Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: 7s7daCJDe6couM35FwVJFFjuxsqqpWqpCWcOdZH3VLI=
Subject key identifier: 83:E8:46:B1:2E:35:CC:0F:34:B0:89:8E:8F:EA:11:47:C2:EA:25:A1
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 0196545BFECD438E55485CBB157241488E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 18:00:37 +0000
Manifest this update: Sun 20 Apr 2025 18:00:37 +0000
Manifest next update: Mon 21 Apr 2025 18:00:37 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: RxxjvBsVbt36TeJR6IvvIeofthqEyfrPZFRlwTPVTTY=)
2: ul5ni49--9XUdy3GQJ4QItwk2fY.roa (hash: 5VF37divuR8ckyhjHtdEIrjaJHoOsNcFhYqFs1LGC98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:fe:cd:43:8e:55:48:5c:bb:15:72:41:48:8e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Apr 20 18:00:37 2025 GMT
Not After : Apr 21 18:00:37 2025 GMT
Subject: CN=83e846b12e35cc0f34b0898e8fea1147c2ea25a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:27:b3:91:6e:4a:c9:b3:1b:4f:9f:97:7f:
73:c1:42:24:c6:13:41:c3:2c:bc:39:9b:3c:76:b4:
5e:12:e2:95:03:57:82:34:c3:2d:df:62:de:d7:0c:
57:aa:e6:4e:b4:fc:59:1b:a0:7e:4c:6e:c8:5c:ef:
eb:b5:36:34:15:8b:8a:f2:8c:06:22:ef:21:85:50:
6d:1c:32:dc:5b:b1:46:d6:1d:97:b5:b8:d9:5f:ea:
ac:1d:c6:a9:9b:0b:e4:ee:69:7f:b5:0f:24:8c:d3:
ef:7b:71:96:10:f2:31:da:72:18:32:5b:f7:22:3c:
18:16:5e:24:23:ff:e0:08:86:05:22:85:4c:fb:4c:
d0:2a:ec:70:c6:4e:3e:9c:4d:05:bc:91:e0:56:36:
83:91:00:77:72:09:c5:c6:57:b6:04:7f:bd:67:8d:
02:52:4d:55:df:b1:1b:47:95:26:70:bf:8a:58:78:
a6:5f:3b:2c:17:d4:31:b1:81:2e:90:1f:d0:44:14:
96:a9:23:bc:b5:66:67:1a:7b:2d:a6:27:d2:d5:f5:
5e:f4:41:0e:92:14:c9:f5:32:51:35:d3:aa:61:d4:
26:04:8f:9a:31:b0:4f:31:1a:9d:44:d9:40:83:24:
56:e2:8c:5b:ee:a8:84:4d:69:7f:64:f5:c5:04:22:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:46:B1:2E:35:CC:0F:34:B0:89:8E:8F:EA:11:47:C2:EA:25:A1
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:60:13:a3:d9:d9:ef:3e:70:33:17:2e:64:50:16:b7:d3:b7:
d1:40:b6:0e:f3:c5:a0:ff:64:ed:b2:e6:08:dc:95:a1:1e:e0:
82:44:c5:62:79:c4:95:e4:87:2a:89:09:03:0d:23:2f:42:f6:
e7:a7:b8:71:4c:45:30:48:fb:3e:0f:c6:32:43:fc:f9:47:f1:
fe:bc:e7:f3:85:23:ad:5b:f6:55:ce:ca:c1:5f:6e:c5:1b:70:
2e:3f:e5:12:6c:4a:77:f3:6c:06:c0:3c:94:74:99:fd:be:a4:
59:ec:a2:f4:7e:ef:f6:49:01:5c:c9:bd:96:f5:32:e9:fa:67:
10:7c:36:56:2e:98:17:6e:d8:ae:a2:01:d5:27:dc:b3:45:2b:
91:a1:a5:ee:14:79:68:39:36:4c:8e:c3:57:c2:05:1a:69:a5:
45:43:16:29:a5:8b:46:39:82:96:6e:01:af:94:c4:27:fe:1c:
7e:57:15:84:ec:1a:98:7f:a6:7d:84:13:eb:be:43:52:a7:89:
62:da:93:44:c9:78:9b:e1:3c:f1:53:55:9e:b4:bb:65:97:6b:
c7:1a:77:33:53:49:61:02:5a:ee:8b:e6:80:26:0e:18:a8:1a:
64:ee:00:f1:d3:eb:fe:2d:50:7a:70:3a:6f:a4:3a:ba:0f:a0:
e7:bf:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:11 2025 by rpki-client