Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: Q8dNG8fxUoIR8Sg3/PVyE97HnIlm+E2SO3lRFstkws4=
Subject key identifier: 68:A9:2F:39:92:31:30:5A:37:18:35:D8:2E:08:BA:5B:75:56:EA:06
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 019655A624FEEB12C3AA9AA77927281FF5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:01:13 +0000
Manifest this update: Mon 21 Apr 2025 00:01:13 +0000
Manifest next update: Tue 22 Apr 2025 00:01:13 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: cGRoZhH8riJUVfCOpBcdxBENTpuGBQhw2Dq0dlxTpWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:24:fe:eb:12:c3:aa:9a:a7:79:27:28:1f:f5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Apr 21 00:01:13 2025 GMT
Not After : Apr 22 00:01:13 2025 GMT
Subject: CN=68a92f399231305a371835d82e08ba5b7556ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:70:4e:5a:cf:02:6a:e0:af:b9:56:99:9e:
a1:59:9d:21:f0:59:96:fe:b6:9d:64:f2:dc:08:87:
c0:37:43:56:66:a6:21:d9:12:27:6d:58:2b:00:e1:
0a:e3:03:bc:67:57:22:30:51:e6:30:d8:f8:39:f0:
20:5c:8f:5d:93:3c:f4:55:06:33:a7:b3:4c:e1:d6:
a1:c6:de:d7:64:55:c4:67:4c:c1:41:6e:5f:e2:db:
c2:20:4a:93:5a:da:8d:95:9a:ed:d3:8e:54:dc:0a:
72:96:73:21:d7:04:4c:38:5c:ad:e2:ff:5f:12:d0:
a0:84:ee:87:e6:67:ac:ce:8a:e8:06:9f:2d:76:f6:
6b:cd:75:b8:ab:47:cd:40:76:d4:d6:aa:dc:e4:c6:
4e:67:dc:0e:80:ed:44:2d:fb:d3:d4:05:c2:3d:8e:
a4:7e:ed:ba:2e:40:3b:e7:e1:bc:a2:fb:30:d6:46:
d4:82:a7:a0:05:89:18:d3:f0:68:fa:0c:07:d9:30:
c5:28:18:45:98:d2:87:8f:22:8f:b4:7d:87:d9:54:
00:44:b0:db:67:6c:bc:a3:57:62:7f:6e:00:e2:84:
b0:3c:3a:8c:ba:86:2a:17:7c:b5:53:33:4e:50:04:
b5:93:2f:5e:68:91:89:92:5e:7e:a8:cd:a4:7a:65:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:2F:39:92:31:30:5A:37:18:35:D8:2E:08:BA:5B:75:56:EA:06
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9a:9d:16:31:62:2f:ba:36:6f:07:e0:a8:c7:f2:8e:13:56:
5c:ae:68:af:7f:8a:cd:35:c1:c5:1c:54:5d:c8:45:c5:d3:26:
b0:67:77:7b:b3:fa:38:2f:81:83:fe:97:1d:ed:e4:2f:8a:9c:
f2:48:6d:52:8f:aa:31:e6:c0:73:bc:57:75:e5:9c:0d:7f:51:
f8:01:0b:24:38:4f:b2:fe:f2:09:e0:6e:4f:6a:e6:ea:86:8c:
20:c7:bd:dd:91:9c:0e:0f:e9:ca:9a:a8:71:72:98:f4:40:fb:
9f:03:ea:3d:0f:e2:1b:f0:05:d6:86:e9:10:2a:d0:ec:54:24:
93:60:f3:7b:9b:30:50:1e:42:6f:eb:cf:09:f7:9c:61:61:ec:
bb:c5:f1:f6:2a:7a:01:48:87:49:34:77:59:69:76:d1:a6:f6:
ee:3e:e8:0f:be:10:37:14:65:4a:34:9d:c5:60:b8:96:a9:dc:
f3:0a:db:b3:11:79:83:ea:3a:96:99:15:a9:43:e2:4f:59:ac:
f4:23:f3:d9:84:f1:9e:f6:2c:31:42:88:5a:62:7d:bd:0f:a6:
f4:a9:8b:33:ff:24:37:83:a1:9c:85:5b:f1:0c:17:bc:ab:eb:
40:2a:87:06:20:4c:00:34:70:ee:9a:8b:b0:85:30:79:d0:66:
9e:c9:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:15 2025 by rpki-client