Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: OQSoDlqRxkuQ8Nj+aHToWpWPs3cIUzkwKvUV16/5VGw=
Subject key identifier: 16:B4:F1:3F:37:D7:FC:61:1D:2E:8A:08:82:46:3E:C8:BB:D3:56:02
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 019650B6227A2EBE9F1236A840E782416F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 01D3
Signing time: Sun 20 Apr 2025 01:00:35 +0000
Manifest this update: Sun 20 Apr 2025 01:00:35 +0000
Manifest next update: Mon 21 Apr 2025 01:00:35 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: qFMUVefZB2SE+gzaeWC2pMB8YBobVe1TM4BMOa6/edA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:22:7a:2e:be:9f:12:36:a8:40:e7:82:41:6f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Apr 20 01:00:35 2025 GMT
Not After : Apr 21 01:00:35 2025 GMT
Subject: CN=16b4f13f37d7fc611d2e8a0882463ec8bbd35602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:ce:81:08:ed:22:93:73:39:ab:2e:fa:d6:
69:f8:c4:02:0c:79:de:33:11:75:9f:1c:13:da:6e:
b6:d3:61:7a:ca:b2:17:27:e3:1d:ea:07:36:7f:27:
7d:dd:6f:98:a4:94:91:e3:b6:a5:f9:e1:e4:d3:5a:
79:00:91:3e:a9:21:58:13:6a:eb:a5:2c:66:4b:c8:
7e:7a:a3:9e:1b:66:94:ee:c0:fa:59:b2:80:d9:62:
ba:12:2c:11:55:f7:0d:6e:b9:99:19:7a:4f:b8:54:
ff:c6:b3:55:71:28:71:ec:d0:61:f2:86:3f:f2:12:
45:5f:f2:66:7d:4f:5a:19:ad:1f:f5:09:b8:77:06:
64:6a:a1:f1:f0:42:f0:95:e2:9d:7c:2f:68:b3:5e:
67:64:ef:9d:66:43:04:50:03:5e:f2:cd:55:6e:a2:
a1:c1:53:4b:d6:ad:91:98:ca:f8:ce:48:d0:03:31:
22:08:c3:0f:ed:41:b9:96:fc:93:f6:64:fb:4f:19:
bf:e6:66:21:3b:bb:d2:c2:c3:bd:4f:cf:b3:e5:2a:
eb:e4:b7:2e:d7:82:4b:35:a3:a2:a3:d2:0c:be:74:
60:cb:b2:72:9b:1f:28:8f:ec:39:02:24:e2:34:36:
ac:34:4c:f8:73:52:cc:f3:65:a3:15:90:b7:89:c2:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:F1:3F:37:D7:FC:61:1D:2E:8A:08:82:46:3E:C8:BB:D3:56:02
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:78:7a:80:99:dc:d3:4e:d0:70:e1:bb:7c:dd:6a:c3:9b:51:
bf:5d:4b:df:33:82:d9:3d:db:1f:90:3c:6f:3b:f1:0a:83:1d:
b9:09:66:76:c7:96:86:91:7f:0c:e2:b9:7e:07:c9:d6:a7:65:
8e:02:b4:a8:5e:11:7e:2f:75:e9:e7:28:ac:d2:c5:06:8b:24:
4a:2c:0e:f0:65:ba:dc:57:b4:fd:4c:ba:60:b8:04:5e:a4:c0:
8e:66:48:8e:14:27:db:b7:88:b9:c4:3e:fa:0d:36:12:30:47:
56:8a:d1:ba:8e:82:7b:67:ab:b6:18:94:2d:9f:a7:fc:6f:19:
11:a2:04:65:c3:fe:3f:61:03:72:21:5c:a5:aa:19:5d:a8:73:
06:0f:79:b0:db:09:72:43:c7:ae:88:47:3f:cf:3b:45:55:dc:
c7:cf:42:96:58:5b:16:90:da:2f:a7:70:ae:4c:a3:05:6e:31:
97:d5:bd:1f:bb:c8:2f:4c:b6:cd:26:a3:f3:0d:92:8a:48:19:
6f:04:26:4b:80:0a:7a:19:bc:c4:70:30:83:31:58:b4:3d:af:
3d:92:4a:7d:4f:04:46:5c:1f:0f:e9:ec:0c:0d:72:da:b4:fb:
f8:1b:d5:af:24:6c:b2:f3:a5:f1:d4:32:ac:7a:37:f5:cd:4f:
85:e2:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:51 2025 by rpki-client