Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: UpNPpbA9u1lQB+Ia1XK/gZBV9rU0tvL5/fPezF3wgHg=
Subject key identifier: 25:4F:36:3F:44:87:71:F8:96:7B:FB:C0:C0:81:73:2B:8D:75:23:3C
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 01965DCD21ABFCDA1EFCBCF720045D244940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 0E69
Signing time: Tue 22 Apr 2025 14:00:46 +0000
Manifest this update: Tue 22 Apr 2025 14:00:46 +0000
Manifest next update: Wed 23 Apr 2025 14:00:46 +0000
Files and hashes: 1: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: VfsDm0vx24VBc/h2fz9/XiIIH5mYDmmTggzBD7Aj2t0=)
2: qgk9CcOKJeHB4UQVEukQ6XNupOQ.roa (hash: xzLrw8z5yp8njdLFgaPHYNNpknilQZqudE/wiOBlJL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:21:ab:fc:da:1e:fc:bc:f7:20:04:5d:24:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Apr 22 14:00:46 2025 GMT
Not After : Apr 23 14:00:46 2025 GMT
Subject: CN=254f363f448771f8967bfbc0c081732b8d75233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:3e:77:65:25:67:4c:4f:40:35:dc:f2:24:
b0:fb:17:14:46:4b:40:8d:fc:db:bc:97:ed:93:77:
c8:77:9a:b6:81:ab:6e:13:c0:40:59:fd:5c:ea:6a:
92:39:4a:b3:c5:13:16:23:e2:5a:be:0a:57:d4:a5:
be:33:bf:ad:ff:ca:30:03:87:1a:02:9f:9d:61:c5:
11:0c:92:a2:06:59:36:b3:9d:c3:61:e2:5a:07:73:
a1:ff:9c:cb:43:2e:53:51:79:c5:1a:e9:8f:05:59:
24:61:3c:db:75:d7:54:bc:79:e2:b5:9f:1c:42:f3:
c1:14:09:bb:76:67:56:25:ab:16:b4:a8:9f:80:41:
f0:c7:52:6b:e6:84:06:b4:42:cd:bc:87:e3:99:ab:
68:bd:45:ed:11:1c:6b:1c:dc:69:82:fd:9e:f4:17:
df:cc:6b:a0:32:e6:ed:cd:d0:9a:32:75:84:74:be:
97:09:a5:de:bf:1f:4a:7a:a9:ce:fb:3e:33:0e:af:
45:83:b1:d3:a1:53:4e:72:4a:c4:8e:fb:b6:bf:94:
b1:c2:07:8a:c4:c9:4c:f2:63:ff:a7:fa:64:58:c7:
28:47:61:79:4f:0e:de:34:64:43:72:71:5d:b1:7f:
05:cf:62:77:af:e2:65:ec:e9:bf:20:62:dd:9e:03:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4F:36:3F:44:87:71:F8:96:7B:FB:C0:C0:81:73:2B:8D:75:23:3C
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:e8:cd:96:62:33:70:11:07:fe:f8:24:02:59:0b:cf:cc:
04:89:b3:72:57:4d:7e:03:87:99:9d:8a:78:1b:c0:84:cb:b2:
dc:25:d3:7d:63:aa:7c:1a:ff:ac:29:11:58:e2:a2:62:42:cb:
e7:94:3a:63:c4:c0:7f:75:99:51:a8:14:2e:0b:ab:63:47:fe:
03:33:c1:fa:1a:76:e1:07:52:2e:f1:37:dc:2e:29:d5:e6:45:
9e:93:2f:32:80:b4:86:e1:9b:04:3b:37:7a:fe:e2:9f:14:4b:
5b:12:2d:f0:d8:60:de:7c:04:c3:28:2f:f9:d6:b8:2f:19:29:
36:28:1a:0e:cf:71:c7:9a:cb:34:58:8a:77:69:c7:42:d9:f0:
b4:04:f1:ab:db:13:c7:97:dc:68:ed:35:ef:7f:64:31:9d:c3:
98:9a:12:13:1d:da:e9:00:f2:33:0d:96:1b:98:71:f1:6f:14:
63:09:4c:39:b0:53:ac:60:b7:4c:02:ee:50:e2:a4:4c:ff:66:
ef:e9:e2:f0:e1:00:79:a6:68:c2:41:7f:ff:cf:4a:57:61:11:
2f:eb:45:a0:68:f9:c1:bf:33:f6:e9:f0:fc:1c:de:69:df:e0:
a8:a7:5c:50:81:6b:71:c1:85:7a:8b:3e:74:c8:7a:0d:98:fd:
81:47:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:40:27 2025 by rpki-client