Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: 4ldM3KBeh/5NK5lqJyovInNq1XtLzd/uouUECWTZUaU=
Subject key identifier: 15:13:9E:69:88:B1:E1:71:03:87:B0:6A:EE:7E:DB:70:28:A2:DD:EF
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 0196876DD8B650CFAD5297F6FC1CAEAD0425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 026A
Signing time: Wed 30 Apr 2025 16:00:45 +0000
Manifest this update: Wed 30 Apr 2025 16:00:45 +0000
Manifest next update: Thu 01 May 2025 16:00:45 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: 7z8AtKuG7HRINo3MjaUeFxqZ0OP2uzRBfxo5h6H1F+Q=)
2: 3P6wXNJcDC3b35lAwjjqX-1dpME.roa (hash: u7hgo1u27j1RyUhAH8Or7hL0YQ+vaU+na5DgQVVElfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:d8:b6:50:cf:ad:52:97:f6:fc:1c:ae:ad:04:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Apr 30 16:00:45 2025 GMT
Not After : May 1 16:00:45 2025 GMT
Subject: CN=15139e6988b1e1710387b06aee7edb7028a2ddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:cf:9c:86:cb:53:60:43:70:47:54:04:6d:
49:c1:b8:49:46:34:1d:9b:a9:77:e5:fc:75:49:cc:
4d:f3:85:e8:c3:e4:de:2a:be:58:18:a8:60:9e:dc:
9d:bc:1c:f5:a2:a6:85:b8:b5:39:a5:7d:79:86:42:
27:34:84:83:4f:e5:2c:d6:36:61:7f:9d:b0:7a:0a:
66:71:87:fa:cd:1f:a3:f0:52:0e:44:86:54:5f:a5:
c3:0d:d9:cf:77:f6:78:b8:58:51:5e:fe:b8:a0:2d:
04:17:de:61:79:bf:5f:c6:52:8d:29:22:d4:13:47:
55:50:ba:05:14:11:bf:4c:e7:45:e1:7d:86:e3:9c:
46:9c:0d:4a:ff:01:22:38:64:f9:22:fb:02:03:54:
3b:13:50:d9:91:03:86:a5:9b:d7:19:89:2d:3a:43:
61:69:3b:f7:3d:b1:fe:a9:2d:ef:7d:09:39:94:dc:
d3:50:95:03:b8:94:3c:75:51:4f:f3:72:27:3a:8f:
2d:41:31:32:26:0b:61:f2:22:b3:14:9c:94:c2:40:
cd:79:06:69:07:8a:e0:7a:f7:f8:b2:80:06:5a:1e:
d4:35:4d:db:7a:3d:7f:7a:93:c9:32:f5:78:68:47:
e3:0f:37:28:4d:ab:97:21:2b:6c:12:8d:19:07:03:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:9E:69:88:B1:E1:71:03:87:B0:6A:EE:7E:DB:70:28:A2:DD:EF
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:19:ae:36:3d:1a:53:10:99:1b:cb:46:72:f3:59:d4:fb:b1:
7a:9b:a4:45:3a:42:44:6e:aa:a5:71:17:94:9f:91:ba:ad:2e:
31:c3:02:cc:16:5b:14:4f:cc:a4:92:1c:71:cc:0c:e4:50:52:
e7:a5:26:fc:2b:28:88:ef:96:9f:74:e3:a3:49:3f:27:53:9a:
2d:8d:17:5e:60:cd:e5:b1:5f:86:2b:9f:35:da:40:42:8d:ac:
ab:fc:04:a4:fa:ce:17:e2:da:d4:f4:19:3f:d7:81:ef:fc:0d:
5f:68:03:f0:17:79:d2:6d:f5:02:6b:49:3f:5a:c8:b4:22:f5:
94:92:68:03:b0:0c:ff:8b:93:59:a1:16:b0:a0:35:5d:fa:4e:
70:32:41:ba:23:54:04:67:ab:16:95:1b:70:9f:ae:11:ad:0d:
34:ec:9d:b9:4b:e5:d0:c3:57:74:3f:5a:01:3e:cf:02:ac:53:
fd:f1:92:e0:e8:93:29:5c:04:aa:ac:4a:d3:17:95:a4:bf:35:
a1:2c:05:3f:87:e0:9c:3f:b6:c6:15:31:d8:15:1f:83:f5:a0:
cb:e4:fa:6d:5e:3d:48:f0:13:6d:5e:51:d6:de:36:1a:63:9c:
ed:74:e4:5d:4d:8b:0f:39:c8:2e:7b:fe:81:9a:fa:0c:88:f8:
c4:74:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:34:05 2025 by rpki-client