Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: D6bVGFBaN5lAmLkY4VwF7R0uPNtuzx0TndEFEMdwcZ0=
Subject key identifier: 75:3B:40:88:9D:0A:BA:40:16:8F:AC:F7:B8:60:9C:F9:76:CD:7F:63
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 01965DCCDCD28C6246CBDE8D82891E13D0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 0DD6
Signing time: Tue 22 Apr 2025 14:00:29 +0000
Manifest this update: Tue 22 Apr 2025 14:00:29 +0000
Manifest next update: Wed 23 Apr 2025 14:00:29 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: eJdGto0HWdFAyEhCEHzkQzS8+hGF9SU9nl5Fz5t2o7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cc:dc:d2:8c:62:46:cb:de:8d:82:89:1e:13:d0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Apr 22 14:00:29 2025 GMT
Not After : Apr 23 14:00:29 2025 GMT
Subject: CN=753b40889d0aba40168facf7b8609cf976cd7f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:e5:e4:f7:54:47:c1:f8:2d:ef:9d:14:e9:
da:8c:97:57:87:a8:9f:e7:05:8b:a7:ca:4c:34:9a:
07:5d:2e:77:62:d8:8c:61:0b:57:01:48:cc:00:11:
af:6d:f9:b1:b8:db:cb:67:fe:c8:b3:00:4a:41:24:
82:76:13:87:a1:29:4a:77:b5:53:6b:78:35:1b:58:
d0:e7:40:bc:05:e1:a2:2a:ce:0e:18:61:69:3b:92:
b8:48:d4:b2:d0:da:fe:06:7a:e5:6f:1b:b9:af:17:
2c:cf:34:84:5d:7d:68:67:a6:6a:57:f6:26:1f:69:
67:ac:3a:4a:51:45:6f:44:18:c4:50:5b:4b:dc:52:
3b:36:ee:c6:15:a2:58:4b:6e:0e:28:2b:a6:26:c3:
64:71:e0:a7:c5:44:d8:74:62:ad:18:8c:ee:ad:ba:
fe:8b:48:b9:df:83:1b:fb:7d:cd:bb:85:7a:17:d2:
1d:d8:81:18:70:7c:52:ea:e0:af:1e:a2:34:c0:b2:
f9:81:2e:0b:ab:92:a7:8b:98:c1:ec:6d:27:12:77:
56:4e:32:6a:ac:4c:b2:fe:e2:c4:30:7c:d6:86:fa:
e4:83:ec:16:35:3e:67:74:7c:e5:48:4d:a5:f2:b3:
45:44:ba:a3:c1:c3:06:6f:27:0b:3e:b4:02:0d:ac:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3B:40:88:9D:0A:BA:40:16:8F:AC:F7:B8:60:9C:F9:76:CD:7F:63
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:93:ec:95:99:03:d6:88:5b:92:66:33:0e:00:ac:8e:5d:16:
13:5d:9b:ae:37:67:95:9a:20:36:b9:23:70:a8:41:58:f0:e7:
dc:7e:53:6f:5a:e1:0f:45:20:32:15:1f:bd:bf:73:bd:fc:1a:
e8:5a:b1:86:d9:34:a6:9a:b3:10:ab:9e:6c:42:3e:43:b1:ba:
1f:1a:d1:61:09:df:3e:6a:04:95:8a:01:55:a6:d8:9e:1a:04:
29:43:06:18:b2:22:32:1c:f0:70:37:e2:aa:fd:17:fe:17:81:
e9:ff:83:37:5e:7a:f8:6c:a7:c2:06:a8:69:93:ef:1a:f4:f6:
8f:d1:83:90:c5:eb:8d:4d:01:4d:05:53:88:1f:1e:ba:25:40:
8a:bd:ca:c4:5f:4b:2f:2b:6b:7d:c5:ed:1d:95:c0:fa:8b:a9:
97:8f:13:77:c2:76:eb:d9:94:0f:01:94:cc:95:01:76:32:07:
a5:72:e8:85:e1:05:af:09:a9:c4:b6:22:11:d9:2a:25:75:d0:
cf:c4:88:c4:ad:95:3b:ea:31:04:8d:10:ee:f4:73:5d:ef:61:
0e:57:b5:23:1e:72:bf:1c:a0:52:83:be:ff:3c:bc:b7:13:75:
ac:12:50:c1:71:14:bf:2d:90:2d:78:74:84:3e:b8:5a:87:23:
32:fa:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:56:19 2025 by rpki-client