Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier: c4esikmpa5qpWmcMpuWbqIoHVN8BN87eSXNrE5v0wec=
Subject key identifier: 55:6D:0B:0F:AE:F2:1F:E3:E2:A4:9B:F3:B7:13:CE:4B:62:23:0D:B5
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 01964FA31CA37EA6ACFFA3D87523F0A13D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number: 057B
Signing time: Sat 19 Apr 2025 20:00:11 +0000
Manifest this update: Sat 19 Apr 2025 20:00:11 +0000
Manifest next update: Sun 20 Apr 2025 20:00:11 +0000
Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: w5LjtiPVDbYxy9ByNIn5rjW72iv1ES5+cCX+jplhxE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:1c:a3:7e:a6:ac:ff:a3:d8:75:23:f0:a1:3d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Apr 19 20:00:11 2025 GMT
Not After : Apr 20 20:00:11 2025 GMT
Subject: CN=556d0b0faef21fe3e2a49bf3b713ce4b62230db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:00:48:71:e4:92:ae:76:37:80:23:f8:68:52:
5d:27:33:eb:d8:df:06:8a:69:13:02:86:95:19:5d:
37:fb:10:e6:9a:e9:24:4e:43:03:a1:9c:21:df:b6:
0a:2d:88:e5:6f:ae:89:82:31:3c:fe:25:d7:6d:47:
c2:00:e1:16:f3:18:89:4e:0d:8c:f4:7b:f2:1f:6f:
dd:21:95:a4:b2:2e:0c:90:33:94:df:6b:47:ee:9f:
66:00:ec:c9:c6:ab:f1:a9:a1:90:ef:c9:b3:35:c6:
44:d4:d2:3c:de:4c:22:4c:8a:69:75:56:ed:6e:bf:
5f:20:c5:e2:26:51:2e:c7:fb:dd:4b:86:53:a8:84:
fc:5c:e6:5b:93:ff:c1:64:50:d5:5c:1c:3d:37:46:
de:dd:a1:41:36:f3:f5:da:d0:03:29:bb:36:73:6f:
fc:25:87:b8:83:f5:e1:2b:f6:90:bf:65:82:fb:bd:
45:14:3c:5c:78:64:31:9a:d7:b1:19:7e:72:91:f4:
08:3c:1b:63:f5:3b:ce:c0:f0:14:d5:c7:34:c0:ad:
ac:b9:9b:66:c4:e6:f1:12:2c:fc:70:fb:2d:93:6d:
52:2a:ef:ac:33:b0:53:26:ab:72:dc:a8:07:28:92:
ef:c3:4d:8e:fb:ba:cd:a5:89:89:b8:fa:e9:55:b7:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:0B:0F:AE:F2:1F:E3:E2:A4:9B:F3:B7:13:CE:4B:62:23:0D:B5
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:ab:25:5a:8c:26:6d:96:d0:86:b1:e0:eb:f2:b6:15:fa:
10:82:00:b0:d6:eb:60:57:15:c6:03:9d:2b:e9:01:df:55:31:
5e:3e:05:e7:cf:8e:22:81:95:23:59:df:ad:35:ea:1f:52:8a:
38:19:83:ff:c7:91:16:73:72:35:c5:33:c1:9d:c1:23:48:4e:
6a:44:32:9a:54:d6:93:29:b1:21:db:08:b4:ff:61:b2:a9:8d:
47:0e:4c:1f:6f:c9:6a:d4:07:e9:cd:84:5f:6c:f8:ea:ab:1b:
35:88:73:92:8f:3f:61:e6:fc:6c:d3:46:cf:8f:ee:36:59:5a:
27:44:11:83:a7:a5:36:82:ff:48:50:01:3a:c3:7d:ee:32:c4:
81:b7:41:5f:bc:24:e0:3e:60:47:48:4f:4b:bb:fd:78:4f:94:
c7:7f:80:df:49:22:c7:81:d0:13:69:84:c3:b1:4d:38:29:33:
2d:6b:83:48:01:da:d7:de:a7:75:64:24:26:59:c9:11:7a:d9:
45:a9:65:0f:3b:ee:f1:9d:51:e3:6f:69:96:6b:c2:80:5c:89:
5e:e2:6a:c4:55:78:03:c8:07:6e:b2:36:1b:cf:1d:fd:4b:f6:
21:6e:91:d5:bc:c9:52:e3:ae:33:c9:3a:29:21:25:83:1e:e5:
90:83:9e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:42:29 2025 by rpki-client