Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: baz0wG9AD1HXVJX2mrJoXzrzQx3cKsJ3lg3i6Va7f4w=
Subject key identifier: DF:1C:E3:21:19:FD:74:1C:66:1F:98:A3:5D:5E:DD:43:0B:03:E4:3B
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01962671331B8381C9D2DF2B6379888BB854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 14F9
Signing time: Fri 11 Apr 2025 20:01:14 +0000
Manifest this update: Fri 11 Apr 2025 20:01:14 +0000
Manifest next update: Sat 12 Apr 2025 20:01:14 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: SxJxtoiuoBUIjCAAQbke9ZEqp4lP+pIeKimmw4vtvEs=)
2: VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa (hash: Ey27v1VSvBG1kOCOG9N8A9sC+9f+2KfQyTxQVT7GEW4=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:71:33:1b:83:81:c9:d2:df:2b:63:79:88:8b:b8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Apr 11 20:01:14 2025 GMT
Not After : Apr 12 20:01:14 2025 GMT
Subject: CN=df1ce32119fd741c661f98a35d5edd430b03e43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6e:b6:1e:b0:c1:d4:c2:16:46:3f:d8:d9:d6:
53:e4:93:7e:f3:0b:e1:51:c4:63:83:91:6b:59:cc:
4c:e8:d6:be:43:f9:4f:9a:17:47:75:61:ac:89:a7:
54:0f:e9:89:fe:32:5f:d7:94:91:c6:fa:09:3f:59:
28:37:3d:bb:56:a7:20:68:67:96:69:b0:66:77:55:
da:3e:cb:db:1b:aa:b6:84:36:b6:05:1b:dd:da:7c:
4d:9b:4a:0c:0f:a4:4a:cc:12:af:1a:a0:d2:dc:b5:
97:d8:16:9a:0f:bf:81:f7:10:07:29:85:4f:1a:c2:
57:da:6b:b0:7f:c6:9e:18:76:ea:b6:7a:dc:25:3a:
ad:36:66:17:7d:08:bc:63:3c:c0:e9:92:ad:a1:ee:
b0:42:ae:b8:9f:41:26:e8:ca:ba:fa:13:5b:8b:47:
4a:d3:f9:72:d9:26:52:b2:6b:cb:f3:f1:46:e7:74:
8a:6f:23:99:b1:22:07:8e:62:7c:09:68:7e:31:53:
20:c3:07:32:d4:c3:9b:ff:5b:87:96:0a:6b:2f:5b:
51:93:c2:b0:53:85:06:84:34:ac:54:12:20:74:34:
cf:3f:e8:4f:9e:e0:62:28:df:74:00:1b:c9:38:2d:
a4:19:fa:44:77:36:b1:26:89:26:0c:c7:52:99:0a:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:E3:21:19:FD:74:1C:66:1F:98:A3:5D:5E:DD:43:0B:03:E4:3B
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f4:43:ce:54:48:eb:39:10:61:71:cb:dd:35:fa:2b:02:8a:
5a:4b:02:7f:fe:ae:e5:c6:53:48:ca:ba:a9:03:4d:bb:e4:39:
28:8a:f8:fa:df:8d:68:e9:34:21:8b:3b:84:7d:4f:b9:b5:7b:
e8:cd:b6:93:6d:0f:e2:4d:11:e0:a9:86:8e:49:96:fd:db:79:
fe:1f:e3:69:28:cb:9f:8a:4b:59:43:95:96:ad:aa:ec:fd:88:
82:d5:4c:fc:ab:bb:e2:8a:d7:e1:46:eb:a8:b6:df:fe:e4:7a:
fa:49:4d:91:d4:c3:44:26:43:2e:88:82:17:4a:f8:59:1a:56:
f2:0a:11:d8:a9:ca:06:56:3e:ea:ba:3d:e5:5a:05:84:fd:58:
f7:d7:2c:54:0a:d9:3e:e4:d2:49:42:87:d8:58:f3:ca:80:37:
0a:ba:7f:0e:ba:54:bb:16:43:89:c3:41:d8:52:21:72:2e:2c:
32:b3:89:34:8e:c2:99:06:a1:76:20:d1:70:a9:53:b4:d7:51:
c0:a0:dc:68:76:8c:36:a5:20:f6:15:56:0a:f8:30:17:a0:24:
d3:40:03:0b:b1:6a:5b:7c:76:69:05:a0:6c:6d:0c:80:6f:e9:
43:04:c6:c7:e2:ab:ea:25:c2:3a:12:dd:ba:57:d1:2d:5d:5b:
78:dc:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:36 2025 by rpki-client