Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: 6vFfgU5j6iCGaBusC64f3L+VDVVR6StvxAV9lgh0xwM=
Subject key identifier: 5C:A4:C9:23:77:3D:7A:B7:F7:44:1F:FB:85:E5:5A:09:F3:1A:6E:0D
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 01965492B41085FE5070D6547FFC3A60FA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 061D
Signing time: Sun 20 Apr 2025 19:00:22 +0000
Manifest this update: Sun 20 Apr 2025 19:00:22 +0000
Manifest next update: Mon 21 Apr 2025 19:00:22 +0000
Files and hashes: 1: 1s99Tw3afz1xnVyZeR8lNzEPEk8.roa (hash: b6Tn8In4pLbU3Aif4BcpGyzCXnOKH3eVjkyvFPcCx0s=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: nJebNWcPi7ldF9l4P6k7mnNoSY6abYEecq7M4lq7Vas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:b4:10:85:fe:50:70:d6:54:7f:fc:3a:60:fa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Apr 20 19:00:22 2025 GMT
Not After : Apr 21 19:00:22 2025 GMT
Subject: CN=5ca4c923773d7ab7f7441ffb85e55a09f31a6e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:b2:31:92:03:e3:25:6c:f9:b1:00:4e:cf:
87:96:98:a4:fe:76:67:d1:00:90:8b:b7:98:33:57:
86:47:40:9d:98:ae:03:d1:62:f6:a2:6b:20:1d:a6:
02:15:31:79:7f:da:b5:99:c7:65:78:fd:7d:01:19:
5d:4e:63:ff:5e:76:29:57:36:5a:01:b1:4a:e8:c5:
cc:a3:43:18:1a:18:94:6f:11:e2:29:9f:c8:25:06:
a9:d8:7e:8d:d4:e8:87:02:99:af:17:92:c7:c5:6f:
ca:c3:76:07:8c:49:29:c1:fe:8d:5d:79:88:42:3c:
e5:5b:b3:ab:1e:bb:73:31:40:51:bc:14:8b:fb:e1:
07:7e:b5:cd:1f:a5:d6:81:9a:98:5e:74:dc:1a:d5:
41:76:7e:13:55:06:e7:dc:06:03:ae:72:6d:b7:55:
98:fd:06:24:0b:aa:40:3b:bd:c9:f6:9a:c8:e1:ab:
af:5a:13:e9:3d:e9:3f:47:20:6d:aa:2e:96:ed:27:
6f:27:61:e9:ca:a5:41:05:dc:a9:42:2b:4a:9e:69:
0b:33:1c:28:b0:77:5c:8c:e0:05:c5:5f:10:2b:ab:
89:dc:38:9d:a1:fb:11:47:8a:fb:3f:eb:35:22:98:
d7:79:46:74:bf:a3:49:05:5e:e8:4a:b0:ac:8e:54:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:C9:23:77:3D:7A:B7:F7:44:1F:FB:85:E5:5A:09:F3:1A:6E:0D
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:03:af:79:09:3c:77:f5:2f:60:e7:7b:cd:aa:16:98:3d:c4:
fa:63:d1:60:15:39:63:7a:3f:ec:41:99:5f:11:e9:94:7a:f5:
69:29:5f:da:de:58:76:a9:39:a4:9d:e7:3e:1a:78:dd:57:37:
83:9e:d5:4e:62:63:bd:aa:1b:90:9c:72:cd:54:0c:0f:67:b4:
d9:9f:bb:bb:0b:2e:9d:d3:c0:c3:83:fb:7c:d3:33:ef:09:0b:
da:eb:7e:58:5f:5a:47:3c:4a:94:ce:79:60:b0:18:b6:8f:c1:
57:1b:5c:7d:60:e1:4c:a6:90:50:9b:e0:6b:37:78:f3:0d:ad:
8f:e1:e5:6e:14:e3:67:28:7a:58:f9:c1:3d:22:3d:e5:94:96:
f0:d7:11:1f:bf:3a:a3:45:0f:bc:6f:37:fc:71:4f:a3:32:bb:
82:bc:c8:35:a1:50:20:05:03:d9:40:14:c6:6f:5f:7b:29:c2:
21:42:a6:ca:5d:e3:12:4e:f7:3f:b7:47:12:5d:29:a3:8c:48:
6b:ec:13:3f:2f:94:98:1c:fd:2e:b1:be:e0:1c:60:ea:7a:c0:
fa:16:39:3c:c0:4e:df:64:a0:e7:15:6a:a4:4d:58:8b:7e:ed:
36:c9:c6:be:a4:1a:d7:42:43:cf:d3:3f:65:cd:e8:35:8f:86:
95:f8:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:12 2025 by rpki-client