Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
File: zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json)
Hash identifier: hWpR1xWqZmeGqCukKpTVZb3y3ScLUZ+HBOK8j87gHe4=
Subject key identifier: 18:7D:B6:0A:9F:81:8C:0E:CB:94:77:53:EB:6A:8C:07:AB:FC:0F:BC
Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
Certificate issuer: /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Certificate serial: 0196542500A3C4493C883F351F40D19D3687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
Manifest number: 0DB1
Signing time: Sun 20 Apr 2025 17:00:33 +0000
Manifest this update: Sun 20 Apr 2025 17:00:33 +0000
Manifest next update: Mon 21 Apr 2025 17:00:33 +0000
Files and hashes: 1: JUuxGv_Lm_wDAeQKgUpF0b2dN-E.roa (hash: LxGPc9DuVZu7AFf7wSLnWbscOl013tf3bR9ibnxaHEM=)
2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: 0IY84wCHi04E6jYeI1rmU6hpl9gCKPtlnwJF8i5M0bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:00:a3:c4:49:3c:88:3f:35:1f:40:d1:9d:36:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354
Validity
Not Before: Apr 20 17:00:33 2025 GMT
Not After : Apr 21 17:00:33 2025 GMT
Subject: CN=187db60a9f818c0ecb947753eb6a8c07abfc0fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:6a:fb:42:05:0f:7a:1e:d2:00:6b:e2:3c:
da:fd:9c:98:3e:26:c0:8b:32:04:8f:1f:34:ed:f8:
b9:3b:38:03:dc:99:c9:0f:d6:bf:19:47:b9:d4:53:
5d:f5:75:6b:81:15:22:76:03:71:b4:6a:73:94:2e:
99:f8:9d:b7:3a:e4:d6:3f:46:5b:3e:14:2f:d8:2a:
36:59:1a:f7:52:e6:93:96:e0:f5:fb:b1:64:a2:05:
ec:72:86:73:6d:4b:47:f8:05:ed:7b:17:9e:32:3d:
4f:70:f5:e3:6c:b4:4e:c2:e7:2e:fa:be:ef:2c:9b:
9d:4e:e3:df:c2:c7:18:a1:32:d8:74:4a:48:6e:eb:
2f:f2:c7:56:01:45:09:94:1f:42:82:b6:b1:06:c2:
34:ec:12:78:f9:cc:45:40:27:e2:b9:8b:0e:90:e4:
03:b4:04:c5:a6:ca:27:c8:42:6c:a4:1a:f5:81:7e:
62:02:98:1f:4c:90:74:6f:16:a1:0e:fd:b2:ba:b6:
30:9f:6c:b0:46:54:bc:c0:de:88:a5:f3:88:cc:1f:
97:a9:66:de:87:d3:c2:8e:af:c6:f5:4d:75:fe:c7:
5d:c5:19:54:4d:bc:54:a7:fe:09:fa:fb:5c:5f:0c:
ba:21:c0:ba:58:59:24:95:8b:61:68:fe:32:19:3c:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7D:B6:0A:9F:81:8C:0E:CB:94:77:53:EB:6A:8C:07:AB:FC:0F:BC
X509v3 Authority Key Identifier:
keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c3:d2:2b:f3:81:a1:cc:ca:fb:9e:96:c5:22:54:31:08:31:
47:21:30:b8:46:38:6e:bc:65:64:7f:2c:5d:fc:33:42:81:79:
9f:2f:2e:ce:27:c4:28:cb:aa:6b:25:eb:d7:8a:7f:1a:6e:5a:
ef:6d:0c:d2:5f:54:0a:9f:6c:29:c1:88:81:65:2f:8a:b8:93:
15:7d:7d:7c:29:a8:99:15:08:0c:c6:2a:0d:fe:31:c1:0b:f9:
46:c1:f4:57:ed:d2:ba:92:fa:df:f0:1a:5a:b2:67:c7:92:b0:
1b:44:b3:3a:fd:ee:e1:c7:0e:c1:32:e6:e5:85:3d:60:8d:f1:
21:5f:28:3c:10:1f:c0:a0:5f:33:5d:40:0f:3b:de:63:2e:52:
47:68:8a:b7:06:4e:b5:37:a0:f1:c9:42:dc:4e:2b:28:6d:37:
a5:84:68:ea:f2:2b:ae:e1:73:50:57:c7:83:2c:8f:a4:0f:ba:
ac:b0:38:24:38:58:82:c4:04:78:e6:50:ab:42:9b:d8:36:be:
97:fb:f9:70:20:c8:38:37:a8:48:df:e1:a6:08:16:31:64:f0:
fc:76:57:c5:53:72:9b:f2:51:af:f6:95:75:55:9f:42:bd:ac:
0b:69:9b:08:5f:51:19:c3:e6:93:37:1a:d7:55:09:10:60:9b:
83:0c:ea:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:33 2025 by rpki-client