Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File: zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier: aNFIXDLDVJTXnZQJ9Hie7XAG7C8FH4d0ikxLjNnpzUw=
Subject key identifier: 5D:93:BE:DC:E0:B9:F3:AA:CE:40:16:F2:C9:8A:E8:00:66:82:04:F2
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer: /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial: 01964F35A908D03F971947E022292A42AEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 18:00:38 +0000
Manifest this update: Sat 19 Apr 2025 18:00:38 +0000
Manifest next update: Sun 20 Apr 2025 18:00:38 +0000
Files and hashes: 1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: mlyGcUeJkvhDWAqOLxQHygG0YmNsJpCOb5OxJsmYHSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:a9:08:d0:3f:97:19:47:e0:22:29:2a:42:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
Validity
Not Before: Apr 19 18:00:38 2025 GMT
Not After : Apr 20 18:00:38 2025 GMT
Subject: CN=5d93bedce0b9f3aace4016f2c98ae800668204f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:1d:03:dc:07:33:4e:6b:72:98:1a:28:12:
ab:74:ac:1a:d3:08:95:62:44:05:2b:93:ab:c6:0b:
de:5d:ab:37:d4:6b:67:1a:46:44:d8:ec:ca:af:56:
4e:f7:48:c4:e2:45:1b:3d:9f:0f:e2:96:18:43:1f:
31:44:e5:62:8d:8a:da:0b:de:b0:79:ea:52:e5:ed:
03:7a:3d:ce:71:4b:c6:30:85:32:85:60:20:b7:b8:
80:57:98:e8:07:14:27:c3:72:4a:b8:b8:06:5b:38:
ce:0b:39:b4:a2:3a:95:89:97:6f:d4:44:b1:93:60:
6d:99:a7:3b:72:5c:32:05:c9:de:5c:d6:db:bf:16:
f9:89:48:51:ae:27:18:a4:c8:5c:6d:1f:18:b8:fb:
fa:f2:a5:58:85:13:cd:79:91:f7:f5:03:a1:ca:58:
e0:79:46:26:17:11:1e:f8:20:1f:b2:f8:bb:ab:19:
d4:91:f1:e0:05:3e:4c:bd:f9:1e:da:30:97:b2:36:
e8:51:ec:e0:55:57:62:55:e5:dd:06:e9:d5:25:50:
17:3f:02:5e:2b:0f:cb:ae:56:5d:77:22:22:b0:b8:
a8:71:4e:4e:6f:a0:28:4f:99:38:09:5c:e9:1e:78:
25:b4:62:ea:dc:f1:76:fc:2b:60:6a:95:4e:1a:b0:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:BE:DC:E0:B9:F3:AA:CE:40:16:F2:C9:8A:E8:00:66:82:04:F2
X509v3 Authority Key Identifier:
keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:10:cb:9f:7e:9d:1a:e4:f7:54:0a:da:33:00:55:ee:93:17:
4b:b2:e1:0f:5a:62:d3:93:37:00:74:5e:a2:3a:1a:84:6e:51:
ab:09:58:1a:76:e4:03:31:fe:4e:2f:1d:3e:ee:4a:a4:c7:a4:
c1:d3:dc:68:4a:5e:42:17:63:ff:0e:0c:3e:25:54:a1:b9:cb:
67:5b:b6:4a:fe:c2:7b:8b:fd:da:87:7f:71:a6:c3:1e:5d:6a:
99:49:eb:8c:52:d5:1f:73:2d:0b:9e:08:d0:69:83:ce:a2:fc:
56:a9:9a:67:bf:75:67:d0:d6:ee:c8:c6:71:2d:81:26:d8:26:
27:7c:7e:2d:4b:56:0f:8b:64:08:a0:76:57:cd:3a:04:a3:c8:
6c:db:14:5d:f6:d1:dd:d1:31:24:44:7f:09:f7:95:67:cc:41:
31:ab:be:fc:a5:2d:cd:93:dd:9d:76:44:c2:c1:f5:b0:c1:bf:
f9:6d:ff:0b:71:1b:3a:1e:bb:86:87:de:a5:0f:94:b4:fb:4e:
44:24:27:c2:a9:67:ba:35:e2:3c:38:6d:87:a8:6f:cf:55:1f:
93:74:0b:0e:eb:5f:17:a2:3e:23:8a:f7:01:68:18:68:bf:d7:
22:3c:c4:bb:94:ec:5e:8e:69:16:55:54:b6:a5:ef:84:8c:52:
83:b9:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:41:12 2025 by rpki-client