Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json)
Hash identifier: euKgO/N40MV3D89MapXqKuhL7tOthq+t0EfLGTq7Zo8=
Subject key identifier: E0:B7:46:48:8F:B6:1E:97:FB:38:DA:FB:99:2B:20:22:2A:29:06:4E
Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Certificate serial: 019691BA21E9486A19560069B17E4220A09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
Manifest number: 1519
Signing time: Fri 02 May 2025 16:00:16 +0000
Manifest this update: Fri 02 May 2025 16:00:16 +0000
Manifest next update: Sat 03 May 2025 16:00:16 +0000
Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: UBnuzyECbHyn+nkXwf9VTN8NUIZx3RQGsNA4/W6dp9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:ba:21:e9:48:6a:19:56:00:69:b1:7e:42:20:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df
Validity
Not Before: May 2 16:00:16 2025 GMT
Not After : May 3 16:00:16 2025 GMT
Subject: CN=e0b746488fb61e97fb38dafb992b20222a29064e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:24:70:23:2a:3e:99:3c:24:a1:12:67:ca:c8:
71:99:bd:9d:c4:a5:58:ab:4d:df:8a:58:ec:43:ec:
d5:e8:5b:91:5e:06:85:95:86:64:29:ef:68:61:ee:
fd:84:4d:35:9b:d2:16:a5:23:bd:8b:e0:e5:98:93:
3c:21:94:44:36:bb:43:8e:a9:be:a3:cb:46:3f:49:
f3:0c:d7:56:63:a7:24:1e:50:31:2c:a2:a3:c8:cf:
2c:10:9e:4b:9b:fc:a7:cf:32:c7:ad:e9:b9:20:f2:
7c:8f:0c:41:86:31:a4:1b:6f:a3:1b:48:cd:40:12:
2e:12:bd:7a:d8:a0:46:3a:bc:9f:f4:69:78:f7:4b:
02:5c:70:e8:70:5b:24:32:d9:ea:d8:be:51:58:04:
c2:dc:b0:c0:81:3f:3f:03:27:61:1a:96:cd:16:95:
10:bd:24:e2:08:89:03:f2:63:58:59:35:ee:c4:35:
a8:09:7e:41:f9:91:df:d4:b1:f9:3d:60:7d:18:24:
0c:32:60:2b:4a:d9:c3:4b:70:e3:ed:63:ae:1f:33:
07:b9:9f:41:20:9d:39:4d:ca:63:32:b9:a3:63:7d:
c0:75:86:83:f8:07:3a:87:8c:5c:9a:a7:fc:c8:00:
96:88:f0:97:9c:a9:48:6f:f3:32:c5:08:ea:bb:20:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B7:46:48:8F:B6:1E:97:FB:38:DA:FB:99:2B:20:22:2A:29:06:4E
X509v3 Authority Key Identifier:
keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:94:a2:48:c3:bd:82:96:ba:6e:5b:36:7e:16:c7:6e:df:7a:
6c:5a:c4:cf:81:42:61:1d:c2:d0:b4:d0:0d:7b:b6:fa:a8:aa:
70:66:4b:17:5b:cf:72:4d:a8:f7:09:5a:25:db:8f:33:87:94:
80:0d:3f:55:de:ff:d5:3b:a3:32:ed:37:2a:b9:32:af:15:b4:
da:25:67:46:3b:00:d0:01:a4:85:73:00:e1:b9:aa:f8:60:75:
cc:21:fa:1c:14:cd:84:2a:5e:5a:e8:04:f4:e8:26:83:d0:28:
9d:2f:6d:f5:74:bc:c4:56:af:8e:fd:5c:dc:ed:f6:0f:2f:ce:
b4:b5:d7:90:f5:e8:f2:c9:e2:ec:0d:93:51:4c:13:51:f4:9a:
32:42:60:d5:b2:2c:a6:a7:f7:94:8c:5e:03:8e:34:75:b5:d9:
65:42:ee:b5:8a:a2:be:61:fd:2e:53:54:69:7f:b4:91:fb:9c:
ae:2b:51:76:16:7d:cf:97:d4:b4:09:ba:31:56:2a:05:f4:45:
07:74:6a:f2:89:13:f9:d1:c7:82:2a:f5:25:70:17:2b:26:4c:
00:ab:72:a8:b2:98:80:36:b8:bb:c9:d6:b7:83:aa:43:38:af:
f1:3c:d3:d2:45:75:06:8f:92:f6:30:87:6e:f7:89:cb:76:26:
16:2b:0d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:24:59 2025 by rpki-client