Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: qrLgV/GngVZwZyKrSiXScgDf3r/OVdQo/NkjDmmFigw=
Subject key identifier: E4:37:7F:CB:90:D5:A7:4A:7D:DF:4E:74:F9:40:13:B8:A6:36:83:36
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 0196556E450D98426E8753F72DA6FBBA159E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 23:00:12 +0000
Manifest this update: Sun 20 Apr 2025 23:00:12 +0000
Manifest next update: Mon 21 Apr 2025 23:00:12 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: XdSsQAanT6fZqftPnhAPiwLojLZJTNxH6izab2iFY9s=)
2: eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa (hash: 8mDJ4vba1XUdtAM7cN3synGzI+MOb3y37SdyPC9kyko=)
3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:45:0d:98:42:6e:87:53:f7:2d:a6:fb:ba:15:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Apr 20 23:00:12 2025 GMT
Not After : Apr 21 23:00:12 2025 GMT
Subject: CN=e4377fcb90d5a74a7ddf4e74f94013b8a6368336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:f3:49:3d:44:26:09:a7:75:05:f0:9c:9a:
fa:e2:dc:18:01:96:b7:b0:35:f0:9a:ab:96:63:f5:
80:72:81:99:9b:3f:2a:d5:20:3e:73:6a:cc:12:d7:
c8:33:b6:a3:06:c1:bb:40:7f:24:7a:6c:ed:d0:36:
7b:57:58:01:bc:71:0b:a9:7a:23:6e:80:d7:a2:54:
28:3f:e2:ae:3b:f1:74:a2:30:8c:a1:99:77:42:22:
20:f2:da:73:31:75:57:18:5c:35:54:bf:a3:68:52:
d1:aa:2b:be:7c:17:49:56:4f:47:2d:5e:82:d5:51:
97:94:ef:30:5d:b1:84:0b:34:8a:cb:52:71:76:f9:
e6:53:3c:43:50:ef:99:df:47:35:5d:7b:7e:6f:83:
93:0a:17:8a:c5:b6:bd:84:f2:c1:17:50:8a:77:d0:
3d:e0:14:86:dd:26:ad:b1:c6:80:ab:8a:6d:5e:f4:
f5:4e:cd:f1:00:f8:91:a1:4a:9d:fb:b7:32:a7:ad:
7d:a6:0c:75:c3:74:d8:dc:46:21:8e:95:5d:30:23:
57:c8:d9:a0:9c:11:3f:6f:e7:e6:3a:c5:dc:e5:a9:
7f:f5:18:95:54:fc:a9:9f:c4:75:6a:3d:e4:2e:e0:
87:d9:57:b8:3a:ae:8e:1f:17:61:40:fa:cf:d7:86:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:37:7F:CB:90:D5:A7:4A:7D:DF:4E:74:F9:40:13:B8:A6:36:83:36
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2c:bc:0f:87:6e:8f:7f:16:e3:49:e4:5d:9d:e6:1f:19:e4:
02:b9:41:11:b7:c5:d2:2a:5a:ad:76:a1:7a:7e:c1:be:2a:59:
d1:78:1e:09:5b:10:61:de:bf:e7:51:22:63:c0:38:4b:2f:e9:
7a:1f:7d:1c:b6:21:53:97:5c:74:2e:80:ce:88:f8:4e:ef:4d:
64:6c:aa:ed:0e:21:da:42:0a:bd:d5:2e:6d:5d:e3:e7:0c:97:
9e:74:57:0f:5b:ce:57:6e:79:6d:4c:42:db:ad:a9:97:3c:5a:
2a:59:55:c1:40:6f:c1:de:8e:cc:4d:a5:5b:3a:09:58:0c:5f:
aa:56:a6:ac:6d:cb:17:1f:09:79:8b:56:fd:0e:25:51:27:b0:
a5:9b:00:b0:a7:d2:cb:0f:ae:a6:10:f1:e7:a4:76:74:08:a4:
cb:53:79:36:ad:47:61:93:26:48:28:a9:32:0e:68:32:e5:d8:
88:c1:53:9c:d1:05:f6:a3:5a:ab:ba:2e:de:af:5e:4c:47:13:
14:1d:30:46:1d:b7:c7:75:6c:03:32:94:d3:df:bd:79:22:68:
c7:f6:b3:4b:ef:a9:54:10:ec:d1:2d:89:da:7b:20:f5:30:58:
03:d8:7a:a9:3b:6d:5c:3e:75:6e:d1:27:e3:f9:27:f9:02:12:
84:3d:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:46:11 2025 by rpki-client