Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
File: zuTBXIcH3739qDvjppPDWUfxbVk.mft (raw, json)
Hash identifier: i3j0p1Gkn/KKc02GdHKQSKe7xquNauH4ws1wUgg8Dds=
Subject key identifier: C6:F5:00:D3:90:8A:72:7F:22:05:B6:A6:14:6C:89:8C:3A:1F:8E:65
Authority key identifier: CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
Certificate issuer: /CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Certificate serial: 019675D4FEF8D7EB003F556F0E8A3816A0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
Manifest number: 10D6
Signing time: Sun 27 Apr 2025 06:00:15 +0000
Manifest this update: Sun 27 Apr 2025 06:00:15 +0000
Manifest next update: Mon 28 Apr 2025 06:00:15 +0000
Files and hashes: 1: 1-kWouvqhvO6QXm5D6yd0r-fU40A.roa (hash: JCShaFnKnvA8sZMMixxLfe1BsbpkwxYTmgfNpAOFDxA=)
2: zuTBXIcH3739qDvjppPDWUfxbVk.crl (hash: h9rYLwh3WXQ5FW7QT1nc/lN5I3BUqp17eBWy/zdg7eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d4:fe:f8:d7:eb:00:3f:55:6f:0e:8a:38:16:a0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cee4c15c8707dfbdfda83be3a693c35947f16d59
Validity
Not Before: Apr 27 06:00:15 2025 GMT
Not After : Apr 28 06:00:15 2025 GMT
Subject: CN=c6f500d3908a727f2205b6a6146c898c3a1f8e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:5c:5f:b6:a4:f8:a2:ec:cb:f9:0d:c9:e5:
df:60:aa:d1:c7:05:32:d7:35:03:f8:fc:00:a0:e0:
07:9d:b9:ce:b5:77:03:92:03:dc:5f:5f:ae:9a:5c:
1d:9f:8c:61:c6:5d:c2:63:00:b8:e1:4f:d2:dd:5a:
2b:21:03:b3:ec:64:ee:04:8a:0d:6a:88:05:f9:dd:
8d:8f:e1:0b:16:3b:69:32:a4:3c:21:ba:9f:8a:48:
bf:00:76:43:56:79:11:67:54:c9:b7:c7:6c:52:91:
d6:0d:55:0c:96:0a:fa:fc:60:e2:e7:ae:4d:c2:24:
19:5f:3a:a3:34:ee:e7:29:b7:75:93:7d:e1:08:ad:
80:43:4e:99:c9:52:e4:ad:81:31:6f:61:73:b0:69:
6a:c7:c2:28:1a:99:57:87:51:98:cd:7f:f9:02:29:
37:32:f9:da:f1:e4:e9:89:37:83:91:73:73:21:c1:
48:56:46:de:25:80:d4:92:97:83:93:b5:9c:14:6a:
77:7c:76:35:c9:13:5c:eb:32:92:41:d9:ce:e0:e6:
87:41:5a:20:c9:64:b2:1f:9c:50:9e:ce:6e:bc:bc:
9b:ce:af:0b:b7:77:ec:81:d9:0f:3d:24:eb:8c:c0:
95:36:12:85:74:a9:ce:ab:7b:e4:6a:90:dd:6e:43:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:00:D3:90:8A:72:7F:22:05:B6:A6:14:6C:89:8C:3A:1F:8E:65
X509v3 Authority Key Identifier:
keyid:CE:E4:C1:5C:87:07:DF:BD:FD:A8:3B:E3:A6:93:C3:59:47:F1:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuTBXIcH3739qDvjppPDWUfxbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/28c90c-9a63-40b4-92cf-2d7b8570dd03/1/zuTBXIcH3739qDvjppPDWUfxbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5f:95:13:3b:ec:07:e1:3f:a2:69:fc:eb:d2:bc:2d:11:f2:
47:4a:e6:e4:5a:d0:1f:23:08:3d:3c:01:2d:23:75:f2:3e:0b:
e1:43:79:5b:09:94:6f:75:dc:51:d1:f1:08:cf:29:42:c9:30:
c8:3e:a5:56:e2:b7:d8:98:bb:13:3c:f9:50:d6:7f:5a:cd:65:
8c:83:d1:e6:57:ae:e9:64:70:39:ea:a8:8d:fb:90:a4:5b:f6:
80:36:c3:2b:5e:0b:a6:cd:a7:6f:76:84:48:c8:e8:ad:3b:2f:
6f:61:ff:5c:ee:9d:95:38:07:9a:90:27:6a:b4:a3:d7:b0:81:
34:27:13:93:61:12:33:6a:fc:a8:b3:ec:72:86:44:b7:a3:29:
fa:86:43:fe:fe:89:cb:50:6c:d8:d4:7e:59:7d:38:08:f2:2c:
b4:b2:0e:02:2e:96:d0:33:c3:b9:54:7d:58:ea:62:dc:c5:8e:
53:62:ce:ec:d8:a0:4e:88:79:52:e9:a0:d4:fd:16:6e:28:c2:
2d:a0:48:6f:1e:d2:e0:b8:eb:b5:7b:5f:d0:46:5e:99:fb:34:
15:01:aa:83:cc:a6:92:e9:8d:8a:02:3b:82:75:cd:bc:59:5c:
15:30:f6:80:13:3a:2b:ad:1f:02:74:3a:cf:af:84:b0:0f:74:
d4:5b:91:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:17 2025 by rpki-client