Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: HwbbeItNT6lZD33RVTd11tYu63ewOQUnP2567EPFYTI=
Subject key identifier: 14:6F:67:D4:26:CE:11:8C:AB:93:69:4E:C3:0A:4F:10:26:23:57:98
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 0196029B7B08481848E61D861B4012B4B1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 11E3
Signing time: Fri 04 Apr 2025 21:01:06 +0000
Manifest this update: Fri 04 Apr 2025 21:01:06 +0000
Manifest next update: Sat 05 Apr 2025 21:01:06 +0000
Files and hashes: 1: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (hash: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=)
2: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (hash: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: mlQRlWxjGMDrBoseXDNwzYqxk+yMbXrm8qldu4hVO8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:9b:7b:08:48:18:48:e6:1d:86:1b:40:12:b4:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Apr 4 21:01:06 2025 GMT
Not After : Apr 5 21:01:06 2025 GMT
Subject: CN=146f67d426ce118cab93694ec30a4f1026235798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:70:70:27:03:4c:57:24:ee:ed:ef:8f:5f:e4:
f2:32:70:d0:24:a8:34:da:00:a1:33:e8:21:0b:27:
53:e7:16:21:c4:33:48:17:c9:55:78:78:10:d1:de:
25:c1:15:83:d8:60:de:74:15:2e:f5:01:b4:4f:da:
3e:3c:e7:6e:9f:d6:ff:10:1c:e5:ba:c5:2b:d0:32:
90:c6:9b:57:9b:c5:2c:4e:b8:7e:bc:12:d8:46:cd:
18:9e:41:51:72:ab:f0:39:04:19:8b:cd:22:91:25:
4e:04:d6:a0:66:63:70:5e:cf:a7:4c:d8:91:c6:f7:
eb:b4:b5:7f:28:0b:ba:f1:c0:b2:6c:cf:90:84:4d:
e8:36:5f:6e:03:f3:dd:0d:63:95:66:5a:b8:89:f6:
c4:fa:2a:ba:6e:b4:ab:2f:2e:52:97:59:ab:f9:10:
dd:7d:37:ba:fe:74:d1:84:d6:be:97:26:9e:9c:55:
28:55:c0:d0:68:4d:db:14:91:11:ea:c9:57:23:54:
1c:45:c7:9d:46:85:bf:f3:37:a1:66:4f:0e:56:1b:
c0:94:14:85:65:9d:f8:61:90:8b:16:54:68:06:d4:
14:89:da:50:f5:6e:b4:d6:6f:12:f3:b8:6f:95:8a:
94:1b:b4:00:d5:b6:83:01:d1:90:3c:f9:9c:86:6a:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6F:67:D4:26:CE:11:8C:AB:93:69:4E:C3:0A:4F:10:26:23:57:98
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b7:75:b6:97:a6:66:1d:79:92:c4:5b:84:03:fc:67:9c:57:
55:1c:e7:6f:ff:88:c6:d0:63:cc:5b:7f:d7:4a:de:ec:3c:15:
95:9e:74:ed:ed:ed:5b:18:0d:13:52:fe:0f:cd:5c:a5:f8:8a:
65:c8:39:fe:da:dc:0e:1d:46:61:74:a8:8c:b4:e7:38:09:09:
62:d9:63:74:b6:e2:ec:79:66:44:e3:fa:f4:e0:6c:d6:10:10:
90:1a:4f:e2:24:55:38:c0:57:c1:09:12:cc:2b:d1:27:27:af:
ed:3f:22:09:cb:35:5c:74:a0:d5:64:7b:08:59:17:4d:6a:be:
d0:f5:1b:e1:5d:41:d5:b9:2c:4b:a9:ab:37:ea:68:a7:1d:74:
4c:0f:7f:9f:14:73:67:d7:51:77:c3:d2:ea:e1:82:d6:3a:9c:
ab:33:fa:ec:64:8e:5d:dd:5e:52:bd:10:37:ab:ea:cd:a6:f4:
d0:3e:a2:f4:1b:66:82:a2:3a:0a:e4:64:9a:e6:2c:fd:23:2d:
8d:7b:bc:10:45:f5:07:4f:d7:63:28:ef:6c:e2:76:0e:f7:ca:
e2:61:e4:59:a3:7c:ec:a7:8b:a8:81:4a:8c:c0:c4:98:cf:76:
18:d6:7c:74:c8:c8:9d:20:19:6e:86:a4:fb:24:76:e1:44:46:
f7:ac:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:44 2025 by rpki-client