:ea:ab:cf:65:2b:90:59:ed:df:5f:0c:4d:1d:86:
88:5b:34:97:21:ab:b5:9b:7e:15:ed:71:33:0d:c0:
8e:07:39:1c:f4:72:c9:40:47:03:62:97:46:22:f6:
4a:19:8c:fa:34:71:28:ee:8e:39:5b:a0:ce:61:5c:
15:f6:64:38:97:ce:e8:92:16:88:d5:e5:14:3d:58:
d1:42:f1:1d:68:3f:3b:c4:ac:bc:3d:3e:79:c5:f9:
61:75:7c:8a:22:05:1a:d0:6e:b2:a5:70:69:57:cf:
4e:d4:70:46:1c:c7:55:d8:d3:d0:b5:c6:e4:b1:2e:
a6:ff:02:73:ec:74:80:0e:20:7f:4b:ec:b1:60:75:
87:47:81:93:a0:62:b2:8f:00:22:7a:a3:df:25:0a:
33:96:c9:b1:62:53:7e:7f:b0:39:02:9c:61:52:0d:
28:c1:ad:86:58:6d:a4:69:ac:e0:f9:23:85:57:a0:
e6:8a:d6:b0:a6:4f:45:bc:c6:4d:a4:ca:84:67:53:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:8F:74:3D:6C:98:4D:4A:79:D5:80:8C:0F:6D:D6:D0:5B:9A:BB
X509v3 Authority Key Identifier:
keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:aa:95:69:1b:d4:01:db:3d:fd:77:3a:b1:b2:cc:be:2a:52:
3b:8a:62:08:a7:3c:0f:7a:9a:c5:a6:08:f0:b8:44:6d:1c:72:
45:6d:13:df:64:f8:83:4f:db:47:b8:b6:ce:8b:cc:4e:03:b2:
3d:94:e4:38:01:c6:eb:29:67:20:59:d7:16:6b:4a:88:ea:7a:
9d:01:53:9e:39:57:ac:72:27:a0:9d:87:4f:2a:80:75:4a:af:
59:7d:67:46:59:cb:b1:87:38:8e:91:27:fa:0d:f2:be:f6:67:
27:2a:e2:84:c3:9c:2e:18:90:ba:91:aa:05:c0:a0:58:68:ee:
77:04:17:8e:4f:58:36:50:f4:cc:ed:4d:b5:04:d3:f4:3f:cc:
72:16:c0:ea:c0:61:47:09:2a:16:1a:97:71:07:e1:0a:03:a8:
22:0f:8c:72:92:1b:94:26:89:1f:ef:a5:bc:23:61:32:ad:df:
99:d2:f5:cd:e8:83:2f:1e:f9:d9:bb:a8:d5:40:29:cc:c0:0d:
bc:d7:c4:5b:e2:de:5a:34:56:3c:eb:22:3b:9b:9d:b8:f3:8d:
1f:36:23:0e:60:b5:23:f7:04:61:31:87:18:97:19:75:bf:d0:
86:b5:47:06:b9:d1:31:f5:28:04:c0:75:81:93:8c:a5:69:69:
7d:c3:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:59:06 2025 by rpki-client