Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: MA8z5tx73iq+QoE+fwrcmAfiL/eDS45D6Y6s6U+Owek=
Subject key identifier: A4:78:0D:88:BD:4B:47:F3:AC:D2:82:AA:60:E7:B3:7C:60:B1:1B:70
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 01968CCAD35FCA1BF43812A6D019A194DD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 105D
Signing time: Thu 01 May 2025 17:00:24 +0000
Manifest this update: Thu 01 May 2025 17:00:24 +0000
Manifest next update: Fri 02 May 2025 17:00:24 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: PbEsRB8S4fAi/ToD8KM2ui3VLep2NWk04jSYUFzZy1I=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:ca:d3:5f:ca:1b:f4:38:12:a6:d0:19:a1:94:dd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: May 1 17:00:24 2025 GMT
Not After : May 2 17:00:24 2025 GMT
Subject: CN=a4780d88bd4b47f3acd282aa60e7b37c60b11b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:40:ea:a7:3a:4c:a0:66:9d:67:ab:97:ca:
2b:34:45:c1:14:d7:ab:6e:ff:f1:70:68:1d:b8:c3:
48:ad:0b:1c:37:2e:58:21:91:ab:7b:d1:d0:b2:1d:
f4:60:10:87:a2:98:23:5b:28:cb:7f:d3:3c:ef:9e:
86:52:a8:96:8c:61:1f:2b:4d:6c:03:da:5b:0e:74:
99:9b:9b:7b:a4:c4:4d:bc:c4:96:ac:1c:a5:ee:3e:
ca:7a:9c:e6:59:14:8e:ae:4c:2a:c1:43:3e:b0:4b:
ce:e8:72:5e:3b:38:47:c7:ff:60:9b:27:33:50:49:
f1:30:4b:3b:93:90:f1:fb:29:83:87:c1:74:0a:90:
1e:66:90:f5:f9:d2:84:bd:70:4a:72:9c:b5:7d:e1:
11:95:33:18:68:f2:a6:27:17:d4:98:b0:c6:9a:9c:
f3:51:5f:7d:f2:74:c2:58:c6:02:34:6d:c1:9f:c8:
17:9e:88:2d:94:4a:89:ce:16:e9:98:75:4f:d3:11:
39:2f:21:41:79:40:7d:74:8f:27:d5:94:b4:ca:f4:
b9:06:e6:d0:ff:d1:ff:3b:fe:14:4b:b1:c0:7e:af:
48:5a:bd:6c:ed:d7:72:f4:2c:51:c4:98:51:ed:4f:
49:d1:fc:fb:a6:df:98:d6:68:3e:1b:22:98:90:fa:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:0D:88:BD:4B:47:F3:AC:D2:82:AA:60:E7:B3:7C:60:B1:1B:70
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5c:a2:7b:c2:38:ab:de:48:87:39:34:49:64:d8:e2:35:41:
e6:13:58:e5:14:f6:b0:31:ee:83:9c:fd:ee:fe:0f:9e:6e:ca:
cb:bf:9a:e3:a6:d5:ec:a7:bd:65:ce:eb:29:37:5d:2b:56:36:
84:4a:01:5d:55:d1:37:98:ff:1a:bc:7a:ef:a4:1e:51:03:68:
14:81:44:f3:f5:c5:44:75:0d:ca:09:0f:db:ad:b9:66:23:dd:
cf:cd:50:cd:af:ff:c5:75:d3:79:fb:02:e3:15:b2:0f:09:7d:
fa:a7:cc:a0:e2:56:02:9e:34:ee:4d:09:c9:b3:1c:48:3e:46:
43:5a:1f:1f:f1:6e:42:37:2e:0b:36:82:5a:e6:4d:e6:55:e6:
40:a1:9f:ad:14:35:34:62:55:a9:09:7d:61:2e:da:fd:48:99:
d4:eb:c5:bc:71:76:4c:e4:e7:6f:2c:fd:28:ee:76:b3:d3:ef:
6c:bc:49:1e:8a:e9:3c:61:62:e2:8e:d9:4d:cc:e3:63:92:75:
21:3a:cc:d3:db:2c:16:69:36:12:04:b4:da:d5:59:1b:f6:32:
9f:cf:f9:10:83:cb:d5:38:fd:aa:75:b7:02:a3:d6:76:be:b0:
2c:52:90:4a:ef:82:56:9f:66:e4:20:67:94:46:76:69:19:1e:
99:cd:f0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:10:36 2025 by rpki-client