Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier: T+z4p14gYB0PAnhzBCWhVfeSwLBRHhMYYSuISrUjhlI=
Subject key identifier: 5F:CB:85:3D:E0:F8:21:B1:E6:22:4A:9D:85:CA:18:13:38:B7:A1:FD
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial: 019676B116547B2D08DA89349980E206824A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number: A4
Signing time: Sun 27 Apr 2025 10:00:39 +0000
Manifest this update: Sun 27 Apr 2025 10:00:39 +0000
Manifest next update: Mon 28 Apr 2025 10:00:39 +0000
Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: JXGvwv1Zb8UryKEOYis37/f3m/5Qp8HvpYIeH2ud3Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:16:54:7b:2d:08:da:89:34:99:80:e2:06:82:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Validity
Not Before: Apr 27 10:00:39 2025 GMT
Not After : Apr 28 10:00:39 2025 GMT
Subject: CN=5fcb853de0f821b1e6224a9d85ca181338b7a1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:c6:50:3a:9c:43:5a:4d:e8:b1:d8:de:3f:
69:80:9f:59:be:d4:92:3e:db:4a:f4:a6:25:bc:24:
44:a4:f9:62:68:53:c8:5c:5e:1b:45:ee:ea:31:fc:
5e:6f:05:f2:4e:d2:c0:a4:55:84:dd:b4:1a:26:b3:
e9:bd:64:81:55:64:6b:e4:ec:5a:e3:bc:34:45:e1:
da:49:5a:ee:9c:ca:00:e4:08:4f:ea:17:84:6a:93:
ed:27:95:c6:1b:26:50:a2:d8:d0:a6:f6:e5:6e:91:
35:34:4a:88:1c:c4:c9:a7:f5:b9:c3:a7:f9:4e:50:
0c:b2:53:55:e2:e6:07:e2:2a:74:8e:7d:0e:95:ba:
fd:b3:b9:7a:e1:73:6c:f8:e4:c4:3f:90:af:5a:64:
60:b2:e2:de:26:ef:99:92:0a:a9:d4:29:ee:85:53:
34:f7:6e:8e:3f:24:fd:98:b6:4f:9e:0c:5a:0a:5a:
ea:e8:6e:96:5a:f2:bc:51:6e:e0:aa:ee:b9:9c:90:
10:da:78:c7:a6:95:96:0a:aa:86:75:52:7e:65:8b:
08:b3:ed:db:8b:85:a5:eb:d1:29:b8:e6:94:e1:6f:
a2:f8:44:15:87:94:15:93:bf:11:22:e9:c5:8f:18:
7f:3f:83:92:94:51:0b:0a:db:5b:e2:43:e3:40:bc:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:85:3D:E0:F8:21:B1:E6:22:4A:9D:85:CA:18:13:38:B7:A1:FD
X509v3 Authority Key Identifier:
keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:45:70:63:57:3c:5a:fb:52:f9:18:98:29:ba:12:8e:67:92:
f7:e2:33:1c:89:e1:d5:4b:ee:c1:15:9e:e5:97:9e:ea:7c:fc:
26:95:60:ad:b7:de:34:3e:d4:23:b0:df:21:21:20:7b:af:7f:
36:67:df:09:f3:3c:7d:cc:d4:19:8e:1d:f7:5e:81:42:1d:34:
b0:84:d0:44:95:43:a1:64:06:bc:df:3d:1e:62:13:ea:54:fe:
82:77:b0:50:78:4e:fe:85:84:b9:a5:5e:43:5d:08:25:1a:e7:
91:2f:c5:72:bc:a5:c8:eb:50:ea:1d:96:9a:ff:22:60:53:10:
11:70:ca:16:ca:35:c4:36:97:00:90:27:e5:6e:80:51:ae:db:
9c:0b:9d:72:37:dd:ce:78:d5:77:5a:aa:5d:a8:6b:dc:91:c6:
17:7e:55:ad:28:b1:88:20:e9:47:7b:7e:de:fd:da:40:f2:c2:
7b:aa:ae:46:38:22:59:0d:f5:43:2b:1d:99:e5:a7:9b:53:65:
2c:a8:9e:3a:3e:16:c5:5f:3d:93:52:55:86:70:d0:19:d0:13:
a1:db:fe:10:a1:eb:c5:34:3a:af:ef:72:c0:77:c5:e7:40:bb:
45:ce:71:3d:2c:ad:9e:79:65:5a:70:fd:18:a8:18:4c:5a:00:
b3:50:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:35 2025 by rpki-client