Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier: z8U8+TKw2gME+41QC7jr1bLmOn3Svg1XAIlozrAa+ms=
Subject key identifier: 58:D3:CB:B3:78:64:E0:BE:F2:A4:76:47:70:CD:E2:3E:DF:66:BC:91
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer: /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial: 01965A26D768472212EFCD6F485E6B5BA460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number: 0618
Signing time: Mon 21 Apr 2025 21:00:16 +0000
Manifest this update: Mon 21 Apr 2025 21:00:16 +0000
Manifest next update: Tue 22 Apr 2025 21:00:16 +0000
Files and hashes: 1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: FeVbRe99YYhurmgAZE4ZtVYgMG90gBrDqImVg822bz0=)
2: Ovla5EJUgy9GZRovhELArfkHbLc.roa (hash: 1ZYYi0oYPWoj0xBQr1HbwZ7BRAZOIkZmTAi9EvpW7yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:d7:68:47:22:12:ef:cd:6f:48:5e:6b:5b:a4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Validity
Not Before: Apr 21 21:00:16 2025 GMT
Not After : Apr 22 21:00:16 2025 GMT
Subject: CN=58d3cbb37864e0bef2a4764770cde23edf66bc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:c9:87:ec:c8:b7:8e:b5:8b:5d:32:a3:58:
49:35:2a:7f:92:31:94:77:e9:2e:b8:67:27:dc:64:
b6:51:9b:ed:14:e1:46:2d:6c:56:2a:d1:28:e5:e5:
76:1c:4d:c3:cd:ef:b7:04:75:b4:2c:f9:22:a8:7c:
2d:ed:de:ff:5c:cd:6d:01:56:b9:b1:ca:c3:16:39:
2d:44:1f:fd:4b:46:34:ab:a8:49:a9:3e:63:3c:e4:
fc:f8:e7:9a:c6:c4:b4:f6:6e:f1:66:83:f8:b2:e0:
00:0e:13:52:40:23:96:8d:ac:74:bd:dd:da:cf:66:
30:62:e8:81:bd:c3:2c:a8:5a:23:a3:f4:b1:a0:c8:
f4:2b:7f:fb:4f:a2:bf:b0:69:da:41:2f:86:5a:ff:
f8:e8:70:68:b0:d6:c9:64:69:ab:5b:a0:88:b7:36:
64:f7:8d:78:ad:6c:1f:ed:bf:05:b1:bc:90:ff:7d:
22:37:16:81:98:8d:9b:5f:90:18:1c:73:88:52:43:
cb:4d:41:55:7d:c1:65:e6:46:5a:f0:a6:69:90:6a:
92:11:27:26:83:95:9a:10:4b:1d:b4:ce:62:f4:61:
27:55:59:b0:b5:ec:7a:8b:f2:97:a1:a7:02:39:6e:
15:79:5c:c2:59:7e:64:90:e2:85:1e:01:9c:0e:67:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D3:CB:B3:78:64:E0:BE:F2:A4:76:47:70:CD:E2:3E:DF:66:BC:91
X509v3 Authority Key Identifier:
keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:96:cd:94:59:58:8a:4f:45:24:34:c8:46:3d:e9:92:27:
69:d9:7d:37:5e:a0:e3:4c:7c:0d:8a:41:a1:e2:82:f8:f3:ff:
60:30:e1:3b:00:0b:67:20:8f:ea:49:b7:34:b4:8d:c8:54:1c:
fb:aa:f5:cd:12:d8:d1:1a:34:ce:02:f3:33:22:96:0c:67:e0:
1a:34:4a:2a:3a:4e:ab:d5:02:a4:53:0e:7f:fc:7b:71:a7:6f:
e7:a8:59:7e:07:3e:98:58:da:fb:5c:b0:54:1a:ad:60:94:62:
a1:15:13:83:9c:49:c7:c7:2c:af:51:59:6d:88:e3:ea:6b:1e:
bc:43:1f:8d:2d:49:ba:35:ef:d8:83:7d:68:d0:ed:0c:94:11:
a6:09:c6:7c:b9:de:f3:01:54:e0:e2:16:18:82:f7:d4:69:03:
f9:1c:d7:4f:d1:26:d6:0b:4a:c7:bc:62:7f:9c:61:af:58:d0:
c4:3d:65:8d:8a:97:28:2a:89:b7:3e:a3:48:fc:0b:e4:d3:14:
8b:ab:a3:ba:59:ec:be:e9:63:b3:cc:93:9a:d9:80:e5:53:b5:
59:fc:32:f1:bc:25:1e:92:fd:e3:ed:03:2f:f3:12:d8:e2:70:
a4:1f:46:41:c0:63:f9:46:44:5e:5c:13:7f:eb:ea:b3:a5:8d:
93:f8:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:43:18 2025 by rpki-client